Re: [rt-users] AD integration for external auth

2015-07-08 Thread Todd Wade
On 7/7/15 4:50 PM, Yan Seiner wrote: But the way ExternalAuth is set up, I have to provide the ldap userid and password, which in our system would be a real user. 'user' = 'rt_ldap_username', 'pass' = 'rt_ldap_password', Is

Re: [rt-users] AD integration for external auth

2015-07-07 Thread Trev
Use -- Plugin( RT::Extension::LDAPImport ); Note the configuration I linked to you prior. I had some issues with limited functionality using Plugin('RT::Authen::ExternalAuth').. it's been a while actually, I may not even have had that extension working. On Tue, Jul 7, 2015 at 1:28 PM, Trev

Re: [rt-users] AD integration for external auth

2015-07-07 Thread Trev
This may help: http://trevthorpe.blogspot.com/2015/01/request-tracker-424-ldap-authentication.html On Tue, Jul 7, 2015 at 11:24 AM, Yan Seiner y...@seiner.com wrote: I'm coming back to RT after a few years. I am trying to set up external auth against our AD server. I have a working

Re: [rt-users] AD integration for external auth

2015-07-07 Thread Trev
If you mean during the login via RT Gui -- username is, sAMAccountName. THere shouldn't be any need to prefix with the domain as the domain is already be queried. On Tue, Jul 7, 2015 at 1:24 PM, Yan Seiner y...@seiner.com wrote: What format do you use for the username? When I try hpm\yans

[rt-users] AD integration for external auth

2015-07-07 Thread Yan Seiner
I'm coming back to RT after a few years. I am trying to set up external auth against our AD server. I have a working implementation for mediawiki, so I know that it's possible on our system. As far as possible I've duplicated the options from mediawiki/php to rt/perl, but I am still missing

Re: [rt-users] AD integration for external auth

2015-07-07 Thread Yan Seiner
What format do you use for the username? When I try hpm\yans which should, in theory, work, I get: [5367] [Tue Jul 7 17:07:28 2015] [debug]: LDAP Search === Base: dc=hpm,dc=net == Filter: ((objectClass=*)(sAMAccountName=hpm\5cyans)) == Attrs: sAMAccountName,mail

Re: [rt-users] AD integration for external auth

2015-07-07 Thread Trev
Sorry about that, review the blog entry I sent you prior. I do see I did add that plugin, again, it's been a while since I wrestled with LDAP authentication. So, I threw my working config with notes, into that blog. On Tue, Jul 7, 2015 at 1:30 PM, Trev tre...@onepost.net wrote: Use --

Re: [rt-users] AD integration for external auth

2015-07-07 Thread Trev
Generally speaking, it is typical to create an 'LDAP User' for binding, and reading purposes within AD itself. LDAPImport does authenticate against the users in AD. And builds the user records within RT as I have mapped in my example. Cronjob to do the import, maybe every 15 minutes. Makes it

Re: [rt-users] AD integration for external auth

2015-07-07 Thread Yan Seiner
I'm kicking this back to the list only. I've been going round and round with this and I have some more information, but still not a solution. ldapsearch works: ldapsearch -H ldap://file_print.hpm.net -b dc=hpm,dc=net -s sub (sAMAccountName=yans) -D 'HPM\yans' -x -W uid But notice that I

Re: [rt-users] AD integration for external auth

2015-07-07 Thread John D Groenveld
On Tue, Jul 7, 2015 at 4:50 PM, Yan Seiner y...@seiner.com wrote: I'm kicking this back to the list only. I've been going round and round with this and I have some more information, but still not a solution. ldapsearch works: Excellent and vital first crawl. Next to stand up and walk: Can