I have Request Tracker installed on Debain 12 using apache and mysql. I have successfully configured LDAP. LDAP authentication worked for about a month. Here is the LDAP config:
> Set($ExternalAuthPriority, [ 'My_LDAP' ]);
> Set($ExternalInfoPriority, [ 'My_LDAP' ]);
>
> Set($ExternalSettings, {
> 'My_LDAP' => {
> 'type' => 'ldap',
> 'server' => 'BASE.DOMAIN.ENDING',
> 'user' => 'CN=Request Tracker,CN=REDACTED,DC=BASE,DC=DOMAIN,DC=ENDING',
> 'pass' => 'REDACTED',
> 'base' => 'CN=REDACTED,DC=BASE,DC=DOMAIN,DC=ENDING',
> 'filter' => '(&(objectClass=user)(!(objectClass=computer)))',
> 'tls' => 0,
> 'net_ldap_args' => [version => 3],
> 'attr_match_list'=> [
> 'Name', # RT username
> #'EmailAddress' # RT email address
> ],
> 'attr_map' => {
> 'Name' => 'sAMAccountName',
> 'EmailAddress' => 'mail',
> 'RealName' => 'cn',
> 'WorkPhone' => 'telephoneNumber',
> 'Organization' => 'company',
> 'Address1' => 'streetAddress',
> 'City' => 'l',
> 'State' => 'st',
> 'Zip' => 'postalCode',
> 'Country' => 'co',
> }
> }
> });
>
> Set($LDAPCreatePrivileged, 0);
> Set($UserAutocreateDefaultsOnLogin, { Privileged => 0 });
> Set($AutoCreateNonExternalUsers, 1); # Enable auto-creation of non-privileged user accounts
>
> # Second LDAP settings
> Set($LDAPHost, 'BASE.DOMAIN.ENDING');
> Set($LDAPUser, 'CN=Request Tracker,CN=REDACTED,DC=BASE,DC=DOMAIN,DC=ENDING');
> Set($LDAPPassword, 'REDACTED');
> Set($LDAPBase, 'CN=REDACTED,DC=BASE,DC=DOMAIN,DC=ENDING');
> Set($LDAPFilter, '(&(objectClass=user)(!(objectClass=computer)))');
> Set($LDAPGroupFilter, '(&(cn=Domain Users))');
> Set($LDAPMapping, {
> Name => 'sAMAccountName', # required
> EmailAddress => 'mail',
> RealName => 'cn',
> WorkPhone => 'telephoneNumber',
> Organization => 'company',
> Address1 => 'streetAddress',
> City => 'l',
> State => 'st',
> Zip => 'postalCode',
> Country => 'co',
> });
> 1; # Return true to ensure successful loading
When I go to the Request tracker home page, it generates the following entries in the log.
[4142] [Sun Apr 21 03:46:07 2024] [debug]: Using w3m for HTML → text conversion (/opt/rt5/sbin/…/lib/RT/Interface/Email.pm:1562)
[4142] [Sun Apr 21 03:46:08 2024] [debug]: Attempting to use external auth service: My_LDAP (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth.pm:365)
[4142] [Sun Apr 21 03:46:08 2024] [debug]: SSO Failed and no user to test with. Nexting (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth.pm:394)
[4142] [Sun Apr 21 03:46:08 2024] [debug]: Autohandler called ExternalAuth. Response: (0, No User) (/opt/rt5/share/html/Elements/DoAuth:58)
[4142] [Sun Apr 21 03:46:08 2024] [debug]: Attempting to use external auth service: My_LDAP (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth.pm:365)
[4142] [Sun Apr 21 03:46:08 2024] [debug]: SSO Failed and no user to test with. Nexting (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth.pm:394)
[4142] [Sun Apr 21 03:46:08 2024] [debug]: Autohandler called ExternalAuth. Response: (0, No User) (/opt/rt5/share/html/Elements/DoAuth:58)
When I type my credentials in it generates the following entries in the log.
[4142] [Sun Apr 21 03:46:46 2024] [debug]: Attempting to use external auth service: My_LDAP (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth.pm:365)
[4142] [Sun Apr 21 03:46:46 2024] [debug]: Calling UserExists with $username (first.last) and $service (My_LDAP) (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth.pm:407)
[4142] [Sun Apr 21 03:46:46 2024] [debug]: UserExists params:
username: first.last , service: My_LDAP (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth/LDAP.pm:566)
[4142] [Sun Apr 21 03:46:47 2024] [debug]: LDAP Search === Base: CN=REDACTED,DC=BASE,DC=DOMAIN,DC=ENDING == Filter: (&(&(objectClass=user)(!(objectClass=computer)))(sAMAccountName=first.last)) == Attrs: sAMAccountName,sAMAccountName (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth/LDAP.pm:611)
[4142] [Sun Apr 21 03:46:47 2024] [debug]: Password validation required for service - Executing… (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth.pm:460)
[4142] [Sun Apr 21 03:46:47 2024] [debug]: Trying external auth service: My_LDAP (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth/LDAP.pm:218)
[4142] [Sun Apr 21 03:46:47 2024] [debug]: LDAP Search === Base: CN=REDACTED,DC=BASE,DC=DOMAIN,DC=ENDING == Filter: (&(&(objectClass=user)(!(objectClass=computer)))(sAMAccountName=first.last)) == Attrs: dn (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth/LDAP.pm:261)
[4142] [Sun Apr 21 03:46:47 2024] [debug]: Found LDAP DN: CN=First Last,OU=Users,OU=ORGUNIT,OU=ORGUNIT2,CN=REDACTED,DC=BASE,DC=DOMAIN,DC=ENDING (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth/LDAP.pm:303)
[4142] [Sun Apr 21 03:46:47 2024] [info]: RT::Authen::ExternalAuth::LDAP::GetAuth External Auth OK ( My_LDAP ): first.last (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth/LDAP.pm:384)
[4142] [Sun Apr 21 03:46:47 2024] [debug]: LDAP password validation result: 1 (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth.pm:646)
[4142] [Sun Apr 21 03:46:47 2024] [debug]: Password Validation Check Result: 1 (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth.pm:464)
[4142] [Sun Apr 21 03:46:47 2024] [debug]: Authentication successful. Now updating user information and attempting login. (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth.pm:488)
[4142] [Sun Apr 21 03:46:47 2024] [debug]: UserExists params:
username: first.last , service: My_LDAP (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth/LDAP.pm:566)
Before you get to the next page, the site times out and goes to the following url: http://REQUESTTRACKER.web/NoAuth/Login.html
It shows the following notice on the webpage.
Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.Please contact the server administrator at [no address given] to inform them of the time this error occurred, and the actions you performed just before this error.
More information about this error may be available in the server error log.
Apache/2.4.57 (Debian) Server at REQUESTTRACKER.web Port 80
It generates these entries in the log while showing the Internal Server Error.
[4157] [Sun Apr 21 03:47:28 2024] [debug]: Using w3m for HTML → text conversion (/opt/rt5/sbin/…/lib/RT/Interface/Email.pm:1562)
[4157] [Sun Apr 21 03:47:36 2024] [debug]: Attempting to use external auth service: My_LDAP (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth.pm:365)
[4157] [Sun Apr 21 03:47:36 2024] [debug]: SSO Failed and no user to test with. Nexting (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth.pm:394)
[4157] [Sun Apr 21 03:47:36 2024] [debug]: Autohandler called ExternalAuth. Response: (0, No User) (/opt/rt5/share/html/Elements/DoAuth:58)
[4157] [Sun Apr 21 03:47:36 2024] [debug]: Attempting to use external auth service: My_LDAP (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth.pm:365)
[4157] [Sun Apr 21 03:47:36 2024] [debug]: SSO Failed and no user to test with. Nexting (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth.pm:394)
[4157] [Sun Apr 21 03:47:36 2024] [debug]: Autohandler called ExternalAuth. Response: (0, No User) (/opt/rt5/share/html/Elements/DoAuth:58)
[4157] [Sun Apr 21 03:47:36 2024] [debug]: Attempting to use external auth service: My_LDAP (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth.pm:365)
[4157] [Sun Apr 21 03:47:36 2024] [debug]: SSO Failed and no user to test with. Nexting (/opt/rt5/sbin/…/lib/RT/Authen/ExternalAuth.pm:394)
[4157] [Sun Apr 21 03:47:36 2024] [debug]: Autohandler called ExternalAuth. Response: (0, No User) (/opt/rt5/share/html/Elements/DoAuth:58)
I don’t understand what the issue is. I’m hoping you guys could help guide me in the right direction to figure this out.