i have a setup like this.
the ldap/AD integration is two fold.
one piece gives you all the "info" part (fill up all the
user's details on logon to RT from ldap)
one piece takes care of the authentication.
it looks like you have taken care of one of the two pieces,
but not the other. the wiki has very nice details on how to accomplish
that...
HTH
Jok
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Philip Kime
Sent: Saturday, August 12, 2006 11:17 AM
To: [email protected]
Subject: [rt-users] LDAP overlay questionI'm wondering if I'm trying to do things which are impossible:* I have a few hundred users all with internal RT accounts which I want to move to authenticating from AD (they all have AD account). If I put the LDAP user overlay in place, It grabs the info from AD into the RT user fields but will not let the user log on with the AD password, only the internal RT one.* What about true Single-Sign on? That it, it automatically logs you into RT if you are already logged into the AD domain? Would this need to be done with the Apache mod_ldap extension?PK--Philip KimeNOPS Systems Architect310 401 0407
_______________________________________________ http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
Community help: http://wiki.bestpractical.com Commercial support: [EMAIL PROTECTED] Discover RT's hidden secrets with RT Essentials from O'Reilly Media. Buy a copy at http://rtbook.bestpractical.com
