Just as a follow up. I tried another interface at random (modperl2).... and it works. The system no longer prompts me for a username/password. I go directly into the application. If I turn off the authentication, I end up at an RT login screen w/o a username or password field (so.... more or less what I expect).<br>
<br>So if you want to use $WebExternalAuth - don't use SpeedyCGI<br><br>-Jon<br><br><div class="gmail_quote">On Mon, Sep 13, 2010 at 14:26, Jon Davis <span dir="ltr"><<a href="mailto:maillist@konsoletek.com">maillist@konsoletek.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Ok, so my guess was right, loginscreen = bad. So whats the recommended interface? <br><font color="#888888"><br>
-Jon<br><br></font><div class="gmail_quote"><div><div></div><div class="h5">On Mon, Sep 13, 2010 at 14:17, Kevin Falcone <span dir="ltr"><<a href="mailto:falcone@bestpractical.com" target="_blank">falcone@bestpractical.com</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div><div></div><div class="h5"><div>On Mon, Sep 13, 2010 at 03:55:36PM -0500, Peter Barton wrote:<br>
> Have you setup Auth Priority?<br>
<br>
</div>Peter -<br>
<br>
RT's WebExternalAuth is not the same as RT::Authen::ExternalAuth<br>
<br>
Jon -<br>
<br>
If you're still seeing an RT login screen with<br>
WebFallbackToInternalAuth set to 0, then something wrong is happening,<br>
since that setting disables chunks of the Login element<br>
<br>
My guess would be that using the speedycgi interface (which really<br>
isn't widely used) is causing REMOTE_USER not to be propagated<br>
properly.<br>
<font color="#888888"><br>
-kevin<br>
</font><div><br>
> Set($ExternalAuthPriority, [ 'My_LDAP', 'My_LDAP2' ]);<br>
> And info priority?<br>
> Set($ExternalInfoPriority, [ 'My_LDAP', 'My_LDAP2' ]);<br>
><br>
</div><div><div></div><div>> From: <a href="mailto:rt-users-bounces@lists.bestpractical.com" target="_blank">rt-users-bounces@lists.bestpractical.com</a><br>
> [mailto:<a href="mailto:rt-users-bounces@lists.bestpractical.com" target="_blank">rt-users-bounces@lists.bestpractical.com</a>] On Behalf Of Jon Davis<br>
> Sent: Monday, September 13, 2010 3:23 PM<br>
> To: rt-users<br>
> Subject: [rt-users] WebExternalAuth not working at all<br>
><br>
><br>
><br>
> I'm currently running RT 3.8.7 under Ubuntu 10.04 with Apache 2 & SpeedyCGI. I am trying to<br>
> use WebExternalAuth for authentication since I have my Apache install talking to OpenDS<br>
> (LDAP).<br>
><br>
> I have the following config in my RT_SiteConfig.pm<br>
> Set($WebExternalAuth , 1);<br>
> Set($WebFallbackToInternalAuth , 0);<br>
> #Set($WebExternalGecos , 0);<br>
> Set($WebExternalAuto , 1);<br>
> #Set($AutoCreate, {Privileged => 1});<br>
> #Set($WebExternalAuthContinuous, 1);<br>
><br>
> Apache prompts me for a password, and authenticates me. In the Apache logs [1], it shows my<br>
> username... but RT keeps dumping me back to the login screen. I'd presum seeting<br>
> WebFallBackToInteralAuth to zero or indef to make that NOT happen. I'm at my wits end trying<br>
> to figure out what is going on, why it wont authenticate from apache and why it gives me a<br>
> login screen even though it isn't supposed to. I've tried every variation of fiddling with<br>
> the configs and I just dont know where to find the debug information nessiary to fix this.<br>
><br>
> Please, any help would be GREATLY appreciated<br>
> -Jon<br>
><br>
> [1] 192.168.38.170 - jdavis [13/Sep/2010:12:56:59 -0700] "GET /rt/ HTTP/1.1" 200 2212 "-"<br>
> "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.1.6) Gecko/20091201<br>
> Firefox/3.5.6"<br>
</div></div><br><br></div></div><div class="im">
RT Training in Washington DC, USA on Oct 25 & 26 2010<br>
Last one this year -- Learn how to get the most out of RT!<br></div></blockquote></div><br>
</blockquote></div><br>