<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div>
<div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
Well, we were unable to get the RT::Authen::ExternalAuth plugin to work, no matter what we tried, but I had a co-worker looking over my configs as well, and I had previously tried to make AD/LDAP auth work by just using Apache to do it . . . When looking in
the vhost conf file for rt, he noticed I had placed my Apache Location Directive inside my Directory Directive, which is fairly common and I would never have thought twice about. However, in this instance, the Directory Directive began as such:</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div><font face="Calibri,sans-serif"><Directory /opt/rt4/share/html></font></div>
<div><font face="Calibri,sans-serif"><br>
</font></div>
<div><font face="Calibri,sans-serif">and the Location Directive began as such:</font></div>
<div><font face="Calibri,sans-serif"><br>
</font></div>
<div><font face="Calibri,sans-serif"><Location /></font></div>
<div><font face="Calibri,sans-serif"><br>
</font></div>
<div><font face="Calibri,sans-serif">Since they were two different paths, the Location Directive was never getting executed, which was where all the apache ldap auth info was. By moving the Location Directive outside the Directory Directive, and adding an
alias:</font></div>
<div><font face="Calibri,sans-serif"><br>
</font></div>
<div><font face="Calibri,sans-serif">ScriptAlias / /opt/rt4/sbin/rt-server.fcgi/</font></div>
<div><font face="Calibri,sans-serif"><br>
</font></div>
<div><font face="Calibri,sans-serif">we were able to make AD/LDAP authorization work.</font></div>
<div><font face="Calibri,sans-serif"><br>
</font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<div>Thanks,</div>
<div>Rezty Felty</div>
<div>Senior Linux Administrator</div>
<div>Adknowledge</div>
<div>816-559-1196</div>
</div>
</div>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<span id="OLK_SRC_BODY_SECTION" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Alex Peters <<a href="mailto:alex@peters.net">alex@peters.net</a>><br>
<span style="font-weight:bold">Date: </span>Wednesday, July 30, 2014 at 7:31 PM<br>
<span style="font-weight:bold">To: </span>Rezty Felty <<a href="mailto:rfelty@adknowledge.com">rfelty@adknowledge.com</a>><br>
<span style="font-weight:bold">Cc: </span>RT users <<a href="mailto:rt-users@lists.bestpractical.com">rt-users@lists.bestpractical.com</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [rt-users] Difficulty implementing LDAP/AD Authorization<br>
</div>
<div><br>
</div>
<div>
<div>
<p dir="ltr">RT won't look at any changes you place in example RT_SiteConfig.pm files included with extensions (if that's why you've included that file in your previous e-mail). You need to copy the relevant changes into your RT installation's RT_SiteConfig.pm
file.</p>
<div class="gmail_quote">On 31/07/2014 3:12 am, "Rezty Felty" <<a href="mailto:rfelty@adknowledge.com">rfelty@adknowledge.com</a>> wrote:<br type="attribution">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word;color:rgb(0,0,0);font-size:14px;font-family:Calibri,sans-serif">
<div>
<div>Jxplorer shows successful connection and authentication using the auth info I have in rt. Here is my /opt/rt4/etc/RT_SiteConfig.pm:</div>
<div><br>
</div>
<div>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# Any configuration directives you include here will override</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# RT's default configuration file, RT_Config.pm</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
#</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# To include a directive here, just copy the equivalent statement</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# from RT_Config.pm and change the value. We've included a single</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# sample value below.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
#</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# This file is actually a perl module, so you can include valid</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# perl code, as well.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
#</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# The converse is also true, if this file isn't valid perl, you're</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# going to run into trouble. To check your SiteConfig file, use</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# this command:</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
#</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# perl -c /path/to/your/etc/RT_SiteConfig.pm</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
#</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# You must restart your webserver after making changes to this file.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
Set( $rtname, 'Adknowledge.com');</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
Set( $WebDomain, '<a href="http://pkc-tracker02.ak-networks.com" target="_blank">pkc-tracker02.ak-networks.com</a>');</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
Set( $WebPort, 443);</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# You must install Plugins on your own, this is only an example</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# of the correct syntax to use when activating them.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# Plugin( "RT::Extension::QuickDelete" );</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# Plugin( "RT::Extension::CommandByMail" );</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
Set( @Plugins, qw(RT::Authen::ExternalAuth) );</p>
</div>
<div>
<div><br>
</div>
<div>and my <span style="background-color: rgb(29, 38, 112); color: rgb(64, 223, 30); font-family: 'Lucida Console'; font-size: 18px;">/opt/rt4/local/plugins/RT-Authen-ExternalAuth/etc/RT_SiteConfig.pm</span>, which I would think more important in this case:</div>
<div><br>
</div>
<div>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=head1 NAME</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
External Authentication Configuration - Sample configs for L<RT::Authen::ExternalAuth></p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=head1 DESCRIPTION</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
L<RT::Authen::ExternalAuth> provides a lot of flexibility</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
with many configuration options. This file describes these</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
configuration options and is itself a sample configuration</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
suitable for dropping into your C<etc/RT_SiteConfig.pm></p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
file and modifying.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=over 4</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=item C<$ExternalAuthPriority></p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
The order in which the services defined in ExternalSettings</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
should be used to authenticate users. User is authenticated</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
if successfully confirmed by any service - no more services</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
are checked.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
You should remove services you don't use. For example,</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
if you're only using My_LDAP, remove My_MySQL and My_SSO_Cookie.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=cut</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
Set($ExternalAuthPriority, [ 'My_LDAP',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'My_MySQL',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'My_SSO_Cookie'</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
]</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
);</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=item C<$ExternalInfoPriority></p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
When multiple auth services are available, this value defines</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
the order in which the services defined in ExternalSettings</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
should be used to get information about users. This includes</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
RealName, Tel numbers etc, but also whether or not the user</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
should be considered disabled.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
Once a user record is found, no more services are checked.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
You CANNOT use a SSO cookie to retrieve information.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
You should remove services you don't use, but you must define</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
at least one service.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=cut</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
Set($ExternalInfoPriority, [ 'My_LDAP',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'My_MySQL',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
]</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
);</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=item C<$ExternalServiceUsesSSLorTLS></p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
If this is set to true, then the relevant packages will</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
be loaded to use SSL/TLS connections. At the moment,</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
this just means L<Net::SSLeay>.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=cut</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
Set($ExternalServiceUsesSSLorTLS, 0);</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=item C<$AutoCreateNonExternalUsers></p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
If this is set to 1, then users should be autocreated by RT</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
as internal users if they fail to authenticate from an</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
external service. This is useful if you have users outside</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
your organization who might interface with RT, perhaps by sending</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
email to a support email address.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=cut</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
Set($AutoCreateNonExternalUsers, 0);</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=item C<$ExternalSettings></p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
These are the full settings for each external service as a HashOfHashes.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
Note that you may have as many external services as you wish. They will</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
be checked in the order specified in $ExternalAuthPriority and</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
$ExternalInfoPriority directives above.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
The outer structure is a key with the authentication option (name of external</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
source). The value is a hash reference with configuration keys and values,</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
for example:</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
Set($ExternalSettings, {</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
MyLDAP => {</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
type => 'ldap',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
... other options ...</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
},</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
MyMySQL => {</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
type => 'db',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
... other options ...</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
},</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
... other sources ...</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
} );</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
As shown above, each description should have 'type' defined.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
The following types are supported:</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=over 4</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=item ldap</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
Authenticate against and sync information with LDAP servers.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
See L<RT::Authen::ExternalAuth::LDAP> for details.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=item db</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
Authenticate against and sync information with external RDBMS,</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
supported by Perl's L<DBI> interface. See L<RT::Authen::ExternalAuth::DBI></p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
for details.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=item cookie</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
Authenticate by cookie. See L<RT::Authen::ExternalAuth::DBI::Cookie></p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
for details.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=back</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
See the modules noted above for configuration options specific to each type.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
The following apply to all types.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=over 4</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=item attr_match_list</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
The list of RT attributes that uniquely identify a user. These values</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
are used, in order, to find users in the selected authentication</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
source. Each value specified here must have a mapping in the</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
L</"attr_map"> section below. You can remove values you don't</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
expect to match, but it's recommended to use 'Name' and 'EmailAddress'</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
at minimum. For example:</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'attr_match_list' => [</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'Name',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'EmailAddress',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
],</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
You should not use items that can map to multiple users (such as a</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
RealName or building name).</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=item attr_map</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
Mapping of RT attributes on to attributes in the external source.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
Valid keys are attributes of an</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
L<RT::User|<a href="http://bestpractical.com/rt/docs/latest/RT/User.html" target="_blank">http://bestpractical.com/rt/docs/latest/RT/User.html</a>>.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
The values are attributes from your authentication source.</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
For example, an LDAP mapping might look like:</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'attr_map' => {</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'Name' => 'sAMAccountName',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'EmailAddress' => 'mail',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'Organization' => 'physicalDeliveryOfficeName',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'RealName' => 'cn',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
...</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
},</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=back</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
=cut</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
Set($ExternalSettings, {</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# AN EXAMPLE DB SERVICE</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'My_MySQL' => {</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'type' => 'db',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'server' => 'server.domain.tld',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'database' => 'DB_NAME',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'table' => 'USERS_TABLE',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'user' => 'DB_USER',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'pass' => 'DB_PASS',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'port' => 'DB_PORT',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'dbi_driver' => 'DBI_DRIVER',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'u_field' => 'username',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'p_field' => 'password',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'p_enc_pkg' => 'Crypt::MySQL',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'p_enc_sub' => 'password',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'd_field' => 'disabled',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'd_values' => ['0'],</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'attr_match_list' => [</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'Gecos',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'Name',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
],</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'attr_map' => {</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'Name' => 'username',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'EmailAddress' => 'email',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'ExternalAuthId' => 'username',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'Gecos' => 'userID',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
},</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
},</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# AN EXAMPLE LDAP SERVICE</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'My_LDAP' => {</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'type' => 'ldap',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'server' => '10.201.0.200',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'user' => '<a href="mailto:apacheldap@adknowledge.com" target="_blank">apacheldap@adknowledge.com</a>',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'pass' => ‘redacted',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'base' => 'dc=adknowledge,dc=com',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'filter' => '(FILTER_STRING)',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'd_filter' => '(FILTER_STRING)',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'group' => 'GROUP_NAME',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'group_attr' => 'GROUP_ATTR',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'tls' => 0,</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'ssl_version' => 3,</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'net_ldap_args' => [ version => 3 ],</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'group_scope' => 'base',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'group_attr_value' => 'GROUP_ATTR_VALUE',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'attr_match_list' => [</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'Name',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'EmailAddress',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'RealName',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
],</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'attr_map' => {</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'Name' => 'sAMAccountName',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'EmailAddress' => 'mail',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'Organization' => 'physicalDeliveryOfficeName',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'RealName' => 'cn',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'ExternalAuthId' => 'sAMAccountName',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'Gecos' => 'sAMAccountName',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'WorkPhone' => 'telephoneNumber',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'Address1' => 'streetAddress',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'City' => 'l',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'State' => 'st',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'Zip' => 'postalCode',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'Country' => 'co'</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
},</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
},</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
# An example SSO cookie service</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'My_SSO_Cookie' => {</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'type' => 'cookie',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'name' => 'loginCookieValue',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'u_table' => 'users',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'u_field' => 'username',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'u_match_key' => 'userID',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'c_table' => 'login_cookie',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'c_field' => 'loginCookieValue',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'c_match_key' => 'loginCookieUserID',</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
'db_service_name' => 'My_MySQL'</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
},</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
} );</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112);min-height:18px">
<br>
</p>
<p style="margin:0px;font-size:18px;font-family:'Lucida Console';color:rgb(64,223,30);background-color:rgb(29,38,112)">
1;</p>
</div>
<div><br>
</div>
<div>Thanks,</div>
<div>Rezty Felty</div>
<div>Senior Linux Administrator</div>
<div>Adknowledge</div>
<div>816-559-1196</div>
</div>
</div>
<div><br>
</div>
<span>
<div style="font-family:Calibri;font-size:11pt;text-align:left;color:black;BORDER-BOTTOM:medium none;BORDER-LEFT:medium none;PADDING-BOTTOM:0in;PADDING-LEFT:0in;PADDING-RIGHT:0in;BORDER-TOP:#b5c4df 1pt solid;BORDER-RIGHT:medium none;PADDING-TOP:3pt">
<span style="font-weight:bold">From: </span>Marco Agostini <<a href="mailto:comunelevico@gmail.com" target="_blank">comunelevico@gmail.com</a>><br>
<span style="font-weight:bold">Date: </span>Wednesday, July 30, 2014 at 11:38 AM<br>
<span style="font-weight:bold">To: </span>Rezty Felty <<a href="mailto:rfelty@adknowledge.com" target="_blank">rfelty@adknowledge.com</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [rt-users] Difficulty implementing LDAP/AD Authorization<br>
</div>
<div><br>
</div>
<div>
<div>
<p dir="ltr"><br>
Il 30/lug/2014 17:34 "Rezty Felty" <<a href="mailto:rfelty@adknowledge.com" target="_blank">rfelty@adknowledge.com</a>> ha scritto:<br>
><br>
> I have a new install of RT 4.2.4 running on Centos 6.4 64 bit with Apache 2.2.15. I have installed RT::Authen::ExternalAuth and Net::LDAP, and have configured my /opt/rt4/local/plugins/RT-Authen-ExternalAuth/etc/RT_SiteConfig.pm with the right server address
and LDAP user and password, and added Set( @Plugins, qw(RT::Authen::ExternalAuth) ); to the file /opt/rt4/etc/RT_SiteConfig.pm. I have restarted https, restarted the entire server, but i continue to see the same results, e.g. I can log in to RT with the default
installed root account, but when I try any AD user, it fails, and the error I receive in both /var/log/messages and /var/log/httpd/error_log is the same: “FAILED LOGIN for <user> from <serveraddress> (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:811)<br>
><br>
> Any suggestions on where to begin troubleshooting this would be appreciated.<br>
></p>
<p dir="ltr">Use these tool <a href="http://jxplorer.org/" target="_blank">http://jxplorer.org/</a> to test the parameter that you are using in RT.</p>
<p dir="ltr">Post the content of /opt/rt4/etc/RT_SiteConfig.pm</p>
</div>
</div>
</span></div>
<br>
--<br>
RT Training - Boston, September 9-10<br>
<a href="http://bestpractical.com/training" target="_blank">http://bestpractical.com/training</a><br>
</blockquote>
</div>
</div>
</div>
</span>
</body>
</html>