ExternalAuth LDAP authenticating more than 1 group

RT Users
#1

Hi,

I did a few types of searches through google, and on the wiki. I also
looked at the readme for ExternalAuth and couldn’t find the answer.

I’m thinking not too many people do this so the question hasn’t been asked.

When defining an LDAP service for ExternalAuth, you are allowed to set the
group that a user has to be a member of to authenticate to RT.

We have a need to have 2 different groups authenticate.

I think I could copy my LDAP service config, rename it, change the group,
and then add it to the ExternalAuthPriority list, but is there a more
elegant way of doing it all within 1 LDAP service definition?

Thanks!
Mike.

Mike Johnson
Datatel Programmer/Analyst
Northern Ontario School of Medicine
955 Oliver Road
Thunder Bay, ON P7B 5E1
Phone: (807) 766-7331
Email: mike.johnson@nosm.ca

#2

When defining an LDAP service for ExternalAuth, you are allowed to set the group that a user
has to be a member of to authenticate to RT.
We have a need to have 2 different groups authenticate.
I think I could copy my LDAP service config, rename it, change the group, and then add it to
the ExternalAuthPriority list, but is there a more elegant way of doing it all within 1 LDAP
service definition?

Unless you can come up with an ldap searches that match both group
memberships, the solution you describe is the easiest.

Some people use perl variables to share config options across multiple
configs, but that can sometimes just obfuscate things.

-kevin