Re: RT::User::ExternalAuthId Unimplemented in RT::Record

I also has not imported my groups.


  Daniel Burchfield - Senior IT Systems Administrator
=A0=A0=A01590 University Avenue =A0Dubuque, IA 52001
=A0=A0=A0Office 563-588-8748 ext. 1001 =A0Toll Free 888-884-6331 ext. 1001
=A0=A0=A0Office (direct): 563-293-8060=A0 Mobile 563-564-7074




The information contained in this message is confidential and intended for =
the addressee only.=A0 If you have received this message in error, or there=
 are any problems, please notify the sender immediately.=A0 The unauthorize=
d use, disclosure, copying or alteration of this message is strictly forbid=
den.


-----Original Message-----
From: Daniel Burchfield=20
Sent: Tuesday, February 7, 2017 9:15 AM
To: 'Alex Vandiver' <[email protected]>
Cc: [email protected]
Subject: RE: [rt-users] RT::User::ExternalAuthId Unimplemented in RT::Recor=
d

That got rid of the error. Thanks.=20

Now I am having trouble getting RT to check active directory for passwords.=
 Is there something else I need to add to my config?



Plugin('RT::Extension::LDAPImport');
Plugin('RT::Authen::ExternalAuth');

# Uncomment for debug
#Set($LogToSyslog, 'debug');

Set( $CommentAddress, '[email protected]' ); Set( $CorrespondAddress,=
 'ithelpdesk@ mydomain.com' );

Set( $DatabaseHost, 'localhost' );
Set( $DatabaseName, 'rt4' );
Set( $DatabasePassword, 'password' );
Set( $DatabasePort, '' );
Set( $DatabaseType, 'mysql' );
Set( $DatabaseUser, 'srv_rtir' );

Set( $Organization, '' );
Set( $OwnerEmail, 'ithelpdesk@ mydomain.com' ); Set( $SendmailPath, '/usr/s=
bin/sendmail' ); Set( $WebDomain, 'tracker. mydomain.local' ); Set( $WebPor=
t, '8080' ); Set( $rtname, 'Medone-Tracker' );

# to fix that annoying error that the sites dont match Set(@ReferrerWhiteli=
st, qw(tracker. mydomain.local:8080));

# LDAP Authentication
Set( @Plugins, qw(RT::Extension::LDAPImport)); Set( @Plugins, qw(RT::Authen=
::ExternalAuth));

# LDAP user import
Set($LDAPHost,' mydomain.local');
Set($LDAPUser, ' mydomain \LDAPUser');
Set($LDAPPassword, 'password');
Set($LDAPBase, 'CN=3DUsers,DC=3D mydomain,DC=3Dlocal'); Set($LDAPFilter, '(=
&(objectCategory=3Dperson))');

Set($LDAPMapping, {

        Name            =3D> 'sAMAccountName',

        EmailAddress    =3D> 'mail',

        Organization    =3D> 'department',

        RealName        =3D> 'cn',

        NickName        =3D> 'givenName',

        Gecos           =3D> 'sAMAccountName',

        WorkPhone       =3D> 'telephoneNumber',

        MobilePhone     =3D> 'mobile',

        Address1        =3D> 'streetAddress',

        City            =3D> 'l',

        State           =3D> 'st',

        Zip             =3D> 'postalCode',

        Country         =3D> 'co'
});

Set($LDAPCreatePrivileged, 1);
Set($LDAPUpdateUsers, 1);

## LDAP GROUP IMPORT AND MAPPINGS

Set($LDAPGroupMapping, {Name                    =3D> 'cn',

                        Member_Attr             =3D> 'member',

                        Member_Attr_Value       =3D> 'dn'});



#OU/basedn location of groups

Set($LDAPGroupBase, 'ou=3Dusers,dc=3D mydomain,dc=3Dlocal');



# LDAP GROUP FILTERING

Set($LDAPGroupFilter, '(|(cn=3DDomain Users)(cn=3DTechnical Operations)(cn=
=3DManagement))');


## LDAP Authentication

# Use the below LDAP source for both authentication, as well as user

    # information

    Set( $ExternalAuthPriority, ["My_LDAP"] );

    Set( $ExternalInfoPriority, ["My_LDAP"] );

    # Make users created from LDAP Privileged

    Set( $UserAutocreateDefaultsOnLogin, { Privileged =3D> 1 } );



    # Users should still be autocreated by RT as internal users if they

    # fail to exist in an external service; this is so requestors (who

    # are not in LDAP) can still be created when they email in.

    Set($AutoCreateNonExternalUsers, 1);



    # Minimal LDAP configuration; see RT::Authen::ExternalAuth::LDAP for

    # further details and examples

    Set($ExternalSettings, {

        'My_LDAP'       =3D>  {

            'type'             =3D>  'ldap',

            'server'           =3D>  '10.0.2.10',

            # By not passing 'user' and 'pass' we are using an anonymous

            # bind, which some servers to not allow

            'base'             =3D>  'ou=3DUsers,dc=3D mydomain,dc=3Dlocal'=
,

            'filter'           =3D>  '(objectClass=3DinetOrgPerson)',

            # Users are allowed to log in via email address or account

            # name

            'attr_match_list'  =3D> [

                'Name',

                'EmailAddress',

            ],

            # Import the following properties of the user from LDAP upon

          # login

            'attr_map' =3D> {

                'Name'         =3D> 'sAMAccountName',

                'EmailAddress' =3D> 'mail',

                'RealName'     =3D> 'cn',

                'WorkPhone'    =3D> 'telephoneNumber',

                'Address1'     =3D> 'streetAddress',

                'City'         =3D> 'l',

                'State'        =3D> 'st',

                'Zip'          =3D> 'postalCode',

                'Country'      =3D> 'co',

            },

        },

    } );

1;










  Daniel Burchfield - Senior IT Systems Administrator
=A0=A0=A01590 University Avenue =A0Dubuque, IA 52001
=A0=A0=A0Office 563-588-8748 ext. 1001 =A0Toll Free 888-884-6331 ext. 1001
=A0=A0=A0Office (direct): 563-293-8060=A0 Mobile 563-564-7074




The information contained in this message is confidential and intended for =
the addressee only.=A0 If you have received this message in error, or there=
 are any problems, please notify the sender immediately.=A0 The unauthorize=
d use, disclosure, copying or alteration of this message is strictly forbid=
den.


-----Original Message-----
From: Alex Vandiver [mailto:[email protected]]
Sent: Thursday, February 2, 2017 11:16 PM
To: Daniel Burchfield <[email protected]>
Cc: [email protected]
Subject: Re: [rt-users] RT::User::ExternalAuthId Unimplemented in RT::Recor=
d

On Thu, 2 Feb 2017 19:59:47 +0000
Daniel Burchfield <[email protected]> wrote:=20
> I am trying to get RT to pull in users from my local active directory=20
> and use AD for auth. Meaning when I change a user's password in AD it=20
> should reflect the change in RT. I'm running RT 4.4.1. Currently, when=20
> I run the import  I get the following error:
>
> Set($LDAPMapping, {
>         Name            =3D> 'sAMAccountName',
>         EmailAddress    =3D> 'mail',
>         Organization    =3D> 'department',
>         RealName        =3D> 'cn',
>         NickName        =3D> 'givenName',
>         ExternalAuthId  =3D> 'sAMAccountName',

This is the culprit line -- this column was removed in RT 4.4.  Remove this=
 line from your configuration, and it should resolve the issue.
 - Alex