<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi Kevin,<br>
<br>
Much appreciated. Using alternate email addresses
instead of alternate uids sounds even better. Is this url:
<a class="moz-txt-link-freetext" href="http://requesttracker.wikia.com/wiki/AutoCreateAndCanonicalizeUserInfo">http://requesttracker.wikia.com/wiki/AutoCreateAndCanonicalizeUserInfo</a>
what I need? If not, can you please point me to a page where
step-by-step instruction is.<br>
<br>
Again, many thanks...<br>
Hossein<br>
<br>
On 9/13/2011 2:42 PM, Kevin Falcone wrote:
<blockquote cite="mid:20110913214253.GU71957@jibsheet.com"
type="cite">
<pre wrap="">On Tue, Sep 13, 2011 at 12:04:44PM -0700, Hossein Rafighi wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hi all,
We have RT4.0 with RT::Authen::ExternalAuth. In attr_match_list
section we have:
'attr_match_list' => [ 'Name',
'EmailAddress',
'RealName',
],
</pre>
</blockquote>
<pre wrap="">
You really don't want RealName there, otherwise
RT::Authen::ExternalAuth will disallow two people named Bob Smith.
</pre>
<blockquote type="cite">
<pre wrap="">'attr_map' => { 'Name' => 'uid',
'EmailAddress' => 'mail',
'RealName' => 'cn',
}
However, on our ldap (openldap) a typical user has a uid and cn. For
instance, my info on the ldap is:
dn: uid=hossein,ou=People,o=TRIUMF
uid: hossein
cn: Hossein Rafighi
sn: Rafighi
mail: <a class="moz-txt-link-abbreviated" href="mailto:hossein@triumf.ca">hossein@triumf.ca</a>
mail: <a class="moz-txt-link-abbreviated" href="mailto:Hossein.Rafighi@triumf.ca">Hossein.Rafighi@triumf.ca</a>
givenName: Hossein
Is it possible to alter the attr_match, attr_map, or any other
attribute in RT to authenticate based on uid or cn, and not just
uid? I tried changing various settings, but to no avail.
</pre>
</blockquote>
<pre wrap="">
You'd have to extend the module to use more than just the Name in the
query it runs for DN. There's a branch in the repo for refactoring
some of that code, but it concentrates on alternate email addresses
not alternate uids. It may make doing what you want easier though.
-kevin
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<pre class="moz-signature" cols="72">--
_____ _____ _____ _ _ _ _ ____ Hossein Rafighi
|_ _|| _ \ |_ _|| | | || \_/ || __|TRIUMF, 4004 Wesbrook Mall
| | | |_| ) | | | | | || || |__ Vancouver BC, CANADA, V6T 2A3
| | | _ / | | | \_/ || \_/ || __|Voice: (604) 222-1047
| | | | \ \ _| |_ | || | | || | Fax: (604) 222-1074
|_| |_| \_\|_____| \___/ |_| |_||_| Website: <a class="moz-txt-link-freetext" href="http://www.triumf.ca">http://www.triumf.ca</a>
</pre>
</body>
</html>