[rt-users] Intergration with LDAP

[Nelson Pereira]

I'm sorry Mike, I guess I did not read your email correctly. Truly
sorry.
I guess I was impatient to get this working right and just got
frustrated...
Now this morning, I'm more relaxed, enjoying a coffee...

So I changed what you suggested and when login in, I get this error:

System error
error:  Can't use an undefined value as an ARRAY reference at
/opt/rt3/local/lib/RT/User_Vendor.pm line 56.
 
context:  ...   
52:  $RT::Logger->debug( (caller(0))[3], 
53:  "Trying External authentication"); 
54:   
55:  # Get the prioritised list of external authentication services 
56:  my @auth_services = @$RT::ExternalAuthPriority; 
57:   
58:  # For each of those services.. 
59:  foreach my $service (@auth_services) { 
60:   
...   
 code stack:  /opt/rt3/local/lib/RT/User_Vendor.pm:56
/opt/rt3/local/lib/RT/User_Vendor.pm:359
/opt/rt3/share/html/Callbacks/ExternalAuth/autohandler/Auth:30
/opt/rt3/share/html/Elements/Callback:85
/opt/rt3/share/html/autohandler:240
 raw error




Here is the RT_SiteConfig.pm :

Set($AuthMethods, ['LDAP', 'Internal']);
Set($LdapExternalAuth, 1);
Set($LdapExternalInfo, 1);
Set($LdapAutoCreateNonLdapUsers, 1);
Set($AutoCreate, {Privileged => 1});
Set($ExternalSettings,      {   'My_LDAP'       =>  {   
 'type'                      =>  'ldap',
 'auth'                      =>  1,
 'info'                      =>  1,
 'server'                    =>  'p02.protus.org',
 'user'                      =>  'ldapintegration',
 'pass'                    =>  '******',
 'base'                      =>  'CN=Users,DC=protus,DC=org',
 'filter'                    =>  '(objectClass=*)',
 'd_filter'                  =>
'(userAccountControl:1.2.840.113556.1.4.803:=2)',
 'tls'                       =>  0,
 'net_ldap_args'             => [    version =>  3   ],
 'group'                     =>  '',
 'group_attr'                =>  '',
 'attr_match_list'           => [    'Name',
 'EmailAddress',
 'RealName',
 'WorkPhone',
 'Address2' ],
'attr_map'                  =>  {   
'Name' => 'sAMAccountName',
'EmailAddress' => 'mail',
'Organization' => 'physicalDeliveryOfficeName',
'RealName' => 'cn',
'ExternalAuthId' => 'sAMAccountName',
'Gecos' => 'sAMAccountName',
'WorkPhone' => 'telephoneNumber',
'Address1' => 'streetAddress',
'City' => 'l',
'State' => 'st',
'Zip' => 'postalCode',
'Country' => 'co'
   }
  }
 }
);
1;

Regards,
 
Nelson Pereira




-----Original Message-----
From: mpeac at jennic.com [mailto:mpeac at jennic.com] On Behalf Of Mike
Peachey
Sent: Tuesday, April 08, 2008 5:07 PM
To: Nelson Pereira
Cc: Chaim Rieger; rt-users at lists.bestpractical.com
Subject: Re: [rt-users] Intergration with LDAP

Nelson Pereira wrote:
> So what are you saying?
> 
>          # The filter to use to match RT-Users
>          'filter'                    =>  '(cn=*)',
>          # The filter that will only match disabled users
>          'd_filter'                  =>  '(objectClass=*)',
> 
> 
> ????????????

Just how explicit do I have to be?!

Are you even reading my replies? I don't know whether you're just really

inexperienced in IT or just not bothering to read what I've written.

I gave you the EXACT lines you need:

'filter'	=> '(objectClass=*)',
'd_filter'	=> '(userAccountControl:1.2.840.113556.1.4.803:=2)',


 > How do I go back to standard auth....

I also told you the EXACT files/folders you need to remove from your RT 
installation to remove the ExternalAuth extension:

$RTHOME/share/html/Callbacks/ExternalAuth
$RTHOME/local/etc/ExternalAuth/RT_SiteConfig.pm
$RTHOME/local/lib/RT/Authen/ExternalAuth.pm
$RTHOME/local/lib/RT/User_Vendor.pm

I'm really quite a patient person, but in this case I'm just
flabbergasted.

 > I tried removing the
 > Set($ExternalSettings,
 > But I'm getting all sorts of errors ...

Of COURSE you would! You can't just remove the config options, you need 
to remove the code as I told you before.
-- 
Kind Regards,

___________________________________________________

Mike Peachey, IT
Tel: +44 (0) 114 281 2655
Fax: +44 (0) 114 281 2951
Jennic Ltd, Furnival Street, Sheffield, S1 4QT,  UK
http://www.jennic.com
Confidential
___________________________________________________