[rt-users] Experience hooking RT3 to MS-Exchange2000/Active Directory/LDAP ?

[Senoner Samuel]

Me too. Sorry I wrote it wrong.
RT3 can get authentication from apache.
Apache can get authentication from in many ways from Active directory. I
used LDAP. And it worked.

What do you exactly need?

Do someone have some scripts for LDAP working on RT3?
It would be interesting if some RT3 picks imformation through LDAP about
new user, that means mail and so on..

Samuel

-----Original Message-----
From: Gilles-Eric Descamps [mailto:ged at azulsystems.com] 
Sent: Friday,27 June,2003 18:35
To: Senoner Samuel
Subject: RE: [rt-users] Experience hooking RT3 to MS-Exchange2000/Active
Directory/LDAP ?



  I've apache 1.3.27 (latest of the 1.3.xxx)


-----Original Message-----
From: Senoner Samuel [mailto:Samuel.Senoner at eurac.edu] 
Sent: Friday, June 27, 2003 12:52 AM
To: Gilles-Eric Descamps
Cc: rt-users at lists.fsck.com
Subject: RE: [rt-users] Experience hooking RT3 to MS-Exchange2000/Active
Directory/LDAP ?


Do you want the config for Apache or for RT3?
Do you have Apache 1.03 or Apache 2?

I set up the LDAP authentication from my RT3 Server running with Apache
1.03 to an Active Directory.

And here my problems:

1. The only problem is webfallbackauth, so I cannot log in as root in RT
with webexternalauth.

2. I also configured the automatic creation of the user, but I would be
interesting to have also the user detils, for example the mail adress,
so that not another account is created when this user sends a mail.

Thanks for help

Samuel

-----Original Message-----
From: Autrijus Tang [mailto:autrijus at autrijus.org] 
Sent: Friday,27 June,2003 07:09
To: Gilles-Eric Descamps
Cc: rt-users at lists.fsck.com
Subject: Re: [rt-users] Experience hooking RT3 to MS-Exchange2000/Active
Directory/LDAP ?


On Thu, Jun 26, 2003 at 04:42:44PM -0700, Gilles-Eric Descamps wrote:
> I'm looking for RT3 to get its user login & password
> from a windows 2000 machine.

I have successfully introduced Windows integrated authentication (aka
NTLM single sign-on) to RT a while ago, using this setup in Apache2's
httpd.conf:

    LoadModule sspi_auth_module modules/mod_auth_sspi.so

    # change "/rt3/" to whatever your RT base URL path is
    <LocationMatch "/rt3/">
	AuthName "RT"
	AuthType SSPI
	SSPIAuth On
	SSPIAuthoritative On
	SetHandler perl-script
	PerlHandler RT::Mason
    </LocationMatch>

The SSPI authentication module is available at:
    http://www.syneapps.com/software/mod_auth_sspi/

I believe Apache1 can use mod_ntlm too, although I've never tested it:
    http://www.syneapps.com/software/mod_ntlm/

You also need to put these two lines in RT_SiteConfig.pm:

    Set( $WebExternalAuth, 1 );
    Set( $WebExternalAuto, 1 );

Hope that helps. :-)

Thanks,
/Autrijus/