Running SuSE Linux, eDirectory, LDAP, RT 3.8.7. In my test setting, I can query 
ldap anonymously. I downloaded RT-Authen-ExternalAuth-0.08.tar.gz and installed 
it. I notice the wiki page (http://wiki.bestpractical.com/view/ExternalAuth ) 
says to "answer the prompt as to your RT base directory", but I didn't observe 
that behavior. Added the required entries to RT_SiteConfig.pm as far as I can 
tell (see below). Trying to log on as "mjames", I only get "your username or 
password is incorrect".

I feel like I'm missing something obvious... Any ideas?

Mike

Output of ldapsearch command:

rt384:~ # ldapsearch -x -b "o=sbf" -h lxutility "cn=mjames" mail uid
# extended LDIF
#
# LDAPv3
# base <o=sbf> with scope subtree
# filter: cn=mjames
# requesting: mail uid
#

# MJames, STONEBRIDGE, SBF
dn: cn=MJames,ou=STONEBRIDGE,o=SBF

# MJames, Users, STONEBRIDGEBANK, SBF
dn: cn=MJames,cn=Users,ou=STONEBRIDGEBANK,o=SBF
uid: MJames
mail: [email protected] 

# search result
search: 2
result: 0 Success

# numResponses: 3
# numEntries: 2




cat RT_SiteConfig.pm

Set( $rtname, 'CashMgt');
Set(@Plugins , qw(RT::Authen::ExternalAuth));
Set($WebBaseURL , "http://cashmgt.stonebridgebank.com";);
Set( $Organization , "cashmgt.stonebridgebank.com");
Set($Timezone , "US/Eastern");
Set($RTAddressRegexp , '^[email protected]$');
Set($DatabaseType , 'mysql');
Set($DatabaseUser , 'rt_user');
Set($DatabasePassword , 'rt_pass');
Set($DatabaseName , 'cashmgt');
Set($DatabaseHost , 'localhost');
Set($DatabaseRTHost , 'localhost');
Set($MaxAttachmentSize, 50000000);
Set($WebPath , "");
Set($CorrespondAddress , '[email protected]');
Set($CommentAddress , '[email protected]');

Set($ExternalAuthPriority,  [   'My_LDAP',
                                'My_MySQL',
                            ]
);

Set($ExternalInfoPriority,  [   'My_MySQL',
                                'My_LDAP'
                            ]
);

Set($ExternalServiceUsesSSLorTLS,    0);

Set($AutoCreateNonExternalUsers,    0);

Set($ExternalSettings,      {   # AN EXAMPLE DB SERVICE
                                'My_MySQL'   =>  {      ## GENERIC SECTION
                                                        'type'                  
    =>  'db',
                                                        'server'                
    =>  'localhost',
                                                        'database'              
    =>  'cashmgt',
                                                        'table'                 
    =>  'USERS',
                                                        'user'                  
    =>  'rt_user',
                                                        'pass'                  
    =>  'rt_pass',
                                                        'port'                  
    =>  '3306',
                                                        'dbi_driver'            
    =>  'mysql',
                                                        'u_field'               
    =>  'name',
                                                        'p_field'               
    =>  'password',
                                                        'p_enc_pkg'             
    =>  'Crypt::MySQL',
                                                        'p_enc_sub'             
    =>  'password',
                                                        'd_field'               
    =>  'disabled',
                                                        'd_values'              
    =>  ['0'],
                                                        'attr_match_list'       
    =>  [   'Gecos',
                                                                                
            'Name'
                                                                                
        ],
                                                        'attr_map'              
    =>  {   'Name' => 'username',
                                                                                
            'EmailAddress' => 'email',
                                                                                
            'ExternalAuthId' => 'username',
                                                                                
            'Gecos' => 'userID'
                                                                                
        }
                                                    },
                                # AN EXAMPLE LDAP SERVICE
                                'My_LDAP'       =>  {   ## GENERIC SECTION
                                                        'type'                  
    =>  'ldap',
                                                        'server'                
    =>  '172.31.4.56',
                                                        'base'                  
    =>  'o=sbf',
                                                        'filter'                
    =>  '(objectClass=*)',
                                                        'd_filter'              
    =>  '(employmentStatus=Terminated)',
                                                        'tls'                   
    =>  0,
                                                        'ssl_version'           
    =>  3,
                                                        'net_ldap_args'         
    => [    version =>  3   ],
                                                        'attr_match_list'       
    => [
                                                                                
            'Name',
                                                                                
            'EmailAddress'
                                                                                
         ],
                                                        # The mapping of RT 
attributes on to LDAP attributes
                                                        'attr_map'              
    =>  {   'Name' => 'uid',
                                                                                
            'EmailAddress' => 'mail'
                                                                                
         }
                                                    },
                                }
);

1;








The information in this message may be proprietary and/or confidential, and 
protected from disclosure. If the reader of this message is not the intended 
recipient, or an employee or agent responsible for delivering this message to 
the intended recipient, you are hereby notified that any dissemination, 
distribution or copying of this communication is strictly prohibited. If you 
have received this communication in error, please notify Stonebridge Bank 
immediately by replying to this message and deleting it from your computer.
_______________________________________________
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: [email protected]

2010 RT Training Sessions!
San Francisco, CA, USA - Feb 22 & 23
Dublin, Ireland - Mar 15 & 16
Boston, MA, USA - April 5 & 6
Washington DC, USA - Oct 25 & 26

Discover RT's hidden secrets with RT Essentials from O'Reilly Media. 
Buy a copy at http://rtbook.bestpractical.com

Reply via email to