[rt-users] Installing and Using ExternalAuth

[Eric Chatham]

On Thursday, May 14, 2009 17:03, Kevin wrote:

>> After I installed the ExternalAuth v0.05, I began modifying my
>> RT_SiteConfig.PM to reflect the LDAP setup.  When I try to log onto
>> through the Web Interface, I receive an error.  When I try logging
>> in with the default "root" login, I get the same error, but when I
>> click "back" I'm logged in (as root).  This only happens for the
>> default "root" user for RT, otherwise no LDAP users can log in.
>> Here is the Error from the Web Interface:
>
> You didn't define the ExternalAuthPriority array to tell the
> externalauth
> what to do.
>
> RT's internal auth is kicking in and recognizing the root user/pass

Hello, Kevin.  Thank you for the reply.  Where do I define the array at and how do I define it?

-Eric

>
>
> error:  Can't use an undefined value as an ARRAY reference at /usr/
> local/rt3/lib/RT/User_Vendor.pm line 56.
>
> context:  ...
> 52:  $RT::Logger->debug( (caller(0))[3],
> 53:  "Trying External authentication");
> 54:
> 55:  # Get the prioritised list of external authentication services
> 56:  my @auth_services = @$RT::ExternalAuthPriority;
> 57:
> 58:  # For each of those services..
> 59:  foreach my $service (@auth_services) {
> 60:
> ...
>
> code stack:  /usr/local/rt3/lib/RT/User_Vendor.pm:56
> /usr/local/rt3/lib/RT/User_Vendor.pm:359
> /usr/share/rt3/html/Callbacks/ExternalAuth/autohandler/Auth:35
> /usr/share/rt3/html/Elements/Callback:85
> /usr/share/rt3/html/autohandler:240
>
> -------------------------------------------
>
> I should stress, I'm not modifying the RT_Config.pm settings in /etc/
> rt3.  I'm having a problem seeing the $rtname display our company
> domain.  It still shows example.com.
>
> Here are my /etc/rt3/RT_SiteConfig.pm settings:
>
> Set($WebPath, "/rt3");
> Set($rtname, "broadvox.local");
> Set($Orginization, 'broadvox.local');
> Set($CorrespondAddress, 'echatham at broadvox.net'); Set($CommentAddress,
> 'echatham at infotelecom.us'); Set($Timezone, 'US/Eastern');
> Set($DatabaseType, 'mysql'); Set($WebBaseURL,
> 'http://rt.broadvox.local/'); Set(@Plugins,
> qw(RT::Authen::ExternalAuth));
>
> # LDAP
> Set($AuthMethods, ['LDAP', 'Internal']); Set($LdapExternalAuth, 0);
> Set($LdapExternalInfo, 0); Set($LdapAutoCreateNonLdapUsers, 1);
> Set($LdapAttrMap, {'Name' => 'sAMAccountName',
>                 'EmailAddress' => 'mail',
>                 'Orginization' => 'o',
>                 'RealName' => 'cn',
>                 'ExternalContactInfoId' => 'dn',
>                 'ExternalAuthId' => 'sAMAccountName',
>                 'Gecos', => 'sAMAccountName',
>                 'WorkPhone', => 'telephoneNumber',
>                 'Address1' => 'streetAddress',
>                 'City' => 'l',
>                 'State' => 'st',
>                 'Zip' => 'postalCode',
>                 'Country' => 'co'});
> Set($LdapRTAttrMatchList, ['ExternalContactInfoId', 'Name',
>                         'EmailAddress', 'RealName',
>                         'WorkPhone', 'Address2']);
> Set($LdapEmailAttrMatchList, ['mail', 'mailRoutingAddress',
>                            'mailAlternateAddress']);
> Set($LdapEmailAttrMatchPrefix, ['', 'smtp', 'SMTP:']);
> Set($LdapServer, 'clehbdc01.broadvox.local'); Set($LdapBase,
> 'OU=USA,DC=broadvox,DC=local'); Set($LdapFilter,
> '(objectClass=user)'); 1;
>
> ----------------------------------
>
> Thank you for your assistance. :)
>
>
> -Eric

CONFIDENTIAL.  This e-mail and any attached files are confidential and should be destroyed and/or returned if you are not the intended and proper recipient.