<div dir="ltr">Hello Indrek,<div><br></div><div> I had some problems with External Auth as well. I ended up going with LDAP Import, authentication works based on LDAP credentials being imported. You have a bit more control as you can filter on groups or user names if you choose that route.</div><div><br></div><div> I threw together a how to:</div><div><br></div><div> <a href="http://trevthorpe.blogspot.com/2015/01/request-tracker-424-ldap-authentication.html">http://trevthorpe.blogspot.com/2015/01/request-tracker-424-ldap-authentication.html</a></div><div><br></div><div> Hope this offers some help.</div><div><br></div><div> Thanks,</div><div><br></div><div>Trev</div><div> </div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Apr 20, 2015 at 5:16 AM, Indrek Paas <span dir="ltr"><<a href="mailto:indrekpaas@gmail.com" target="_blank">indrekpaas@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi,<div><br></div><div>I'm setting up an RT server on: </div><div>CentOS 7.1 x64</div><div>Apache 2.4</div><div>PostgreSQL</div><div>Perl v5.16.3</div><div><br></div><div>Trying to use ExternalAuth to LDAP (Microsoft AD) using these settings in RT_SiteConfig.pm:</div><div><br></div><div><div>Plugin( "RT::Authen::ExternalAuth" );</div><div><br></div><div>Set( $ExternalAuthPriority, ["My_LDAP"] );</div><div>Set( $ExternalInfoPriority, ["My_LDAP"] );</div><div><br></div><div>Set($ExternalSettings, {</div><div> 'My_LDAP' => {</div><div> 'type' => 'ldap',</div><div> 'server' => '1.1.1.1',</div><div> 'user' => 'rtbinduser@domain.server',</div><div> 'pass' => 'rtbinduserpw',</div><div> 'base' => 'ou=Dom Users,ou=Company AD,dc=domain,dc=server',</div><div><br></div><div> 'attr_match_list' => [</div><div> 'Name',</div><div> 'EmailAddress',</div><div> ],</div><div> 'attr_map' => {</div><div> 'Name' => 'sAMAccountName',</div><div> 'EmailAddress' => 'mail',</div><div> 'Organization' => 'physicalDeliveryOfficeName',</div><div> 'RealName' => 'cn',</div><div> 'ExternalAuthId' => 'sAMAccountName',</div><div> 'Gecos' => 'sAMAccountName',</div><div> 'WorkPhone' => 'telephoneNumber',</div><div> 'Address1' => 'streetAddress',</div><div> 'City' => 'l',</div><div> 'State' => 'st',</div><div> 'Zip' => 'postalCode',</div><div> 'Country' => 'co'</div><div> },</div><div> },</div><div> } );</div></div><div><br></div><div>I start the RT using it's own server : /opt/rt4/sbin/rt-server --port 8080</div><div>Page loads in the browser and I can log in as root but when I try to log in using AD account I see in the logs:</div><div><br></div><div>[warning]: Use of uninitialized value $filter in concatenation (.) or string at /opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm line 453. (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:451)<br></div><div><br></div><div>I have been digging through google and the LDAP.pm without success. When I messed with the 'base' value error changed:</div><div><br></div><div><div>[25778] [Mon Apr 20 08:55:33 2015] [warning]: Use of uninitialized value $filter in concatenation (.) or string at /opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm line 453. (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:451)</div><div>[25778] [Mon Apr 20 08:55:33 2015] [error]: Can't call method "as_string" on an undefined value at /opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm line 357.</div><div><br></div><div>Stack:</div><div> [/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:357]</div><div> [/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:843]</div><div> [/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:885]</div><div> [/opt/rt4/sbin/../lib/RT/User.pm:141]</div><div> [/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:486]</div><div> [/opt/rt4/local/plugins/RT-Authen-ExternalAuth/html/Elements/DoAuth:10]</div><div> [/opt/rt4/local/plugins/RT-Authen-ExternalAuth/html/Callbacks/ExternalAuth/autohandler/Session:1]</div><div> [/opt/rt4/sbin/../lib/RT/Interface/Web.pm:310]</div><div> [/opt/rt4/share/html/autohandler:53] (/opt/rt4/sbin/../lib/RT/Interface/Web/Handler.pm:208)</div></div><div><br></div><div><br></div><div>Any suggestions to a right direction are welcome.</div><div><br></div><div>PS! Went with LDAP because other services on the server use it successfully. I have installed RT using Kerberos auth before but decided to use something "simpler". :D</div><div><br></div><div>--</div><div>Indrek</div></div>
</blockquote></div><br></div>