[rt-users] Experience hooking RT3 to MS-Exchange2000/Active Directory/LDAP ?

[Senoner Samuel]

Do you want the config for Apache or for RT3?
Do you have Apache 1.03 or Apache 2?

I set up the LDAP authentication from my RT3 Server running with Apache
1.03 to an Active Directory.

And here my problems:

1. The only problem is webfallbackauth, so I cannot log in as root in RT
with webexternalauth.

2. I also configured the automatic creation of the user, but I would be
interesting to have also the user detils, for example the mail adress,
so that not another account is created when this user sends a mail.

Thanks for help

Samuel

-----Original Message-----
From: Autrijus Tang [mailto:autrijus at autrijus.org] 
Sent: Friday,27 June,2003 07:09
To: Gilles-Eric Descamps
Cc: rt-users at lists.fsck.com
Subject: Re: [rt-users] Experience hooking RT3 to MS-Exchange2000/Active
Directory/LDAP ?


On Thu, Jun 26, 2003 at 04:42:44PM -0700, Gilles-Eric Descamps wrote:
> I'm looking for RT3 to get its user login & password
> from a windows 2000 machine.

I have successfully introduced Windows integrated authentication (aka
NTLM single sign-on) to RT a while ago, using this setup in Apache2's
httpd.conf:

    LoadModule sspi_auth_module modules/mod_auth_sspi.so

    # change "/rt3/" to whatever your RT base URL path is
    <LocationMatch "/rt3/">
	AuthName "RT"
	AuthType SSPI
	SSPIAuth On
	SSPIAuthoritative On
	SetHandler perl-script
	PerlHandler RT::Mason
    </LocationMatch>

The SSPI authentication module is available at:
    http://www.syneapps.com/software/mod_auth_sspi/

I believe Apache1 can use mod_ntlm too, although I've never tested it:
    http://www.syneapps.com/software/mod_ntlm/

You also need to put these two lines in RT_SiteConfig.pm:

    Set( $WebExternalAuth, 1 );
    Set( $WebExternalAuto, 1 );

Hope that helps. :-)

Thanks,
/Autrijus/