Re: [rt-users] Regarding External Authentication using LDAP

[Anton Panetta]

Whats the block you put in your RT_SiteConfig relating to external auth?



From: rt-users [mailto:rt-users-boun...@lists.bestpractical.com] On Behalf Of 
bharath reddy
Sent: Wednesday, 14 October 2015 3:58 AM
To: RT-List 
Subject: [rt-users] Regarding External Authentication using LDAP

Dear All,

I followed the link https://metacpan.org/pod/RT::Authen::ExternalAuth and made 
required changes and then restarted my apache server. But when I'm logging into 
the RT from web it fails with :
"Your username or password is incorrect"

But user exists in the LDAP.

Log file contains :
[22441] [Tue Oct 13 16:58:25 2015] [error]: FAILED LOGIN for  
from 130.245.10.107 (/rt/lib//RT/Interface/Web.pm:810)

From the code(/rt/lib//RT/Interface/Web.pm) it fails at this point :

unless ( $user_obj->id && $user_obj->IsPassword( $ARGS->{pass} ) ) {
$RT::Logger->error("FAILED LOGIN for @{[$ARGS->{user}]} from 
$ENV{'REMOTE_ADDR'}");

Can any one help me how to change the flow to authenticate from LDAP i.e it 
should check the username and password against the LDAP and not from DB.

Any help or pointers to this issue will be appreciated.

Thanks,
Bharath.
The information contained in this email message and any attachments may be 
confidential information. If you are not the intended recipient, any use, 
interference with, disclosure or copying of this material is unauthorised and 
prohibited. If you have received this email in error, please advise us 
immediately and delete the email and all copies. The content and opinions in 
non-business email are not necessarily those of Haircare Australia. 
[http://thinkbeforeprinting.org/struct/signature-1.gif]

Re: [rt-users] RT External Auth Ldap pass on to Custom Fields

[Anton Panetta]

Thanks Myrat

That will help me should I go down the LDAPimport route which was the fallback 
position.

From: Myrat Saparow [mailto:muratsapa...@gmail.com]
Sent: Friday, 2 October 2015 4:32 PM
To: Anton Panetta <anton.pane...@haircareaust.com>; 
rt-users@lists.bestpractical.com
Subject: Re: [rt-users] RT External Auth Ldap pass on to Custom Fields

Hi Anton,

I am not sure whether ExternalAuth plugin supports Custom Fields, but I know 
that LdapImport does.

The way I worked it, was to autheticate user with ExternalAuth, create it on 
first logon with minimal mappings (name, e-mail), and update the rest of the 
needed data with LdapImport on a regular cycle.

Here's part of the siteconfig file I use:

Set( $LDAPMapping, {
Name=> 'sAMAccountName',
EmailAddress=> 'mail',
RealName=> 'cn',
WorkPhone   => 'telephoneNumber',
Organization=> 'departmentName',
'UserCF.Project'=> 'physicalDeliveryOfficeName'
});

Regards,

Myrat


On Tue, Sep 29, 2015 at 7:40 AM Anton Panetta 
<anton.pane...@haircareaust.com<mailto:anton.pane...@haircareaust.com>> wrote:
Hi

I see several questions around the web, with incomplete answers to this. Which 
suggests people have tried and succeeded, or given up.

RT 4.2.11
RT External Auth 0.25

What I am trying to achieve is the use of RT External auth to pull in or 
refresh user details on login, I am aware I could use ldap import but a more 
real time process makes more sense to me.

My goal is to be able to pull in ldap fields into custom fields, eg department, 
Company, for use elsewhere.

I can map existing attr no problem, but its when I get to custom fields that I 
run into issue

Everything I have read suggests it should be either UserCF.CustomFieldName 
CF.CustomFieldName UserCF.{CustomFieldName} CF.{CustomFieldName} or even 
{CustomFieldName}

Am I barking up the wrong tree, is this actually not possible, do I need to 
declare it somewhere else first or am I just getting the syntax wrong


Here is what I have defined as the attr_map

'attr_map' => {
'Name' => 'sAMAccountName',
'EmailAddress' => 'mail',
'RealName' => 'cn',
'WorkPhone'=> 'telephoneNumber',
'MobilePhone'  => 'mobile',
'Address1' => 'streetAddress',
'City' => 'l',
'State'=> 'st',
'Zip'  => 'postalCode',
'Country'  => 'co',
'CF.Department'   => 'department',


If anyone has managed success in this in the past id appreciate knowing what I 
am missing.


Here is a snip of the log I get

It shows the department string is being pulled from Ldap (AD in this instance) 
and then failing due like 748 in Record.pm (which I assume is me putting the 
wrong prefix to the CF sending it the wrong way)



[4828] [Tue Sep 29 02:00:17 2015] [info]: 
RT::Authen::ExternalAuth::LDAP::GetAuth External Auth OK ( My_LDAP ): snip  
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:301)
[4828] [Tue Sep 29 02:00:17 2015] [info]: 
RT::Authen::ExternalAuth::CanonicalizeUserInfo returning Address1: , 
CF.Department: IT, City: Hindmarsh, Country: Australia, EmailAddress: snip, 
MobilePhone: snip , Name: snip, RealName: snip, State: South Australia, 
WorkPhone: snip , Zip: 5007 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:868)
[4828] [Tue Sep 29 02:00:17 2015] [warning]: Use of uninitialized value $column 
in hash element at /opt/rt4/sbin/../lib/RT/Record.pm line 748. 
(/opt/rt4/sbin/../lib/RT/Record.pm:748)
[4828] [Tue Sep 29 02:00:17 2015] [warning]: Use of uninitialized value $column 
in hash element at /opt/rt4/sbin/../lib/RT/Record.pm line 748. 
(/opt/rt4/sbin/../lib/RT/Record.pm:748)
[4828] [Tue Sep 29 02:00:17 2015] [warning]: Use of uninitialized value $column 
in hash element at /opt/rt4/sbin/../lib/RT/Record.pm line 748. 
(/opt/rt4/sbin/../lib/RT/Record.pm:748)
[4828] [Tue Sep 29 02:00:17 2015] [warning]: Use of uninitialized value $column 
in hash element at /opt/rt4/sbin/../lib/RT/Record.pm line 748. 
(/opt/rt4/sbin/../lib/RT/Record.pm:748)
[4828] [Tue Sep 29 02:00:17 2015] [warning]: Use of uninitialized value $column 
in hash element at /opt/rt4/sbin/../lib/RT/Record.pm line 748. 
(/opt/rt4/sbin/../lib/RT/Record.pm:748)
[4828] [Tue Sep 29 02:00:17 2015] [warning]: Use of uninitialized value $column 
in hash element at /opt/rt4/sbin/../lib/RT/Record.pm line 748. 
(/opt/rt4/sbin/../lib/RT/Record.pm:748)
[4828] [Tue Sep 29 02:00:17 2015] [error]: RT::User::CF.Department 
Unimplemented in RT::Record. (/opt/rt4/sbin/../lib/RT/Record.pm line 983)



Regards
Anton



The information contained in this email message and any attachments may be 
confidential information. If you are not the intended recipi

[rt-users] RT External Auth Ldap pass on to Custom Fields

[Anton Panetta]

Hi

I see several questions around the web, with incomplete answers to this. Which 
suggests people have tried and succeeded, or given up.

RT 4.2.11
RT External Auth 0.25

What I am trying to achieve is the use of RT External auth to pull in or 
refresh user details on login, I am aware I could use ldap import but a more 
real time process makes more sense to me.

My goal is to be able to pull in ldap fields into custom fields, eg department, 
Company, for use elsewhere.

I can map existing attr no problem, but its when I get to custom fields that I 
run into issue

Everything I have read suggests it should be either UserCF.CustomFieldName 
CF.CustomFieldName UserCF.{CustomFieldName} CF.{CustomFieldName} or even 
{CustomFieldName}

Am I barking up the wrong tree, is this actually not possible, do I need to 
declare it somewhere else first or am I just getting the syntax wrong


Here is what I have defined as the attr_map

'attr_map' => {
'Name' => 'sAMAccountName',
'EmailAddress' => 'mail',
'RealName' => 'cn',
'WorkPhone'=> 'telephoneNumber',
'MobilePhone'  => 'mobile',
'Address1' => 'streetAddress',
'City' => 'l',
'State'=> 'st',
'Zip'  => 'postalCode',
'Country'  => 'co',
'CF.Department'   => 'department',


If anyone has managed success in this in the past id appreciate knowing what I 
am missing.


Here is a snip of the log I get

It shows the department string is being pulled from Ldap (AD in this instance) 
and then failing due like 748 in Record.pm (which I assume is me putting the 
wrong prefix to the CF sending it the wrong way)



[4828] [Tue Sep 29 02:00:17 2015] [info]: 
RT::Authen::ExternalAuth::LDAP::GetAuth External Auth OK ( My_LDAP ): snip  
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:301)
[4828] [Tue Sep 29 02:00:17 2015] [info]: 
RT::Authen::ExternalAuth::CanonicalizeUserInfo returning Address1: , 
CF.Department: IT, City: Hindmarsh, Country: Australia, EmailAddress: snip, 
MobilePhone: snip , Name: snip, RealName: snip, State: South Australia, 
WorkPhone: snip , Zip: 5007 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:868)
[4828] [Tue Sep 29 02:00:17 2015] [warning]: Use of uninitialized value $column 
in hash element at /opt/rt4/sbin/../lib/RT/Record.pm line 748. 
(/opt/rt4/sbin/../lib/RT/Record.pm:748)
[4828] [Tue Sep 29 02:00:17 2015] [warning]: Use of uninitialized value $column 
in hash element at /opt/rt4/sbin/../lib/RT/Record.pm line 748. 
(/opt/rt4/sbin/../lib/RT/Record.pm:748)
[4828] [Tue Sep 29 02:00:17 2015] [warning]: Use of uninitialized value $column 
in hash element at /opt/rt4/sbin/../lib/RT/Record.pm line 748. 
(/opt/rt4/sbin/../lib/RT/Record.pm:748)
[4828] [Tue Sep 29 02:00:17 2015] [warning]: Use of uninitialized value $column 
in hash element at /opt/rt4/sbin/../lib/RT/Record.pm line 748. 
(/opt/rt4/sbin/../lib/RT/Record.pm:748)
[4828] [Tue Sep 29 02:00:17 2015] [warning]: Use of uninitialized value $column 
in hash element at /opt/rt4/sbin/../lib/RT/Record.pm line 748. 
(/opt/rt4/sbin/../lib/RT/Record.pm:748)
[4828] [Tue Sep 29 02:00:17 2015] [warning]: Use of uninitialized value $column 
in hash element at /opt/rt4/sbin/../lib/RT/Record.pm line 748. 
(/opt/rt4/sbin/../lib/RT/Record.pm:748)
[4828] [Tue Sep 29 02:00:17 2015] [error]: RT::User::CF.Department 
Unimplemented in RT::Record. (/opt/rt4/sbin/../lib/RT/Record.pm line 983)



Regards
Anton



The information contained in this email message and any attachments may be 
confidential information. If you are not the intended recipient, any use, 
interference with, disclosure or copying of this material is unauthorised and 
prohibited. If you have received this email in error, please advise us 
immediately and delete the email and all copies. The content and opinions in 
non-business email are not necessarily those of Haircare Australia. 
[http://thinkbeforeprinting.org/struct/signature-1.gif]

[rt-users] Custom Charting and Tables

[Anton Panetta]

Hi There

I'm curious if anyone else has attempted or found a way to achieve this.

What I am

Able to make is this (sort for the lack of formatting)

Queue

Status

Ticket count

BPA



new

11

open

5

rejected

1

resolved

7

COO Projects

new

2

open

3

rejected

2

resolved

6

DI

new

8

open

3

resolved

1

stalled

1

Finance

new

6

resolved

5

IT BI Requests

new

12

stalled

1

IT Helpdesk

new

8

open

8

resolved

42

IT Projects

new

18

open

1

resolved

2

stalled

1

Total

0

154



What id like to make is closer to this

Queue

Open

New

Resolved

Stalled

Rejected

Total

IT

1

5

10

2

0

18

DI

2

5

10

3

0

20

BI

3

5

10

2

0

20

Project

4

5

10

3

1

23

Total

10

20

40

10

1




The Idea is to include it in a dashboard.

I am aware that using the chat tool to make a table is a bit of a side way, I 
could possibly make do if I could make the tables run horizontal.


Regards
Anton