Mailing List Archive: Request Tracker: Users

LDAP with ExternalAuth, adding autocreated users to groups

Index | Next | Previous | View Threaded

ivoras at gmail

Nov 16, 2009, 7:33 AM

Post #1 of 5 (764 views)
Permalink

LDAP with ExternalAuth, adding autocreated users to groups

Hi,

I'm trying to configure RT3.8 to authenticate via LDAP - which
apprently goes well, but the users from LDAP are autocreated in rt3
without some useful properties.

I'd like them to:

* Automatically be assigned to a specific group
* That the new user gets whatever the "Let this user be granted
rights" checkbox does in user management

Is there a way to do this?
_______________________________________________
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: sales [at] bestpractical

Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

matthew.seaman at thebunker

Nov 16, 2009, 8:12 AM

Post #2 of 5 (787 views)
Permalink

Re: LDAP with ExternalAuth, adding autocreated users to groups [In reply to]

Ivan Voras wrote:
> Hi,
>
> I'm trying to configure RT3.8 to authenticate via LDAP - which
> apprently goes well, but the users from LDAP are autocreated in rt3
> without some useful properties.
>
> I'd like them to:
>
> * Automatically be assigned to a specific group
> * That the new user gets whatever the "Let this user be granted
> rights" checkbox does in user management
>
> Is there a way to do this?

Not without writing code I'm afraid. This is something there have been
a number of enquiries about, but as far as I am aware there hasn't been a
really good solution posted anywhere.

This is part of what you want: see the CurrentUser_Local.pm section in
http://wiki.bestpractical.com/view/AutoCreateAndCanonicalizeUserInfo

Cheers,

Matthew

--
Dr Matthew Seaman The Bunker, Ash Radar Station
PGP: 0x60AE908C on servers Marshborough Rd
Tel: +44 1304 814890 Sandwich
Fax: +44 1304 814899 Kent, CT13 0PL, UK

Attachments:

signature.asc (0.25 KB)

mike.peachey at jennic

Nov 16, 2009, 8:56 AM

Post #3 of 5 (730 views)
Permalink

Re: LDAP with ExternalAuth, adding autocreated users to groups [In reply to]

Ivan Voras wrote:
> Hi,
>
> I'm trying to configure RT3.8 to authenticate via LDAP - which
> apprently goes well, but the users from LDAP are autocreated in rt3
> without some useful properties.
>
> I'd like them to:
>
> * Automatically be assigned to a specific group

Not currently possible unless you write the extra code.

> * That the new user gets whatever the "Let this user be granted
> rights" checkbox does in user management

This is done with:

Set($AutoCreate, {Privileged => 1});

--
Kind Regards,

__________________________________________________

Mike Peachey, IT
Tel: +44 114 281 2655
Fax: +44 114 281 2951
Jennic Ltd, Furnival Street, Sheffield, S1 4QT, UK
Comp Reg No: 3191371 - Registered In England
http://www.jennic.com
__________________________________________________
_______________________________________________
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: sales [at] bestpractical

Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

ivoras at gmail

Nov 16, 2009, 9:31 AM

Post #4 of 5 (731 views)
Permalink

Re: LDAP with ExternalAuth, adding autocreated users to groups [In reply to]

2009/11/16 Mike Peachey <mike.peachey [at] jennic>:
> Ivan Voras wrote:
>> Hi,
>>
>> I'm trying to configure RT3.8 to authenticate via LDAP - which
>> apprently goes well, but the users from LDAP are autocreated in rt3
>> without some useful properties.
>>
>> I'd like them to:
>>
>> * Automatically be assigned to a specific group
>
> Not currently possible unless you write the extra code.

Heh, I thought so. Somehow I don't think I'd be the only one to notice
rt3 is somewhat convoluted and unmodular :)

>> * That the new user gets whatever the "Let this user be granted
>> rights" checkbox does in user management
>
> This is done with:
>
> Set($AutoCreate, {Privileged => 1});

Ok, it's a start. With this I could just add the default properties to
the "Privileged" user group - are there any unforseen consequences to
this?
_______________________________________________
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: sales [at] bestpractical

Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

falcone at bestpractical

Nov 20, 2009, 11:26 AM

Post #5 of 5 (687 views)
Permalink

Re: LDAP with ExternalAuth, adding autocreated users to groups [In reply to]

On Mon, Nov 16, 2009 at 04:56:32PM +0000, Mike Peachey wrote:
> Ivan Voras wrote:
> > Hi,
> >
> > I'm trying to configure RT3.8 to authenticate via LDAP - which
> > apprently goes well, but the users from LDAP are autocreated in rt3
> > without some useful properties.
> >
> > I'd like them to:
> >
> > * Automatically be assigned to a specific group
>
> Not currently possible unless you write the extra code.

Adding them all to a configured group would be about 10 lines of code
stolen from RT-Extension-LDAPImport

Importing your groups from AD and mirroring memberships in RT is
very complicated and special and would require a ton of work

-kevin

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads