<div dir="ltr">Hi,<div><br></div><div><div>Sorry, i used the shredder to remove all user from RT user's DB an now it's work fine.</div><div><br></div><div>Thank you everyone for your help.</div></div><div><br></div><div><br></div><div>Regards,</div></div><div class="gmail_extra"><br><div class="gmail_quote">2016-12-09 14:56 GMT+01:00 Martin Wheldon <span dir="ltr"><<a href="mailto:martin.wheldon@greenhills-it.co.uk" target="_blank">martin.wheldon@greenhills-it.co.uk</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
Sorry, please disregard my last response, the user account has been found.<br>
Could you post the RT logs please?<br>
<br>
Best Regards<span class="HOEnZb"><font color="#888888"><br>
<br>
Martin</font></span><div class="HOEnZb"><div class="h5"><br>
<br>
On 2016-12-09 13:44, Martin Wheldon wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi,<br>
<br>
Looks like a ldap acl issue, is your ldap search user able to access<br>
the users mail attribute?<br>
<br>
Best Regards<br>
<br>
Martin<br>
<br>
On 2016-12-09 13:37, Claude EDUMA wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
LDAP logs show that user is retreive, but not bind.<br>
<br>
-----<br>
<br>
SRCH base="o=<a href="http://corp.mycorp.com" rel="noreferrer" target="_blank">corp.mycorp.com</a> [2]" scope=2<br>
filter="(&(objectClass=privper<wbr>son)(mail=<a href="mailto:claude.eduma@ext.mycorp.com" target="_blank">claude.eduma@ext.<wbr>mycorp.com</a>))"<br>
attrs="cn mail mail"<br>
[09/Dec/2016:14:16:47 +0100] conn=9480527 op=2 msgId=3 - RESULT err=0<br>
tag=101 nentries=1 etime=0<br>
<br>
----<br>
<br>
Regards.<br>
<br>
2016-12-09 14:21 GMT+01:00 Claude EDUMA <<a href="mailto:claudeduma@gmail.com" target="_blank">claudeduma@gmail.com</a>>:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Well,<br>
<br>
I will try to use user mail for authentication.<br>
<br>
here is conf i tested without success :(<br>
<br>
-----<br>
<br>
Set($ExternalSettings, {<br>
'My_LDAP' => {<br>
'type' => 'ldap',<br>
'server' =><br>
'ldap://<a href="http://ypmycorpldap.corp.mycorp.com" rel="noreferrer" target="_blank">ypmycorpldap.corp.myco<wbr>rp.com</a> [1]',<br>
'user' =><br>
'uid=mycorp-rtir-reader,ou=app<wbr>licationAccounts,o=<a href="http://corp.mycorp.com" rel="noreferrer" target="_blank">corp.mycorp<wbr>.com</a><br>
[2]',<br>
'pass' =><br>
'SikH2mmKLtPi0E4ZYcqldTXAgILVx<wbr>GVhXWlHBF3o21',<br>
'base' => 'o=<a href="http://corp.mycorp.com" rel="noreferrer" target="_blank">corp.mycorp.com</a> [2]',<br>
'filter' => '(objectClass=person)',<br>
'tls' => { verify => "require", cafile =><br>
"/etc/pki/tls/mycorp_CERTIFICA<wbr>TE_CHAIN.crt" },<br>
'net_ldap_args' => [ version => 3, debug => 8<br>
],<br>
'attr_match_list' => [<br>
'Name' ,<br>
'EmailAddress',<br>
],<br>
# Import the following properties of the user from LDAP<br>
upon<br>
# login<br>
'attr_map' => {<br>
'Name' => 'mail',<br>
'EmailAddress' => 'mail',<br>
'RealName' => 'cn',<br>
}<br>
},<br>
}<br>
);<br>
<br>
---<br>
<br>
Regards<br>
<br>
2016-12-09 13:59 GMT+01:00 Martin Wheldon<br>
<<a href="mailto:martin.wheldon@greenhills-it.co.uk" target="_blank">martin.wheldon@greenhills-it.<wbr>co.uk</a>>:<br>
Hi,<br>
<br>
You could either use another unique attribute i.e mail or add<br>
another uid to each RT user prefixed by a letter.<br>
<br>
dn: uid=123456,dc=my,dc=domain<br>
uid: 123456<br>
uid: x123456<br>
<br>
Best Regards<br>
<br>
Martin<br>
<br>
On 2016-12-09 12:49, Joop wrote:<br>
On 9-12-2016 13:38, Claude EDUMA wrote:<br>
Hi Joop,<br>
<br>
Thank you for your quick answer.<br>
We have tested with non numerical username and result is OK.<br>
Well in my organisation we use ldap uid for username. Any suggestion<br>
to resolve this issue ?<br>
<br>
Please keep the list in the loop.<br>
<br>
I think the problem is in the function(s) which load the user info.<br>
These functions take a name OR an id and then load the corresponding<br>
info. When usernames are IDs that doesn't work any more. Other than<br>
patching all functions which use this I don't see another solution<br>
than<br>
to change the use of uid as a username, sorry.<br>
<br>
Joop<br>
<br>
---------<br>
RT 4.4 and RTIR training sessions, and a new workshop day!<br>
<a href="https://bestpractical.com/training" rel="noreferrer" target="_blank">https://bestpractical.com/trai<wbr>ning</a> [3]<br>
* Los Angeles - January 9-11 2017<br>
</blockquote>
---------<br>
RT 4.4 and RTIR training sessions, and a new workshop day!<br>
<a href="https://bestpractical.com/training" rel="noreferrer" target="_blank">https://bestpractical.com/trai<wbr>ning</a> [3]<br>
* Los Angeles - January 9-11 2017<br>
<br>
<br>
<br>
Links:<br>
------<br>
[1] <a href="http://ypmycorpldap.corp.mycorp.com" rel="noreferrer" target="_blank">http://ypmycorpldap.corp.mycor<wbr>p.com</a><br>
[2] <a href="http://corp.mycorp.com" rel="noreferrer" target="_blank">http://corp.mycorp.com</a><br>
[3] <a href="https://bestpractical.com/training" rel="noreferrer" target="_blank">https://bestpractical.com/trai<wbr>ning</a><br>
</blockquote>
---------<br>
RT 4.4 and RTIR training sessions, and a new workshop day!<br>
<a href="https://bestpractical.com/training" rel="noreferrer" target="_blank">https://bestpractical.com/trai<wbr>ning</a><br>
* Los Angeles - January 9-11 2017<br>
</blockquote>
---------<br>
RT 4.4 and RTIR training sessions, and a new workshop day! <a href="https://bestpractical.com/training" rel="noreferrer" target="_blank">https://bestpractical.com/trai<wbr>ning</a><br>
* Los Angeles - January 9-11 2017<br>
</div></div></blockquote></div><br></div>