RT::Authen::ExternalAuth::LDAP - LDAP source for RT authentication
Provides the LDAP implementation for RT::Authen::ExternalAuth.
Set($ExternalSettings, { # AN EXAMPLE LDAP SERVICE 'My_LDAP' => { 'type' => 'ldap', 'server' => 'server.domain.tld', 'user' => 'rt_ldap_username', 'pass' => 'rt_ldap_password', 'base' => 'ou=Organisational Unit,dc=domain,dc=TLD', 'filter' => '(FILTER_STRING)', 'd_filter' => '(FILTER_STRING)', 'group' => 'GROUP_NAME', 'group_attr' => 'GROUP_ATTR', 'tls' => 0, 'ssl_version' => 3, 'net_ldap_args' => [ version => 3 ], 'attr_match_list' => [ 'Name', 'EmailAddress', 'RealName', 'WorkPhone', 'Address2' ], 'attr_map' => { 'Name' => 'sAMAccountName', 'EmailAddress' => 'mail', 'Organization' => 'physicalDeliveryOfficeName', 'RealName' => 'cn', 'ExternalAuthId' => 'sAMAccountName', 'Gecos' => 'sAMAccountName', 'WorkPhone' => 'telephoneNumber', 'Address1' => 'streetAddress', 'City' => 'l', 'State' => 'st', 'Zip' => 'postalCode', 'Country' => 'co' }, }, } );
LDAP-specific options are described here. Shared options are described in the etc/RT_SiteConfig.pm file included in this distribution.
The example in the "SYNOPSIS" lists all available options and they are described below. Note that many of these values are specific to LDAP, so you should consult your LDAP documentation for details.
The server hosting the LDAP or AD service.
The username and password RT should use to connect to the LDAP server.
If you can bind to your LDAP server anonymously you shouldn't set these options.
The LDAP search base.
The filter to use to match RT users. You must specify it and it must be a valid LDAP filter encased in parentheses.
For example:
filter => '(objectClass=*)',
The filter that will only match disabled users. Optional. Must be a valid LDAP filter encased in parentheses.
For example with Active Directory the following can be used:
d_filter => '(userAccountControl:1.2.840.113556.1.4.803:=2)'
Does authentication depend on group membership? What group name?
What is the attribute for the group object that determines membership?
What is the scope of the group search? base, one or sub. Optional; defaults to base, which is good enough for most cases. sub is appropriate when you have nested groups.
base
one
sub
What is the attribute of the user entry that should be matched against group_attr above? Optional; defaults to dn.
dn
Should we try to use TLS to encrypt connections?
SSL Version to provide to Net::SSLeay *if* using SSL.
What other args should be passed to Net::LDAP->new($host,@args)?
To install RT::Authen::ExternalAuth, copy and paste the appropriate command in to your terminal.
cpanm
cpanm RT::Authen::ExternalAuth
CPAN shell
perl -MCPAN -e shell install RT::Authen::ExternalAuth
For more information on module installation, please visit the detailed CPAN module installation guide.