<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
On Jul 15, 2016, at 11:03 AM, Nilesh <<a href="mailto:me@nileshgr.com" class="">me@nileshgr.com</a>> wrote:<br class="">
<div>
<blockquote type="cite" class=""><br class="">
<div class="">
<div class="">Your setup looks perfectly fine, but I may be missing something because I<br class="">
haven't used AD. I use OpenLDAP with rt-ldapimport script for authentication and<br class="">
rt-ldapimport --no-users --import to sync users (enabled Group member syncing in<br class="">
the importer). Works good. May be give that a try?<br class="">
</div>
</div>
</blockquote>
<div><br class="">
</div>
<div>I guess my next step would be figuring out how to sync the groups so that our RTIR_WEB_SC_ACCESS group users would be within the "DutyTeam" group in RTIR. I believe you are right in that rt-ldapimport would help with that I think but it looks like a nightmare
to set up. I'll burn that barn down when I come to it I guess.</div>
<div><br class="">
</div>
<div>I think my issues with authentication lay within the following part of the configuration. I'm not sure what the group* configuration variables are for exactly because they are loosely documented and there are I've found very few examples via google and
(almost?) none related to nested groups. </div>
<div><br class="">
</div>
<div> 'base' => 'OU=iweb,DC=corp,DC=iweb,DC=com',<br class="">
'filter' => '(objectClass=*)',<br class="">
'd_filter' => 'UserAccountControl:1.2.840.113556.1.4.803:=2',<br class="">
'group' => 'RTIR_WEB_SC_ACCESS',<br class="">
'group_scope' => 'sub',<br class="">
'group_attr' => 'memberOf:1.2.840.113556.1.4.1941:=CN=RTIR_WEB_SC_ACCESS',<br class="">
'group_attr_value' => 'OU=Groupes,OU=iWeb,DC=corp,DC=iweb,DC=com',</div>
</div>
<br class="">
<div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="orphans: auto; text-align: start; text-indent: 0px; widows: auto; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="orphans: auto; text-align: start; text-indent: 0px; widows: auto; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="orphans: auto; text-align: start; text-indent: 0px; widows: auto; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="margin-top: 0px; margin-bottom: 0px;" class="">
<div style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Arial;" class="">--</span></div>
<div style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Arial;" class="">Landon Stewart</span></div>
<div style="margin-top: 0px; margin-bottom: 0px;" class=""><font face="Arial" class="">Lead Analyst - Abuse and Security Management<br class="">
</font><b class=""><i class=""><span style="font-family: 'Arial Black';" class="">INTERNAP</span></i></b><span style="font-family: Arial;" class=""><span class="Apple-converted-space"> </span><sup class="">®</sup></span></div>
<div style="margin-top: 0px; margin-bottom: 0px;" class="">📧 <a href="mailto:lstewart@internap.com" class="">lstewart@internap.com</a></div>
<div style="margin-top: 0px; margin-bottom: 0px;" class="">🌍 <a href="http://www.internap.com" class="">www.internap.com</a></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br class="">
</body>
</html>