On Wed, Apr 02, 2014 at 02:44:31PM -0500, Jason Batchelor wrote:
>    Set($ExternalSettings, {
>    'My_LDAP' => {
>    'type' => 'ldap',
>    'server' => 'ldaps://[1]example.company.org',
>    'base' => 'dc=xxxxx,dc=org',
>    'filter' => '(objectClass=*)',
>    'd_filter' => '(userAccountControl:1.2.840.113556.1.4.803:=2)',
>    'tls' => 0,
>    'ssl_version' => 3,
>    'net_ldap_args' => [ version => 3 ]
>    },
>    } );
>    --------------------------------------
>    I am trying to do this via LDAPS using our root CAs (which I have already 
> configured via
>    openLDAP). Each time I attempt to authenticate I get the following error 
> in the logs...

The debugging line blows up because the filter constructed is invalid
because you've not provided attr_map, which means RT has no idea how
to map things in LDAP to things in RT.

You'll need a complete config to use RT::Authen::ExternalAuth

Also, since you're just setting up, upgrade to the current release of
the module.

The docs cover the needed config settings
https://metacpan.org/source/FALCONE/RT-Authen-ExternalAuth-0.18/etc/RT_SiteConfig.pm#L212

-kevin

Attachment: pgpuV9nLWOpeV.pgp
Description: PGP signature

-- 
RT Training - Dallas May 20-21
http://bestpractical.com/training

Reply via email to