[rt-users] LDAP integration question

[charlie derr]

Greetings all,
	I'm only in the early analysis stage of trying to figure out if RT is a good fit for us.  We currently use Trac for our ticketing 
system, which is workable, but not universally liked (being more of an appropriate solution for an ongoing open-source project 
than it is for a small college IT helpdesk).  Anyhow, I have a test instance of RT+AssetTracker up and running on an old 
underpowered VM, but I'm definitely only scratching the surface (I have the _RT Essentials_ book but I haven't yet read it all the 
way through).  My question is about how to leverage our LDAP directory in order to allow end-users to create tickets.  We have a 
small enough staff that creating local RT users for our admin personnel is not a problem (I have no requirement to also sync this 
information from LDAP as it's easily manageable as an independent data silo (living within the RT database backend I presume)). 
But what is the canonical solution for allowing our users to login to the web interface (using their existing usernames/passwords 
which we already have set in LDAP (for their email accounts among other uses))?  Do I want to be leveraging the HTTP-auth stuff 
from apache (I believe this is how we solve this issue with Trac currently), or is there a way to have RT directly query a 
specific PAM layer that's been configured correctly (to back against our LDAP) on the RT server?  Or maybe there's a different way 
to accomplish what I want.  I made it into the beginning of the chapter on scrips last night, so I have no doubt that (given more 
perl coding chops than I currently possess) there are definitely enough tools available to solve this problem, but it seemed worth 
asking for direction (as I can't imagine I'm the first person to want to do this).

	thanks so much in advance for any information,
			~c