<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<title></title>
</head>
<body text="#000000" bgcolor="#ffffff">
Le 11/10/2011 17:34, Kevin Falcone a écrit :
<blockquote cite="mid:20111011153429.GC45425@jibsheet.com"
type="cite">
<pre wrap="">On Mon, Oct 10, 2011 at 08:31:14AM +0200, jm130794 wrote:
</pre>
<blockquote type="cite">
<pre wrap=""> Hello,
I try to authenticate my users with Kerberos. In my RT_SiteConfig.pm, I have :
</pre>
</blockquote>
<pre wrap="">
Kerberos usually implies mod_auth_kerb, not RT::Authen::ExternalAuth.
</pre>
<blockquote type="cite">
<pre wrap=""> ...
My problem : now, I can't connect to RT (Web interface) with my account which is already
created. I get this :
Error
Cannot create user : Name in use
</pre>
</blockquote>
<pre wrap="">
What's in your error logs? Make sure you turn your logging up to debug.
-kevin
</pre>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
--------
RT Training Sessions (<a class="moz-txt-link-freetext" href="http://bestpractical.com/services/training.html">http://bestpractical.com/services/training.html</a>)
* San Francisco, CA, USA — October 18 & 19, 2011
* Washington DC, USA — October 31 & November 1, 2011
* Barcelona, Spain — November 28 & 29, 2011</pre>
</blockquote>
Hello,<br>
<br>
I use mod_auth_kerb to authenticate users. I also have a LDAP server
to store my users informations(email, gecos, ...).<br>
<br>
In Apache configuration, I have : <br>
<br>
<Location /><br>
SetHandler perl-script<br>
PerlResponseHandler RT::Mason<br>
AuthType Kerberos<br>
AuthName "RT Kerberos Login"<br>
Krb5Keytab /etc/apache2/apache2_krb5.keytab<br>
KrbMethodNegotiate On<br>
KrbMethodK5Passwd On<br>
KrbAuthRealms UNIV-FCOMTE.FR<br>
KrbServiceName Any <br>
KrbVerifyKDC Off <br>
KrbAuthoritative Off <br>
KrbSaveCredentials On<br>
#KrbLocalUserMapping On <br>
#Doesn't work for me ! ==> I remove @univ-fcomte.fr in
local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm<br>
require valid-user<br>
</Location><br>
<br>
<br>
log's contents after having tried me to log into RT :<br>
<br>
[Tue Oct 11 18:23:10 2011] [debug]: ENTRE DANS CanonicalizeUserInfo:
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:434)<br>
[Tue Oct 11 18:23:10 2011] [debug]:
RT::Authen::ExternalAuth::CanonicalizeUserInfo called by RT::User
/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/User_Vendor.pm
20 with: Disabled: 0, EmailAddress: , Gecos:
<a class="moz-txt-link-abbreviated" href="mailto:jmcarica@univ-fcomte.fr">jmcarica@univ-fcomte.fr</a>, Name: <a class="moz-txt-link-abbreviated" href="mailto:jmcarica@univ-fcomte.fr">jmcarica@univ-fcomte.fr</a>, Privileged:
1
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:453)<br>
[Tue Oct 11 18:23:10 2011] [debug]: Attempting to get user info
using this external service: LDAP_DEPTINFO_ST
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:464)<br>
[Tue Oct 11 18:23:10 2011] [debug]: Attempting to use this
canonicalization key: Name
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:478)<br>
[Tue Oct 11 18:23:10 2011] [debug]: LDAP Search === Base:
ou=people,dc=univ-fcomte,dc=fr == Filter:
(&(objectClass=posixAccount)(uid=jmcarica)) == Attrs:
cn,mail,uid,gecos,uid
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:195)<br>
[Tue Oct 11 18:23:10 2011] [info]:
RT::Authen::ExternalAuth::CanonicalizeUserInfo returning Disabled:
0, EmailAddress: <a class="moz-txt-link-abbreviated" href="mailto:jean-michel.caricand@univ-fcomte.fr">jean-michel.caricand@univ-fcomte.fr</a>,
ExternalAuthId: jmcarica, Gecos: jmcaricand, Name: jmcarica,
Privileged: 1, RealName: caricand jean-michel
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:542)<br>
[Tue Oct 11 18:23:11 2011] [debug]: RT's GnuPG libraries couldn't
successfully read your configured GnuPG home directory
(/opt/rt3/var/data/gpg). PGP support has been disabled
(/opt/rt3/bin/../lib/RT/Config.pm:339)<br>
[Tue Oct 11 18:23:11 2011] [debug]: RT's GnuPG libraries couldn't
successfully read your configured GnuPG home directory
(/opt/rt3/var/data/gpg). PGP support has been disabled
(/opt/rt3/bin/../lib/RT/Config.pm:339)<br>
<br>
<br>
<br>
</body>
</html>