[rt-users] Active Directory and RT

2013-05-24 Thread davidneudorfer
I'm having the hardest time binding RT to Active Directory. We've overcome some initial hurdles but we're stuck at this last part. I was hoping someone could help me diagnose this error. The initial user binds fine and my user is found but then it fails when it tries to authenticate. Thanks for the

Re: [rt-users] Active Directory and RT

2013-05-24 Thread Glenn Sieb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 5/24/13 5:33 PM, davidneudorfer wrote: > I'm having the hardest time binding RT to Active Directory. We've > overcome some initial hurdles but we're stuck at this last part. I > was hoping someone could help me diagnose this error. The initial >

Re: [rt-users] Active Directory and RT

2013-05-24 Thread davidneudorfer
Here it is. Thanks Glenn. Set($ExternalSettings, { 'My_LDAP' => { 'type' => 'ldap', 'server'=> 'ad.office.lbox.com', 'user' => 'cn=thisisauser,cn=Users,DC=office,DC=lbox,DC=com', 'pass'

Re: [rt-users] Active Directory and RT

2013-05-24 Thread Glenn Sieb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Try changing some of these settings... Set($ExternalSettings, { 'My_LDAP' => { 'type' => 'ldap', 'server'=> 'ad.office.lbox.com', 'port' => '389',

Re: [rt-users] Active Directory and RT

2013-05-24 Thread Thomas Sibley
On 05/24/2013 02:40 PM, davidneudorfer wrote: > 'attr_match_list' => [ > 'Name', > 'EmailAddress', > 'RealName', > ], First things first, remove RealName from the config above. It should be removed from the example configs as it's a misleading e

Re: [rt-users] Active Directory and RT

2013-05-24 Thread davidneudorfer
If I comment out group_attr then I get: Use of uninitialized value $group_attr in concatenation (.) or string This is my new config: Set($ExternalSettings, { 'My_LDAP' => { 'type' => 'ldap', 'server'=> 'ad.office.lbox.com',

Re: [rt-users] Active Directory and RT

2013-05-24 Thread davidneudorfer
What do you make of the lines: [debug]: LDAP Search === Base: CN=Users,DC=office,DC=lbox,DC=com == Scope: base == Filter: (member=CN=David Neudorfer,OU=Lunchbox,DC=office,DC=lbox,DC=com) == Attrs: dn (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:256) [debug]:

Re: [rt-users] Active Directory and RT

2013-05-24 Thread Glenn Sieb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 5/24/13 5:59 PM, davidneudorfer wrote: > If I comment out group_attr then I get: I have no group_attr at all in my config... Here is my anonymized config: Set( $ExternalSettings, {'My_LDAP' => { ## GENERIC SECTION

Re: [rt-users] Active Directory and RT

2013-05-24 Thread davidneudorfer
That did it! Thank you Glenn. -- View this message in context: http://requesttracker.8502.n7.nabble.com/Active-Directory-and-RT-tp54021p54031.html Sent from the Request Tracker - User mailing list archive at Nabble.com. -- RT Training in Seattle, June 19-20: http://bestpractical.com/training

Re: [rt-users] Active Directory and RT

2013-05-24 Thread Jok Thuau
For the sake of the archive, was it changing "member" to "memberOf" in the group_attr section of your config that fixed it? (realizing that I replied to David off list earlier) Thanks, Jok -- | Joachim Thuau | IT Systems Engineer - Linux / SpaceX | On 5/24/13 3:14 PM, "davidneudorfer" wrot

Re: [rt-users] Active Directory and RT

2013-05-24 Thread davidneudorfer
Removing group and group_attr was what did it for me. Hopefully this helps someone else in the future. Set($ExternalSettings, { 'My_LDAP' => { 'type' => 'ldap', 'server'=> 'ad.office.lbox.com', 'port'

Re: [rt-users] Active Directory and RT

2013-05-24 Thread Thomas Sibley
On 05/24/2013 03:35 PM, davidneudorfer wrote: > Removing group and group_attr was what did it for me. Hopefully this helps > someone else in the future. It looks like you missed my reply, where I explained what was going wrong with your group and group_attr, along with a few other things. http://

Re: [rt-users] Active Directory and RT

2013-05-24 Thread davidneudorfer
Completely did but thank you and at your suggestion I've removed RealName as well. Thank you Thomas. -- View this message in context: http://requesttracker.8502.n7.nabble.com/Active-Directory-and-RT-tp54021p54035.html Sent from the Request Tracker - User mailing list archive at Nabble.com. --