On Tue, Jun 21, 2011 at 11:48:43AM +0100, Guy Baxter wrote: > [Tue Jun 21 10:42:11 2011] [info]: > RT::Authen::ExternalAuth::CanonicalizeUserInfo returning Disabled: 0, > EmailAddress: [email protected], Gecos: A Weetman, Name: gbaxter, > Privileged: 0, RealName: > (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:536) > [Tue Jun 21 10:42:11 2011] [error]: Couldn't create user A Weetman: Name > in use > (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:129) > [Tue Jun 21 10:42:11 2011] [error]: FAILED LOGIN for A Weetman from > 192.164.0.67 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:639) > > Unsure what the first line is as that's my UPN account details from AD. > The user I logged in as was A Weetman from OD
Are the usernames the same? Since it certainly seems that AD matched and proceeded with auth. The extension should have logged the query it ran in AD to do the match. The other points in this thread about your attr_match_list and shared email/usernames are well worth pursuing. -kevin
pgpBUl6zlXDwz.pgp
Description: PGP signature
-------- 2011 Training: http://bestpractical.com/services/training.html
