LDAP to AD for AutoCreateAndCanonicalizeUserInfo

RT Users
1

Hey Everyone,
I was wondering if anyone has gotten this to work. I’m using the
LDAP overlay to get data from our Active Directory tree to have it
pass the data to RT to automate the AutoCreateAndCanonicalizeUserInfo
process. I’ve gotten to the point where it will create an account, but
since it’s trying to get the hash info for for the user’s password,
and AD uses Kerberos, it doesn’t populate the password. Has anyone
gotten the Kerberos passwords to automatically parse into this? Do I
simply need to call on a different set of attributes?

Any help would be greatly appreciated.
Dyl

2

“Dylan Masson” dylan.masson@gmail.com writes:

Hey Everyone,
I was wondering if anyone has gotten this to work. I’m using the
LDAP overlay to get data from our Active Directory tree to have it
pass the data to RT to automate the AutoCreateAndCanonicalizeUserInfo
process. I’ve gotten to the point where it will create an account, but
since it’s trying to get the hash info for for the user’s password,
and AD uses Kerberos, it doesn’t populate the password. Has anyone
gotten the Kerberos passwords to automatically parse into this? Do I
simply need to call on a different set of attributes?

You wouldn’t usually stick the password into RT. Instead you’d either
use ExternalAuth and have apache talk to AD; or use the ldap overlay
to override the password auth function.

seph

3

Thanks! I’ll give that a shot.On 3/13/06, seph seph@directionless.org wrote:

“Dylan Masson” dylan.masson@gmail.com writes:

Hey Everyone,
I was wondering if anyone has gotten this to work. I’m using the
LDAP overlay to get data from our Active Directory tree to have it
pass the data to RT to automate the AutoCreateAndCanonicalizeUserInfo
process. I’ve gotten to the point where it will create an account, but
since it’s trying to get the hash info for for the user’s password,
and AD uses Kerberos, it doesn’t populate the password. Has anyone
gotten the Kerberos passwords to automatically parse into this? Do I
simply need to call on a different set of attributes?

You wouldn’t usually stick the password into RT. Instead you’d either
use ExternalAuth and have apache talk to AD; or use the ldap overlay
to override the password auth function.

seph