[rt-users] ExternalAuth - loading fine but isn't authenticating to LDAP

Mike Johnson mike.johnson at nosm.ca
Mon Jul 26 16:25:21 EDT 2010


Hi Kevin,

I'm not a Perl wiz at all, and I'm just grasping at straws trying to
troubleshoot why it isn't working.

Here is the core of the log before the lines I posted...

[Mon Jul 26 19:52:54 2010] [debug]: Reloading RT::User to work around a bug
in RT-3.8.0 and RT-3.8.1
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/html/Callbacks/ExternalAuth/autohandler/Auth:14)
[Mon Jul 26 19:52:54 2010] [debug]: Attempting to use external auth service:
NOSMLDAP
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:64)
[Mon Jul 26 19:52:54 2010] [debug]: SSO Failed and no user to test with.
Nexting
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:92)
[Mon Jul 26 19:52:54 2010] [debug]: Autohandler called ExternalAuth.
Response: (0, No User)
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/html/Callbacks/ExternalAuth/autohandler/Auth:26)
[Mon Jul 26 19:52:58 2010] [debug]: Reloading RT::User to work around a bug
in RT-3.8.0 and RT-3.8.1
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/html/Callbacks/ExternalAuth/autohandler/Auth:14)
[Mon Jul 26 19:52:58 2010] [debug]: Attempting to use external auth service:
NOSMLDAP
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:64)
[Mon Jul 26 19:52:58 2010] [debug]: Calling UserExists with $username
(testuser) and $service (NOSMLDAP)
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:105)
[Mon Jul 26 19:52:58 2010] [debug]: UserExists params:
username: testuser , service: NOSMLDAP
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:274)
[Mon Jul 26 19:52:58 2010] [debug]: LDAP Search ===  Base: dc=nosm,dc=local
== Filter:
(&(&(objectCategory=User)(ObjectClass=Person))(sAMAccountName=testuser)) ==
Attrs: cn,mail,sAMAccountName,sAMAccountName
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:304)
[Mon Jul 26 19:52:58 2010] [debug]:
RT::Authen::ExternalAuth::CanonicalizeUserInfo called by RT::User
/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/User_Vendor.pm 20 with:
Disabled: 0, EmailAddress: , Gecos: testuser, Name: testuser, Priviledged:
1, Privileged: 0
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:450)
[Mon Jul 26 19:52:58 2010] [debug]: Attempting to get user info using this
external service: NOSMLDAP
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:458)
[Mon Jul 26 19:52:58 2010] [debug]: Attempting to use this canonicalization
key: Name
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:472)
[Mon Jul 26 19:52:58 2010] [debug]: LDAP Search ===  Base: dc=nosm,dc=local
== Filter:
(&(&(objectCategory=User)(ObjectClass=Person))(sAMAccountName=testuser)) ==
Attrs: cn,mail,sAMAccountName,sAMAccountName
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:195)
[Mon Jul 26 19:52:58 2010] [info]:
RT::Authen::ExternalAuth::CanonicalizeUserInfo returning Disabled: 0,
EmailAddress: test.user at normed.ca, ExternalAuthId: testuser, Gecos:
testuser, Name: testuser, Priviledged: 1, Privileged: 0, RealName: Test User
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:536)
[Mon Jul 26 19:52:58 2010] [warning]: DBD::mysql::st execute failed: Unknown
column 'Priviledged' in 'field list' at
/usr/lib/perl5/site_perl/5.8.8/DBIx/SearchBuilder/Handle.pm line 509, <DATA>
line 273. (/usr/lib/perl5/site_perl/5.8.8/DBIx/SearchBuilder/Handle.pm:509)
[Mon Jul 26 19:52:58 2010] [warning]: RT::Handle=HASH(0x2b88760b6e00)
couldn't execute the query 'INSERT INTO Users (Priviledged, RealName,
EmailAddress, Creator, Gecos, LastUpdatedBy, Password, Created, id, Name,
LastUpdated, ExternalAuthId) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)' at
/usr/lib/perl5/site_perl/5.8.8/DBIx/SearchBuilder/Handle.pm line 522

DBIx::SearchBuilder::Handle::SimpleQuery('RT::Handle=HASH(0x2b88760b6e00)',
'INSERT INTO Users (Priviledged, RealName, EmailAddress, Creat...', 1, 'Test
User', 'test.user at normed.ca', 1, 'testuser', 1, '*NO-PASSWORD*', ...) called
at /usr/lib/perl5/site_perl/5.8.8/DBIx/SearchBuilder/Handle.pm line 357

DBIx::SearchBuilder::Handle::Insert('RT::Handle=HASH(0x2b88760b6e00)',
'Users', 'Priviledged', 1, 'RealName', 'Test User', 'EmailAddress',
'test.user at normed.ca', 'Creator', ...) called at
/usr/lib/perl5/site_perl/5.8.8/DBIx/SearchBuilder/Handle/mysql.pm line 36

DBIx::SearchBuilder::Handle::mysql::Insert('RT::Handle=HASH(0x2b88760b6e00)',
'Users', 'Priviledged', 1, 'RealName', 'Test User', 'EmailAddress',
'test.user at normed.ca', 'Creator', ...) called at
/usr/lib/perl5/site_perl/5.8.8/DBIx/SearchBuilder/Record.pm line 1293
        DBIx::SearchBuilder::Record::Create('RT::User=HASH(0x2b8876d75580)',
'Priviledged', 1, 'RealName', 'Test User', 'Creator', 1, 'EmailAddress',
'test.user at normed.ca', ...) called at /opt/rt3/bin/../lib/RT/Record.pm line
289
        RT::Record::Create('RT::User=HASH(0x2b8876d75580)', 'id', 40,
'Priviledged', 1, 'RealName', 'Test User', 'EmailAddress',
'test.user at normed.ca', ...) called at /opt/rt3/bin/../lib/RT/User_Overlay.pm
line 195
        RT::User::Create('RT::User=HASH(0x2b8876d75580)', 'Priviledged', 1,
'Name', 'testuser', 'Gecos', 'testuser') called at
/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm
line 124
        RT::Authen::ExternalAuth::DoAuth('HASH(0x2b88754ecc70)', 'testuser',
'<<password>>') called at
/opt/rt3/local/plugins/RT-Authen-ExternalAuth/html/Callbacks/ExternalAuth/autohandler/Auth
line 25
        HTML::Mason::Commands::__ANON__('pass', '<<password>>', 'user',
'testuser') called at /usr/lib/perl5/site_perl/5.8.8/HTML/Mason/Component.pm
line 135

HTML::Mason::Component::run('HTML::Mason::Component::FileBased=HASH(0x2b8875502fc0)',
'pass', '<<password>>', 'user', 'testuser') called at
/usr/lib/perl5/site_perl/5.8.8/HTML/Mason/Request.pm line 1297
        eval {...} called at
/usr/lib/perl5/site_perl/5.8.8/HTML/Mason/Request.pm line 1292
        HTML::Mason::Request::comp('undef', 'undef', 'pass', '<<password>>',
'user', 'testuser') called at
/opt/rt3/bin/../lib/RT/Interface/Web/Request.pm line 180

RT::Interface::Web::Request::callback('RT::Interface::Web::Request=HASH(0x2b8879903140)',
'pass', '<<password>>', 'user', 'testuser', 'CallbackName', 'Auth',
'CallbackPage', '/autohandler', ...) called at
/opt/rt3/bin/../lib/RT/Interface/Web.pm line 202
        RT::Interface::Web::HandleRequest('HASH(0x2b88755d3130)') called at
/opt/rt3/share/html/autohandler line 53
        HTML::Mason::Commands::__ANON__('pass', '<<password>>', 'user',
'testuser') called at /usr/lib/perl5/site_perl/5.8.8/HTML/Mason/Component.pm
line 135

HTML::Mason::Component::run('HTML::Mason::Component::FileBased=HASH(0x2b88754e9dd0)',
'pass', '<<password>>', 'user', 'testuser') called at
/usr/lib/perl5/site_perl/5.8.8/HTML/Mason/Request.pm line 1297
        eval {...} called at
/usr/lib/perl5/site_perl/5.8.8/HTML/Mason/Request.pm line 1292
        HTML::Mason::Request::comp('undef', 'undef', 'undef', 'pass',
'<<password>>', 'user', 'testuser') called at
/usr/lib/perl5/site_perl/5.8.8/HTML/Mason/Request.pm line 481
        eval {...} called at
/usr/lib/perl5/site_perl/5.8.8/HTML/Mason/Request.pm line 481
        eval {...} called at
/usr/lib/perl5/site_perl/5.8.8/HTML/Mason/Request.pm line 433

HTML::Mason::Request::exec('RT::Interface::Web::Request=HASH(0x2b8879903140)')
called at /usr/lib/perl5/site_perl/5.8.8/HTML/Mason/ApacheHandler.pm line
168

HTML::Mason::Request::ApacheHandler::exec('RT::Interface::Web::Request=HASH(0x2b8879903140)')
called at /usr/lib/perl5/site_perl/5.8.8/HTML/Mason/ApacheHandler.pm line
825

HTML::Mason::ApacheHandler::handle_request('HTML::Mason::ApacheHandler=HASH(0x2b8875f5ae80)',
'Apache2::RequestRec=SCALAR(0x2b887622f770)') called at /opt/rt3/bin/
webmux.pl line 78
        eval {...} called at /opt/rt3/bin/webmux.pl line 78
        RT::Mason::handler('Apache2::RequestRec=SCALAR(0x2b887622f770)')
called at -e line 0
        eval {...} called at -e line 0 (/usr/lib/perl5/5.8.8/Carp.pm:272)
[Mon Jul 26 19:52:58 2010] [error]: Could not create a new user -
Priviledged-1-RealName-Test
User-EmailAddress-test.user at normed.ca-Gecos-testuser-Password-*NO-PASSWORD*-Name-testuser-ExternalAuthId-testuser(/opt/rt3/bin/../lib/RT/User_Overlay.pm:201)
[Mon Jul 26 19:52:58 2010] [error]: Couldn't create user testuser: Could not
create user
(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:129)



Again, I am no perl wiz, and I'm just making guesses as to whats wrong based
on these logs... RTFM might work with 3.8.8, I just can't get mine to work.

Sorry if I mislead in my wording.

Mike.
On Mon, Jul 26, 2010 at 4:12 PM, Kevin Falcone <falcone at bestpractical.com>wrote:

> On Mon, Jul 26, 2010 at 04:09:01PM -0400, Mike Johnson wrote:
> >    Something is preventing the user from being created... based on the
> INSERT language I see, it
> >    looks like RTFM doesn't work with 3.8.8??? I dunno, it's trying to use
> a field called
> >    Priviledged in the User table... which doesn't exist?
>
> Please provide the actual failing code you're seeing.
> Privileged is a user attribute stored in a different table.
> Why do you believe that RTFM is causing conflicts with this?
>
> -kevin
>
>
> Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
> Buy a copy at http://rtbook.bestpractical.com
>



-- 
Mike Johnson
Datatel Programmer/Analyst
Northern Ontario School of Medicine
955 Oliver Road
Thunder Bay, ON   P7B 5E1
Phone: (807) 766-7331
Email: mike.johnson at nosm.ca
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20100726/956e3f06/attachment.htm>


More information about the rt-users mailing list