ExternalAuth over Public Network?

I was curious if ExternalAuth assumes a secure network (private, VPN, etc.),
or if it can securely authenticate to an LDAP/AD server over a public
network (ssl, etc.). I didn’t find any general security/configuration
discussions on the list.

Any comments?

Peter

I was curious if ExternalAuth assumes a secure network (private, VPN, etc.), or if it can
securely authenticate to an LDAP/AD server over a public network (ssl, etc.). I didn’t find
any general security/configuration discussions on the list.

I assume you’re talking about RT::Authen::ExternalAuth and not RT’s
built in WebExternalAuth.

RT::Authen::ExternalAuth can make an ldaps:// connection

If you’re using WebExternalAuth, any of the webserver modules should
be able to also make a secure connection

-kevin