<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Menlo;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
code
{mso-style-priority:99;
font-family:"Courier New";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">What Version of RT are you running? If you are using 4.2 or greater (you should be if you’re setting up a new instance) you need to<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Replace this line<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">Set(</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#34BBC7">@Plugins</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">,
</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#C33720">qw(RT::Authen::ExternalAuth)</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black"> );</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#C33720"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">With this line<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">Plugin('RT::Authen::ExternalAuth');</span><span style="font-size:9.0pt;font-family:"Menlo",serif;color:#333333"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> rt-users [mailto:rt-users-bounces@lists.bestpractical.com]
<b>On Behalf Of </b>bharath reddy<br>
<b>Sent:</b> Tuesday, October 13, 2015 10:38 PM<br>
<b>To:</b> Anton Panetta <anton.panetta@haircareaust.com><br>
<b>Cc:</b> RT-List <rt-users@lists.bestpractical.com><br>
<b>Subject:</b> Re: [rt-users] Regarding External Authentication using LDAP<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Hi Anton,<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I used following block in my RT_SiteConfig :<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">Set(</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#34BBC7">@Plugins</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">,
</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#C33720">qw(RT::Authen::ExternalAuth)</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black"> );</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#C33720"><o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">Set(</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#34BBC7">$ExternalAuthPriority</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">,
[</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#C33720">"My_LDAP"</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">]);</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#34BBC7"><o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">Set(</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#34BBC7">$ExternalInfoPriority</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">,
[</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#C33720">"My_LDAP"</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">]);</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#34BBC7"><o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">Set(</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#34BBC7">$AutoCreateNonExternalUsers</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">,
</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#C33720">1</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">);</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#34BBC7"><o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt;min-height:13px"><span style="font-size:8.5pt;font-family:"Menlo",serif"><o:p> </o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">Set(</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#34BBC7">$ExternalSettings</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">,
{</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#34BBC7"><o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif">
<span style="color:#C33720">'My_LDAP'</span> => { <span style="color:#5330E1">
## GENERIC SECTION</span><o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif">
<span style="color:#C33720">'type'</span> => <span style="color:#C33720">'ldap'</span>,<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif">
<span style="color:#C33720">'server'</span> => <span style="color:#C33720">'<a href="http://vmns1.cs.sunysb.edu">vmns1.cs.sunysb.edu</a>'</span>,<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">
</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#C33720">'user'</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black"> =>
</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#C33720">'CN=Recruit LDAP user,OU=Service Accounts,OU=SBCS,DC=cs,DC=stonybrook,DC=edu'</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">,</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#C33720"><o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif">
<span style="color:#C33720">'pass'</span> => <span style="color:#C33720">'*******'</span>,<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif">
<span style="color:#C33720">'base'</span> => <span style="color:#C33720">'ou=SBCS,dc=cs,dc=stonybrook,DC=edu'</span>,<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif">
<span style="color:#5330E1"># 'filter' => '((&(objectCategory=Users)))',</span><o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif">
<span style="color:#C33720">filter</span> => <span style="color:#C33720">'(objectClass=*)'</span>,<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif">
<span style="color:#C33720">'d_filter'</span> => <span style="color:#C33720">'(userAccountControl:1.2.840.113556.1.4.803:=2)'</span>,<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">
</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#5330E1"># 'd_filter' => '(&(objectCategory=User) (ObjectClass=Person))' ,<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif">
<span style="color:#C33720">'tls'</span> => <span style="color:#C33720">1</span>,<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif">
<span style="color:#C33720">'ssl_version'</span> => <span style="color:#C33720">
3</span>,<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif">
<span style="color:#C33720">'net_ldap_args'</span> => [ <span style="color:#C33720">
version</span> => <span style="color:#C33720">3</span> ],<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">
</span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#5330E1"># 'group' => 'CN=Domain Users,CN=Users,DC=cs,DC=stonybrook,DC=edu',<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif">
<span style="color:#5330E1"># 'group_attr' => 'member',</span><o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif">
<span style="color:#C33720">'attr_match_list'</span> => [ <span style="color:#C33720">
'Name'</span>,<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif">
<span style="color:#C33720">'EmailAddress'</span><o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif"> ],<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif">
<span style="color:#C33720">'attr_map'</span> => { <span style="color:#C33720">
'Name'</span> => <span style="color:#C33720">'sAMAccountName'</span>,<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif">
<span style="color:#C33720">'EmailAddress'</span> => <span style="color:#C33720">
'mail'</span> }<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif"> }<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif"> }<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:8.5pt;font-family:"Menlo",serif"> );<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Is anything that I'm missing ?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Thanks,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Bharath.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Tue, Oct 13, 2015 at 8:04 PM, Anton Panetta <<a href="mailto:anton.panetta@haircareaust.com" target="_blank">anton.panetta@haircareaust.com</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Whats the block you put in your RT_SiteConfig relating to external auth?</span><span lang="EN-AU"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><span lang="EN-AU"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><span lang="EN-AU"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><span lang="EN-AU"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> rt-users [mailto:<a href="mailto:rt-users-bounces@lists.bestpractical.com" target="_blank">rt-users-bounces@lists.bestpractical.com</a>]
<b>On Behalf Of </b>bharath reddy<br>
<b>Sent:</b> Wednesday, 14 October 2015 3:58 AM<br>
<b>To:</b> RT-List <<a href="mailto:rt-users@lists.bestpractical.com" target="_blank">rt-users@lists.bestpractical.com</a>><br>
<b>Subject:</b> [rt-users] Regarding External Authentication using LDAP</span><span lang="EN-AU"><o:p></o:p></span></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU"> <o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU">Dear All,<o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU">I followed the link <a href="https://metacpan.org/pod/RT::Authen::ExternalAuth" target="_blank">https://metacpan.org/pod/RT::Authen::ExternalAuth</a> and made
required changes and then restarted my apache server. But when I'm logging into the RT from web it fails with : <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU">"</span><b><span lang="EN-AU" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black">Your username or password is incorrect</span></b><span lang="EN-AU">"<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU">But user exists in the LDAP.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:12.0pt"><span lang="EN-AU">Log file contains :<o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU">[22441] [Tue Oct 13 16:58:25 2015] [error]: FAILED LOGIN for <my_user_name> from 130.245.10.107 (/rt/lib//RT/Interface/Web.pm:810)<o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU">From the code(/rt/lib//RT/Interface/Web.pm) it fails at this point :<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU"> <o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU"> unless ( $user_obj->id && $user_obj->IsPassword( $ARGS->{pass} ) ) {<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU"> $RT::Logger->error("FAILED LOGIN for @{[$ARGS->{user}]} from $ENV{'REMOTE_ADDR'}");<o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU">Can any one help me how to change the flow to authenticate from LDAP i.e it should check the username and password against the LDAP and not from DB.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU">Any help or pointers to this issue will be appreciated. <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU">Thanks,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-AU">Bharath.<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span lang="EN-AU">The information contained in this email message and any attachments may be confidential information. If you are not the intended recipient, any use, interference with, disclosure or copying of this material is unauthorised
and prohibited. If you have received this email in error, please advise us immediately and delete the email and all copies. The content and opinions in non-business email are not necessarily those of Haircare Australia.
<span style="border:solid windowtext 1.0pt;padding:0in"><img border="0" width="100" height="100" id="_x0000_i1025" src="cid:~WRD000.jpg" alt="Image removed by sender."></span><o:p></o:p></span></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<br>
<hr>
<font face="Arial" color="Gray" size="1"><br>
ARDEN<br>
A Global Company<br>
Celebrating over 50 years of making your life more comfortable!<br>
<br>
This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have
received this message in error, please advise the sender immediately by reply e-mail and delete this message.<br>
<br>
This OUTBOUND E-mail and Document(s) has been scanned by an Antivirus Server.<br>
</font>
</body>
</html>