[rt-users] LDAP auth: should I still create the users in RT even if I use WebExternalAuth?

[seph]

Stephane Bortzmeyer <bortzmeyer at nic.fr> writes:

> I defined $WebExternalAuth in config.pm and now RT no longer asks a
> password, it relies on Apache to do so (Apache uses LDAP).
>
> But, if I try to log in as an user which is in LDAP but not in RT, RT
> yields:
>
> Not logged in.
>
> Error  
> You are not an authorized user
>
> Does it mean that I still have to create the users in RT (may be using
> <URL:http://www.fsck.com/pub/rt/contrib/2.0/rtimportldap.tar> from
> cron to automatize it)? Or will LookupExternalUserInfo help me?
> (Reading its comments, I do not believe it.)

correct. you still need to create RT users. I have patches that will
autocreate users using a user-defined function in config.pm. In my
case it pulled the data from the presented web-cert, but is should be
trivial to change it to do what you want. search the mailing list
archives.

seph