"Bad name after cn'" when using LDAPImport

I’m using Request Tracker 4.0.7 with LDAPImport 0.34 and Authen::ExternalAuth 10-4. I already have user creation and attribute mapping configured with ExternalAuth. I’m primarily interested in using LDAPImport to populate a half dozen or so Public Groups in Request Tracker with users from Active Directory. The idea is that separate divisions can just add their staff to that Active Directory group and when LDAPImport runs they’ll be granted the appropriate rights to manage their division’s queue in Request Tracker. I’m pulling from an Active Directory LDAP implementation at a functional level of Windows Server 2008.

When I do a test run (/usr/local/share/request-tracker4/plugins/RT-Extension-LDAPImport/bin/rtldapimport --debug > ldapimport.debug 2>&1) I get the following:

Couldn’t load RT config file RT_SiteConfig.pm:

Bad name after cn’ at /etc/request-tracker4/RT_SiteConfig.pm line 91.
Compilation failed in require at /usr/share/request-tracker4/lib/RT/Config.pm line 905.
BEGIN failed–compilation aborted at ./rtldapimport line 26.

That corresponds with this line of my RT_SiteConfig.pm:

Set($LDAPGroupMapping, { Name => ‘cn’,

I’ve configured LDAPImport as follows:

LDAP Import

Set($LDAPHost, ‘ldaps://dc.alaska.gov’);
Set($LDAPUser, ‘CN=dor-requesttracker,OU=Security Groups and Accounts,OU=IT,OU=Divisions,OU=DOR,OU=State Departments,DC=alaska,DC=gov’);
Set($LDAPPassword ,'Password);
Set($LDAPBase, ‘ou=DOR,ou=State Departments,dc=alaska,dc=gov’);

Set($LDAPGroupBase, ‘OU=Security Groups and Accounts,OU=IT,OU=Divisions,OU=DOR,OU=State Departments,DC=alaska,DC=gov’);
Set($LDAPGroupFilter, '(|(CN=dor-rt-admins)(CN=dor-rt-staff));
Set($LDAPGroupMapping, { Name => ‘cn’,
Member_Attr => ‘member’,
Member_Attr_Value => ‘sAMAccountName’,
Description => ‘description’});

Set($LDAPSizeLimit, 1000);

I feel like I’m missing something real simple here. Can someone lend another set of eyes to this problem?

Thanks!

Kevin Elliott
Networking Specialist II
Alaska Department of Revenue, ASD-IT
(907) 465-2314

That corresponds with this line of my RT_SiteConfig.pm:

Look one line above that – you appear to be missing a closing apostrophe.

Set($LDAPGroupFilter, '(|(CN=dor-rt-admins)(CN=dor-rt-staff));

This is the offending line.

That was indeed the failing line. Thank you.