<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">I’m using Request Tracker 4.0.7 with LDAPImport 0.34 and Authen::ExternalAuth 10-4. I already have user creation and attribute mapping configured with ExternalAuth. I’m primarily interested in using LDAPImport to populate a half dozen or
so Public Groups in Request Tracker with users from Active Directory. The idea is that separate divisions can just add their staff to that Active Directory group and when LDAPImport runs they’ll be granted the appropriate rights to manage their division’s
queue in Request Tracker. I’m pulling from an Active Directory LDAP implementation at a functional level of Windows Server 2008.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">When I do a test run (/usr/local/share/request-tracker4/plugins/RT-Extension-LDAPImport/bin/rtldapimport --debug > ldapimport.debug 2>&1) I get the following:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Couldn't load RT config file RT_SiteConfig.pm:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Bad name after cn' at /etc/request-tracker4/RT_SiteConfig.pm line 91.<o:p></o:p></p>
<p class="MsoNormal">Compilation failed in require at /usr/share/request-tracker4/lib/RT/Config.pm line 905.<o:p></o:p></p>
<p class="MsoNormal">BEGIN failed--compilation aborted at ./rtldapimport line 26.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">That corresponds with this line of my RT_SiteConfig.pm:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Set($LDAPGroupMapping, { Name => 'cn',<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’ve configured LDAPImport as follows:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">## LDAP Import ##<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Set($LDAPHost, 'ldaps://dc.alaska.gov');<o:p></o:p></p>
<p class="MsoNormal">Set($LDAPUser, 'CN=dor-requesttracker,OU=Security Groups and Accounts,OU=IT,OU=Divisions,OU=DOR,OU=State Departments,DC=alaska,DC=gov');<o:p></o:p></p>
<p class="MsoNormal">Set($LDAPPassword ,'Password);<o:p></o:p></p>
<p class="MsoNormal">Set($LDAPBase, 'ou=DOR,ou=State Departments,dc=alaska,dc=gov');<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Set($LDAPGroupBase, 'OU=Security Groups and Accounts,OU=IT,OU=Divisions,OU=DOR,OU=State Departments,DC=alaska,DC=gov');<o:p></o:p></p>
<p class="MsoNormal">Set($LDAPGroupFilter, '(|(CN=dor-rt-admins)(CN=dor-rt-staff));<o:p></o:p></p>
<p class="MsoNormal">Set($LDAPGroupMapping, { Name => 'cn',<o:p></o:p></p>
<p class="MsoNormal"> Member_Attr => 'member',<o:p></o:p></p>
<p class="MsoNormal"> Member_Attr_Value => 'sAMAccountName',<o:p></o:p></p>
<p class="MsoNormal"> Description => 'description'});<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Set($LDAPSizeLimit, 1000);<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I feel like I’m missing something real simple here. Can someone lend another set of eyes to this problem?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">---<o:p></o:p></p>
<p class="MsoNormal">Kevin Elliott<o:p></o:p></p>
<p class="MsoNormal">Networking Specialist II<o:p></o:p></p>
<p class="MsoNormal">Alaska Department of Revenue, ASD-IT<o:p></o:p></p>
<p class="MsoNormal">(907) 465-2314<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>