RT with pubcookie/External Auth

RT Users
1

I am running the following:
FC5
RT 3.6.0
Apacke2
Newest pubcookie

I have pubcookie working, but the external auth is not working with RT and I
have modified the external Auth values in RT_Siteconfig.pm. The problem is,
I get asked for my pubcookie login and password, it accepts them, but then I
get dumped to an RT login box. Any suggestions on what could be wrong?

Thanks!
Jasen

2

Jasen M. Lentz wrote:

I am running the following:
FC5
RT 3.6.0
Apacke2
Newest pubcookie

I have pubcookie working, but the external auth is not working with RT and I
have modified the external Auth values in RT_Siteconfig.pm. The problem is,
I get asked for my pubcookie login and password, it accepts them, but then I
get dumped to an RT login box. Any suggestions on what could be wrong?

Works for me, at least for RT 3.6.1, Apache 2.0, CentOS 3, and Pubcookie
3.3.1. Couple of things to consider…

  • You’ve modified the site config variables WebExternalAuth,
    WebFallbackToInternalAuth, and maybe WebExternalGecos and WebExternalAuto?
  • Your RT instance is set up as SSL-based (https) and WebBaseURL and
    WebPort are appropriate? Pubcookie by design (except if you compile it
    explicitly to do so) only works with SSL-based URLs.
    -Alan

Alan Sparks, UNIX/Linux Systems Integration and Administration
asparks@doublesparks.net

3

Alan…

I did modify the variables. I’m wondering if I messed something up in the
ssl.conf or httpd.conf…

It is SSL based as well. As I stated, I may have messed a config up. I had
to put it in both the httpd.conf and ssl.conf. If I use pubcooklie in the
SSL file, it causes an eternal loop. Would you like for me to send you a
copy of my configs? Maybe I’m missing something…

Thanks!
JMLFrom: Alan Sparks [mailto:asparks@doublesparks.net]
Sent: Monday, September 11, 2006 6:26 PM
To: Jasen M. Lentz
Cc: rt-users@lists.bestpractical.com
Subject: Re: [rt-users] RT with pubcookie/External Auth

Jasen M. Lentz wrote:

I am running the following:
FC5
RT 3.6.0
Apacke2
Newest pubcookie

I have pubcookie working, but the external auth is not working with RT
and I have modified the external Auth values in RT_Siteconfig.pm. The
problem is, I get asked for my pubcookie login and password, it
accepts them, but then I get dumped to an RT login box. Any suggestions
on what could be wrong?

Works for me, at least for RT 3.6.1, Apache 2.0, CentOS 3, and Pubcookie
3.3.1. Couple of things to consider…

  • You’ve modified the site config variables WebExternalAuth,
    WebFallbackToInternalAuth, and maybe WebExternalGecos and WebExternalAuto?
  • Your RT instance is set up as SSL-based (https) and WebBaseURL and WebPort
    are appropriate? Pubcookie by design (except if you compile it explicitly
    to do so) only works with SSL-based URLs.
    -Alan

Alan Sparks, UNIX/Linux Systems Integration and Administration
asparks@doublesparks.net

4

Jasen M. Lentz wrote:

Alan…

I did modify the variables. I’m wondering if I messed something up in the
ssl.conf or httpd.conf…

It is SSL based as well. As I stated, I may have messed a config up. I had
to put it in both the httpd.conf and ssl.conf. If I use pubcooklie in the
SSL file, it causes an eternal loop. Would you like for me to send you a
copy of my configs? Maybe I’m missing something…

Thanks!
JML

–
Alan Sparks, UNIX/Linux Systems Integration and Administration
asparks@doublesparks.net

Sure I can try to take a look. Respond to me off-list.
Make sure also you take a look at your apache access logs to be sure
that the remote-user is actually getting sent and logged on the RT
accesses…

Alan Sparks, UNIX/Linux Systems Integration and Administration
asparks@doublesparks.net

5

By ‘eternal loop’ do you mean that that the browser gets redirected
between your weblogin server and your rt instance? If so this is a
problem with how you set up pubcookie, most likely your keys are not
properly setup so that you cannot decode the the cookies properly.
Check your Apache logs.

Joby Walker
C&C SSG, University of Washington

Jasen M. Lentz wrote: