<div dir="ltr">dear all,<br>I am new in settting RT authentication with LDAP against ADC. i installed RT 3.0.8 and configured with Apache and given in the bestpractical. now i like to authenticate ldap users (valid user only).<br>
i successfully opens a webpage to login with the user. when i sign in the logs somehow returns following msg;<br><br><br><b>[error]: FAILED LOGIN for user1 from 10.0.0.1 (/opt/rt3/bin/../lib/RT/Interface/Web.pm:424)</b><br>
<br>I know its a common err, and it ought to be solved but i can't find a solution so far, could you guys help me figuring out the problems.<br><br><br>Following are my conf;<br><br><b>RT_SiteConfig.pm</b><br>-----------------------------<br>
<br><div style="margin-left: 40px;"><i>################ Usign WebExternAuth (Apache Authentication) ##################<br><br># tells RT to use the REMOTE_USER provided by the web server<br>Set($WebExternalAuth , 1);<br><br>
# tells RT to display its normal login screen if REMOTE_USER fails<br>Set($WebFallbackToInternalAuth , 1);<br><br># tells RT to create users automatically if no user matching REMOTE_USER is found<br>Set($WebExternalAuto , 1);<br>
<br><br>################ Usign RT::Authen::ExternalAuth ##################<br><br>Set($rtname, 'cmtest01.fleetboard.dmz');<br>Set($Organization, 'cmtest01.fleetboard.dmz');<br>Set($CorrespondAddress , 'rt_user@cmtest01.fleetboard.dmz');<br>
Set($CommentAddress , 'rt_user@cmtest01.fleetboard.dmz');<br>Set($OwnerEmail , 'root');<br>Set($MaxAttachmentSize , 10000000);<br>Set($WebBaseURL, "<a href="http://cmtest01.fleetboard.dmz/rt">http://cmtest01.fleetboard.dmz/rt</a>");<br>
Set($WebImagesURL , $WebPath . "/NoAuth/images/");<br>Set($LogoURL, $WebImagesURL . "bplogo.gif");<br>Set($LogoLinkURL, '<a href="http://cmtest01.fleetboard.dmz">http://cmtest01.fleetboard.dmz</a>');<br>
Set($LogoImageURL, $WebImagesURL . "bplogo.gif");<br>Set($LogoAltText, "Daimler Fleetboard GmbH");<br><br>Set($RTAddressRegexp , '^[A-Za-z0-9][A-Za-z0-9_\.\-]{0,}@([A-Za-z0-9_\-]{1,}[\.]{1,1})+([A-Za-z]{2,5})$' );<br>
<br> # THE DATABASE:<br><br>Set($DatabaseType, 'mysql'); Set($DatabaseUser , 'rt_user'); Set($DatabasePassword , ''); Set($DatabaseName , 'rt3');<br><br> # THE WEBSERVER:<br><br>Set($WebPath , "");<br>
#Set($WebPath , "/");<br>Set( @Plugins, qw(RT::Authen::ExternalAuth) );<br>#Set(@Plugins,(qw(Extension::QuickDelete RT::FM)));<br>1;<br></i></div><i><br><br></i><b>Apach</b><i><b>e vhost.conf:<br>------------------------------<br>
<br></b></i><div style="margin-left: 40px;"><i><VirtualHost *:80><br> ServerName cmtest01.fleetboard.dmz<br><br> #SSLEngine ON<br> #SSLCertificateFile /root/certs/tickets.fleetboard.net.cert<br> #SSLCertificateKeyFile /root/certs/fbweb01.key<br>
<br> # DocumentRoot: The directory out of which you will serve your<br> # documents. By default, all requests are taken from this directory, but<br> # symbolic links and aliases may be used to point to other locations.<br>
<br> #DocumentRoot /srv/www/vhosts/<a href="http://cmtest01.fleetboard.net/rt/">cmtest01.fleetboard.net/rt/</a><br> AddHandler fastcgi-script fcgi<br> Alias /rt "/opt/rt3/share/html"<br> <Location /><br>
Allow from all<br> Satisfy any<br> allow from localhost<br><br> AuthUserFile /dev/null<br> AuthName "Hello LDAP"<br> AuthBasicAuthoritative Off<br> AuthType Basic<br>
</i></div><div style="margin-left: 40px;"><div style="margin-left: 40px;"><i>AuthBasicAuthoritative Off<br> AuthType Basic<br> AuthLDAPURL "ldap://ladapserverip:port/OU=ldapou,DC=intranet,DC=fb,DC=com?sAMAccountName?sub?(objectClass=*)"<br>
AuthLDAPBindDN "CN=LDAPs Subversion,OU=P-R,OU=P,OU=ldapou,DC=intranet,DC=fb,DC=com"<br> AuthLDAPBindPassword "ldappassword"<br> require valid-user<br> </Location><br></i></div>
<i>AddDefaultCharset UTF-8<br> PerlRequire /opt/rt3/bin/<a href="http://webmux.pl">webmux.pl</a><br><br> <Directory /srv/www/vhosts/<a href="http://cmtest01.fleetboard.net/rt/">cmtest01.fleetboard.net/rt/</a>><br>
Order allow,deny<br> Allow from all<br> DirectoryIndex index.html index.php<br> </Directory><br><br> <Directory /opt/rt3/share/html/><br> Order allow,deny<br> Allow from all<br> Options Indexes FollowSymLinks<br>
DirectoryIndex index.html index.php<br> SetHandler perl-script<br> PerlResponseHandler RT::Mason<br> </Directory><br></i></div><div style="margin-left: 40px;"><i></VirtualHost></i><br></div>
<div><div style="margin-left: 40px;"><br><br></div>Looking forward<br><br></div><div><div>regards<br><br>haris<br>
</div></div></div>