[rt-users] FW: Regular Authentication and ExternalAuth RT 3.8.1

Thu May 21 10:18:29 EDT 2009

I'm still having a problem with this.  Does anyone know how to get LDAP working on RT 3.8.2?  Thank you.

-----Original Message-----
From: Eric Chatham
Sent: Wednesday, May 20, 2009 14:55
To: 'Eric Chatham'; RT-Users at lists.bestpractical.com
Subject: RE: Regular Authentication and ExternalAuth RT 3.8.1

On Tuesday, May 20, 2009, Eric Chatham wrote:

> It appears that after I got Apache/MySql working previously, I am unable to login with the default username/password (root/password) to the web > interface.  I started a new topic for this.  I also tried adding settings in for ExternalAuth to the RT_SiteConfig.pm.  I am getting an @INC
> error in Apache when I try restarting the service.  Even before I added the "External Authentication" variables, "LDAP" variables and the
> "ExternalAuth" Plugin setting, I still could not login using root and password.
>
> /opt/rt3/etc/RT_SiteConfig.pm settings:

I fixed some of my problems.  I did two things to fix them, but I'm still stuck.

1.  I copied my RT_SiteConfig.pm and Apache Config and re-ran the installation (./configure -> make testdeps -> make install).  I copied my saved RT_SiteConfig.pm and Apache config back to their original location.  I ran "make dropdb" to redo the database installation.  There wasn't anything in there before so I was aware of the warning of all data being lost.

This fixed the problem I was having trying to log onto the web interface with the defaults (root and password).  I would like to change this password, can anyone tell me how this is changed?  The README file didn't say how or where.

> APACHE ERROR_LOG:
>
> [Tue May 19 12:54:25 2009] [error] Can't load Perl file: /opt/rt3/bin/webmux.pl for server clehbrtsrv01.broadvox.local:0, exiting...
> [Tue May 19 12:55:17 2009] [error] Can't locate RT/Authen/ExternalAuth.pm in @INC (@INC contains: /opt/rt3/bin/../local/lib /opt/rt3/bin/../lib > /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.7/i386-linux-thread-multi
> /usr/lib/perl5/site_perl/5.8.6/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.8
> /usr/lib/perl5/site_perl/5.8.7 /usr/lib/perl5/site_perl/5.8.6 /usr/lib/perl5/site_perl/5.8.5 /usr/lib/perl5/site_perl
> /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.7/i386-linux-thread-multi
> /usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi
> /usr/lib/perl5/vendor_perl/5.8.8 /usr/lib/perl5/vendor_perl/5.8.7 /usr/lib/perl5/vendor_perl/5.8.6 /usr/lib/perl5/vendor_perl/5.8.5
> /usr/lib/perl5/vendor_perl /usr/lib/perl5/5.8.8/i386-linux-thread-multi /usr/lib/perl5/5.8.8 . /etc/httpd) at /opt/rt3/bin/../lib/RT.pm line
> 625.\nCompilation failed in require at (eval 2) line 1.\n
> [Tue May 19 12:55:17 2009] [error] Can't load Perl file: /opt/rt3/bin/webmux.pl for server clehbrtsrv01.broadvox.local:0, exiting...

2.  I partly fixed the problem I was having with LDAP.  First, I looked for the ./RT/Authen/ directory and copied it recursively over to /opt/rt3/bin.  This fixed the problem as far as the Module being included, but it did not fix the problem I'm having trying to use LDAP.

So, here are examples of my problems after the fixings.  Could someone double check them for me?  Thank you once again for your assistance.

RT_SiteConfig.pm settings:

# Set( $rtname, 'example.com');
# Set(@Plugins,(qw(Extension::QuickDelete)));
# Set($WebPath, "/rt3");
Set($rtname, "broadvox.local");
Set($Orginization, 'broadvox.local');
Set($CorrespondAddress, 'echatham at broadvox.net');
Set($CommentAddress, 'echatham at infotelecom.us');
Set($Timezone, 'US/Eastern');
# Set($WebBaseURL, 'http://rt.broadvox.local/');
Set(@Plugins, qw(RT::Authen::ExternalAuth));

# Database
# Set($DatabaseType, 'mysql');
# Set($DatabaseUser, 'rt_user');
# Set($DatabasePassword, 'rt_pass');
# Set($DatabaseRTHost, 'localhost');

# External Authentication
Set($ExternalAuthPriority, ['My_LDAP']);
Set($ExternalInfoPriority, ['My_LDAP']);
Set($AutoCreateNonExternalUsers, 1);
Set($ExternalAuthPriority, ['My_LDAP', 'My_MySQL', 'My_Oracle', 'SecondaryLDAP', 'Other-DB']);

# LDAP
Set($AuthMethods, ['My_LDAP', 'Internal']);
Set($LdapExternalAuth, 0);
Set($LdapExternalInfo, 0);
Set($LdapAutoCreateNonLdapUsers, 1);
Set($LdapAttrMap, {'Name' => 'sAMAccountName',
                   'EmailAddress' => 'mail',
                   'Orginization' => 'o',
                   'RealName' => 'cn',
                   'ExternalContactInfoId' => 'dn',
                   'ExternalAuthId' => 'sAMAccountName',
                   'Gecos', => 'sAMAccountName',
                   'WorkPhone', => 'telephoneNumber',
                   'Address1' => 'streetAddress',
                   'City' => 'l',
                   'State' => 'st',
                   'Zip' => 'postalCode',
                   'Country' => 'co'});
Set($LdapRTAttrMatchList, ['ExternalContactInfoId', 'Name',
                           'EmailAddress', 'RealName',
                           'WorkPhone', 'Address2']);
Set($LdapEmailAttrMatchList, ['mail', 'mailRoutingAddress',
                              'mailAlternateAddress']);
Set($LdapEmailAttrMatchPrefix, ['', 'smtp', 'SMTP:']);
Set($LdapServer, 'clehbdc01.broadvox.local');
Set($LdapBase, 'OU=USA,DC=broadvox,DC=local');
Set($LdapFilter, '(objectClass=*)');
1;

Here are my APACHE ERROR_LOG listings:

[Wed May 20 14:07:07 2009] [notice] Apache/2.2.3 (CentOS) configured -- resuming normal operations
[Wed May 20 18:08:04 2009] [error]: FAILED LOGIN for echatham from 172.16.3.38 (/opt/rt3/share/html/autohandler:268)
[Wed May 20 18:08:09 2009] [error]: FAILED LOGIN for echatham from 172.16.3.38 (/opt/rt3/share/html/autohandler:268)
[Wed May 20 18:08:13 2009] [error]: FAILED LOGIN for echathamAuxal9op from 172.16.3.38 (/opt/rt3/share/html/autohandler:268)
[Wed May 20 18:08:19 2009] [error]: FAILED LOGIN for echatham from 172.16.3.38 (/opt/rt3/share/html/autohandler:268)
[Wed May 20 18:08:28 2009] [info]: Successful login for root from 172.16.3.38 (/opt/rt3/share/html/autohandler:276)
[Wed May 20 18:08:43 2009] [error]: FAILED LOGIN for echatham at broadvox.local from 172.16.3.38 (/opt/rt3/share/html/autohandler:268)
[Wed May 20 18:08:55 2009] [error]: FAILED LOGIN for echatham at broadvox.local from 172.16.3.38 (/opt/rt3/share/html/autohandler:268)
[Wed May 20 18:09:21 2009] [info]: Successful login for root from 172.16.3.38 (/opt/rt3/share/html/autohandler:276)
[Wed May 20 18:11:05 2009] [error]: FAILED LOGIN for echatham from 172.16.3.38 (/opt/rt3/share/html/autohandler:268)
[Wed May 20 18:11:12 2009] [error]: FAILED LOGIN for echatham from 172.16.3.38 (/opt/rt3/share/html/autohandler:268)

Eric Chatham

CONFIDENTIAL.  This e-mail and any attached files are confidential and should be destroyed and/or returned if you are not the intended and proper recipient.