<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style>
<!--
@font-face
{font-family:Calibri}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
span.EmailStyle17
{font-family:"Calibri","sans-serif";
color:windowtext}
.MsoChpDefault
{font-family:"Calibri","sans-serif"}
@page WordSection1
{margin:70.85pt 2.0cm 2.0cm 2.0cm}
div.WordSection1
{}
-->
</style>
</head>
<body lang="IT" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Hi all,</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><span lang="EN-US">I’m writing a PHP application (a cloud self-service application that lets developers create testing environments and so on) for the company where I also installed RT. For the authentication part, I thought to authenticate
users against RT, since the users of my PHP app are a subset of RT’s users.</span></p>
<p class="MsoNormal"><span lang="EN-US">So, I’m down to writing a script (attached) that authenticates a user against RT, to be called from a PHP script.</span></p>
<p class="MsoNormal"><span lang="EN-US">On RT I have RT-Authen-ExternalAuth that connects to LDAP.</span></p>
<p class="MsoNormal"><span lang="EN-US">So in my perl script I’ve had to make two tries: first RT::Authen::ExternalAuth::DoAuth (for domain users); then, if it fails, $user->IsPassword($pass) (for local users).</span></p>
<p class="MsoNormal"><span lang="EN-US">The problem is with RT::Authen::ExternalAuth::DoAuth; instead, the auth of local users with IsPassword always works.</span></p>
<p class="MsoNormal"><span lang="EN-US">If I execute the script as root, it goes smooth.</span></p>
<p class="MsoNormal"><span lang="EN-US">But for security reasons I want to execute it as another user (I created the Unix user “selfservice”, as well as the RT user “selfservice”). Executing the script as this Unix user, DoAuth fails with the following message:</span></p>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
<p class="MsoNormal"><i><span lang="EN-US">ExternalAuthPriority not defined, please check your configuration file.</span></i></p>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
<p class="MsoNormal"><span lang="EN-US">What am I missing?</span></p>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
<p class="MsoNormal"><span lang="EN-US">Thank you very much!</span></p>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
<p class="MsoNormal"><span lang="EN-US">Regards</span></p>
</div>
<br>
<br>
<span id="ppe_54">
<div align="left">
<p style="font-family:Calibri,Sans-Serif; font-size:10pt"><span style="color:#000000">Alberto Scotto</span>
<span style="color:#808080"></span><br>
<br>
<span style="color:#808080; font-weight:bold">Blue Reply</span> <br>
<span style="color:#808080">Via Cardinal Massaia, 83<br>
10147 - Torino - ITALY <br>
phone: +39 011 29100 <br>
<a href="al.scotto@reply.it" target="" style="color:blue; text-decoration:underline">al.scotto@reply.it</a>
<br>
<a title="" href="www.reply.it" target="" style="color:blue; text-decoration:underline">www.reply.it</a>
</span><br>
<br>
<span style="color:#000000"><img border="0" alt=" Blue Reply " src="cid:1c0d0561fbe54dce823a1e8bc937da46" style="margin:0px">
</span><br>
</p>
</div>
</span><br>
<hr>
<font face="Arial" color="Gray" size="1"><br>
--<br>
The information transmitted is intended for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information
by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.<br>
</font>
</body>
</html>