[rt-users] RT 3.4.4 with Active Directory?

[Nathan J. Mehl]

In the immortal words of Pavel Kobelev (pkobel at boo.st):
> Can you to help me to find simple and direct method
> to authenticate RT user to Active Directory 2003? We
> use Apache 2.
> 
> I have tried these steps
> http://blank.org/memory/output/rt-ad-sso.html
> 
> RT never finds user and always goes to Self Service
> part of RT.

Pavel--

That is the correct behavior!  By default, the user is created in RT
without privileges and the password is validated against AD, so you
get the selfservice login.

If you want to give access to the normal RT interface, you need to log
in as the administrator, pull up that user's RT profile, and give them
the appropriate rights -- check the "Let this user be granted rights"
checkbox in the user profile, and add them to a group that has the
SeeQueue (at a minimum) right for some queues.

(This is why the instructions suggest first creating a user in RT with
superuser rights and the same username as an AD administrator first
and foremost...)

-n

---------------------------------------------------<memory at blank.org>
        Just remember.  Abraham Lincoln didn't die in vain.
                   He died in Washington, D.C.
<http://blank.org/memory/>-------------------------------------------