falcone at bestpractical
Nov 23, 2009, 7:28 AM
Post #2 of 11
(2004 views)
Permalink
|
|
Re: LDAP Authentication module does not place users under "Everyone"
[In reply to]
|
|
On Mon, Nov 23, 2009 at 10:00:50AM +0000, n.chrysandreas [at] albourne wrote:
> Hi,
>
> I've configured RT (3.8.5) to authenticate users using LDAP by adding the plugin RT::Authen::ExternalAuth.
> My problem is that no user is under the global group "Everyone", thus any permissions I give to the Everyone group does not get applied to all (or any) of the users.
> The same thing goes with the "Unprivileged" group.
> I have read somewhere that the authentication module does not place users under the right groups as it should.
Where did you read this?
> Has anyone faced the same problem? Any suggestions how I can get around it?
With your configuration, users will be placed in the Unprivileged
group and the Everyone group. That is managed by RT, not the module.
-kevin
> My RT_SiteConfig.pm configuration (only the part concerning the problem) :
>
> Set(@Plugins,(qw(RT::Authen::ExternalAuth)));
> Set($AutoCreate, {Privileged => 0});
> Set($WebExternalAuth , 1);
> Set($WebFallbackToInternalAuth , true);
> Set($WebExternalAuto , 1);
> Set($ExternalInfoPriority, ['My_LDAP']);
> Set($ExternalServiceUsesSSLorTLS, 0);
> Set($AutoCreateNonExternalUsers, 1);
> Set($ExternalAuthPriority,['My_LDAP']);
>
> Set($ExternalSettings, {'My_LDAP' => {
> 'type' => 'ldap',
> 'auth' => 1,
> 'info' => 1,
> 'server' => 'server_hostname',
> 'user' => 'defined',
> 'pass' => 'defined',
> 'base' => 'defined',
> 'filter' => '(objectclass=Person)',
> 'd_filter' => '(&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=2))',
> 'tls' => 0,
> 'net_ldap_args' => [ version => 3 ],
> 'group' => '',
> 'group_attr' => '',
> 'attr_match_list' => [ 'Name',
> 'EmailAddress',
> 'RealName',
> 'WorkPhone',
> 'Address2'],
> 'attr_map' => { 'Name' => 'sAMAccountName',
> 'EmailAddress' => 'mail',
> 'Organization' => 'physicalDeliveryOfficeName',
> 'RealName' => 'cn',
> 'ExternalAuthId' => 'sAMAccountName',
> 'Gecos' => 'sAMAccountName',
> 'WorkPhone' => 'telephoneNumber',
> 'Address1' => 'streetAddress',
> 'City' => 'l',
> 'State' => 'st',
> 'Zip' => 'postalCode',
> 'Country' => 'co'
> }
> }
> }
> );
> 1;
> _______________________________________________
> List info: http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-devel
>
|
