RT Import and nested groups

Hi All,

We have an RT installation that we’re trying to sync AD Groups into RT groups. These groups in AD have other groups nested in them. When doing an rt-import the groups are empty. Looking at the code it doesn’t appear that there is a way to get the list of users out of AD and into RT using this method. Is that correct?

James A. Peltier
IT Services - Research Computing Group
Simon Fraser University - Burnaby Campus
Phone : 604-365-6432
Fax : 778-782-3045
E-Mail : jpeltier@sfu.ca
Website : http://www.sfu.ca/itservices
Twitter : @sfu_rcg
Powering Engagement Through Technology

Hi.

I’ve found that I have to be sure that each group (within the nested groups) needs to match the AD filter in RT_SiteConfig.pm.
(yours probably does, just throwing It out there for completeness)

Also, in my case the nested groups all imported, but do not automatically maintain their nested relationships (at least not in 4.4.0 where I was testing this).
(I had to go into RT to make one group a member of the other)

On the other hand, if you were referring to the import of the USERS within the nested groups, that’s a different story.
I have not used group membership myself in the $LDAPFilter within RT_SiteConfig.pm.
Mine looks something like this:
Set($LDAPFilter, ‘(&(sAMAccountType=805306368)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))’);

RT imports all active accounts, then the groups (according to $LDAPGroupFilter), then adds the appropriate users to groups.

Hi All,

We have an RT installation that we’re trying to sync AD Groups into RT groups. These groups in AD have other groups nested in them. When doing an rt-import the groups are empty. Looking at the code it doesn’t appear that there is a way to get the list of users out of AD and into RT using this method. Is that correct?

James A. Peltier
IT Services - Research Computing Group
Simon Fraser University - Burnaby Campus
Phone : 604-365-6432
Fax : 778-782-3045
E-Mail : jpeltier@sfu.ca
Website : https://urldefense.proofpoint.com/v2/url?u=http-3A__www.sfu.ca_itservices&d=CwICaQ&c=VCWpAYkS3z1bOCIxc-BPGZarCq9MRCAVxZJE051VqH8&r=luSRdPePk6fhFa3rH2PFBzWEtgcJguY0a__6vpfaX-I&m=eAVeEW_cCH-0tdTNDuPsYhDflc8JZpcFyh_RGlbwX3w&s=8xUGQD0FMBk9hwYcPp3OTSP5FCW__7GIGbrL9hiEuvI&e=
Twitter : @sfu_rcg
Powering Engagement Through Technology