Bug #37767 for RT-Authen-ExternalAuth: RT::Authen::ExternalAuth insall issue on RT3.8.0

Thu Jul 17 19:38:27 2008 mrwhiskers [...] gmail.com - Ticket created

CC:	rt [...] tpa.me.uk
Subject:	RT::Authen::ExternalAuth insall issue on RT3.8.0
Date:	Thu, 17 Jul 2008 13:38:30 -0600
To:	bug-RT-Authen-ExternalAuth [...] rt.cpan.org
From:	"Matt M" <mrwhiskers [...] gmail.com>

Good day! Yesterday, I attempted installation of RT::Authen::ExternalAuth (from CPAN) on a brand-new RT 3.8.0 install (installed by hand from .tar.gz) on Ubuntu 6.06.2 LTS/lighttpd-1.4.11/FastCGI. I edited my etc/RT_SiteConfig to include the necessary parts as outlined in the example RT-SiteConfig included with the ExternalAuth package, and added the line "Set(@Plugins,(qw(RT::Authen::ExternalAuth)));" as suggested on the RT IRC channel. (I've attached a sanitzed copy of my RT_SiteConfig.pm. LDAP configurations are sourced from a production 3.6.7 install that is functioning fine, but with another LDAP integration package.) When logging in with the default RT-internal "root" account, everything is dandy. I can see in my debug logs that LDAP is determining my account is not in the directory, then going on its merry way, ending with: Jul 17 12:44:23 servername RT: RT::User::IsPassword External auth FAILED Jul 17 12:44:23 servername RT: RT::User::IsPassword Internal auth SUCCEEDED However, if I attempt to log in with a known-good external account (or a completely bogus account), I receive the following error in my browser: Can't call method "Disabled" on an undefined value at /var/www/rt_38/bin/../local/lib/RT/User_Vendor.pm line 351. Debug logs on the RT server show no LDAP activity, but indicate the following: Jul 17 12:30:27 servername RT: Transaction->Create couldn't, as you didn't specify an object type and id (/var/www/rt_38/bin/../lib/RT/Record.pm:1439) Jul 17 12:30:27 servername RT: Couldn't get principal for not loaded object (/var/www/rt_38/bin/../lib/RT/User_Overlay.pm:1113) After consulting http://wiki.bestpractical.com/view/ExternalAuth and the #rt channel, I'm afraid I've no idea why this is happening. Please let me know if there's any additional information I can supply, and a big thanks from myself (and the rest of our IT staff) for all of your efforts with this package! -Matt

Message body is not shown because sender requested not to inline it.

Fri Jul 18 02:58:03 2008 mrwhiskers [...] gmail.com - Ticket #37772: Ticket created

CC:	rt [...] tpa.me.uk
Subject:	RT::Authen::ExternalAuth insall issue on RT3.8.0
Date:	Thu, 17 Jul 2008 13:38:30 -0600
To:	bug-RT-Authen-ExternalAuth [...] rt.cpan.org
From:	"Matt M" <mrwhiskers [...] gmail.com>

Good day! Yesterday, I attempted installation of RT::Authen::ExternalAuth (from CPAN) on a brand-new RT 3.8.0 install (installed by hand from .tar.gz) on Ubuntu 6.06.2 LTS/lighttpd-1.4.11/FastCGI. I edited my etc/RT_SiteConfig to include the necessary parts as outlined in the example RT-SiteConfig included with the ExternalAuth package, and added the line "Set(@Plugins,(qw(RT::Authen::ExternalAuth)));" as suggested on the RT IRC channel. (I've attached a sanitzed copy of my RT_SiteConfig.pm. LDAP configurations are sourced from a production 3.6.7 install that is functioning fine, but with another LDAP integration package.) When logging in with the default RT-internal "root" account, everything is dandy. I can see in my debug logs that LDAP is determining my account is not in the directory, then going on its merry way, ending with: Jul 17 12:44:23 servername RT: RT::User::IsPassword External auth FAILED Jul 17 12:44:23 servername RT: RT::User::IsPassword Internal auth SUCCEEDED However, if I attempt to log in with a known-good external account (or a completely bogus account), I receive the following error in my browser: Can't call method "Disabled" on an undefined value at /var/www/rt_38/bin/../local/lib/RT/User_Vendor.pm line 351. Debug logs on the RT server show no LDAP activity, but indicate the following: Jul 17 12:30:27 servername RT: Transaction->Create couldn't, as you didn't specify an object type and id (/var/www/rt_38/bin/../lib/RT/Record.pm:1439) Jul 17 12:30:27 servername RT: Couldn't get principal for not loaded object (/var/www/rt_38/bin/../lib/RT/User_Overlay.pm:1113) After consulting http://wiki.bestpractical.com/view/ExternalAuth and the #rt channel, I'm afraid I've no idea why this is happening. Please let me know if there's any additional information I can supply, and a big thanks from myself (and the rest of our IT staff) for all of your efforts with this package! -Matt

Message body is not shown because sender requested not to inline it.

Fri Jul 18 10:07:24 2008 zordrak [...] cpan.org - Ticket #37772: Merged into ticket #37767

Fri Jul 18 10:07:24 2008 zordrak [...] cpan.org - Merged into ticket #37767

Fri Jul 18 10:08:13 2008 zordrak [...] cpan.org - Taken

Fri Jul 18 10:09:41 2008 zordrak [...] cpan.org - Correspondence added

I'm afraid the problem is simply that I haven't had a chance yet to release a version compatible with RT3.8. I was assured by Ruz a while back that there should be no reason it wouldn't continue to work under 3.8, but unfortunately it seemsa the user objects have been refactored a little and ExternalAuth is going to need at least a little bit of work before it works with RT3.8.

Fri Jul 18 10:09:45 2008 The RT System itself - Status changed from 'new' to 'open'

Fri Jul 18 12:24:49 2008 mrwhiskers [...] gmail.com - Correspondence added

Subject:	Re: [rt.cpan.org #37767] RT::Authen::ExternalAuth insall issue on RT3.8.0
Date:	Fri, 18 Jul 2008 10:17:48 -0600
To:	bug-RT-Authen-ExternalAuth [...] rt.cpan.org
From:	"Matt M" <mrwhiskers [...] gmail.com>

Mike, thanks very much for the reply. If there's anything I can do to assist in testing down the line, please let me know. -Matt On Fri, Jul 18, 2008 at 08:09, Mike Peachey via RT <bug-RT-Authen-ExternalAuth@rt.cpan.org> wrote: Show quoted text

> <URL: http://rt.cpan.org/Ticket/Display.html?id=37767 > > > I'm afraid the problem is simply that I haven't had a chance yet to > release a version compatible with RT3.8. > > I was assured by Ruz a while back that there should be no reason it > wouldn't continue to work under 3.8, but unfortunately it seemsa the > user objects have been refactored a little and ExternalAuth is going to > need at least a little bit of work before it works with RT3.8.

Thu Aug 07 09:13:28 2008 chris [...] cjbonline.org - Correspondence added

Subject:	Re: [rt.cpan.org #37767] RT::Authen::ExternalAuth insall issue on RT3.8.0
Date:	Thu, 7 Aug 2008 06:12:51 -0700
To:	<bug-RT-Authen-ExternalAuth [...] rt.cpan.org>
From:	Cj B <chris [...] cjbonline.org>

Has there been any update on this ticket? Thanks, Cj B AIM: Blackc2004 chris@cjbonline.org

Thu Aug 07 09:15:19 2008 zordrak [...] cpan.org - Correspondence added

Not yet.. sorry.

Fri Sep 12 02:57:13 2008 http://blog.grumblesmurf.org/ - Correspondence added

From:

espen.wiborg [...] telio.no

On Thu Jul 17 19:38:27 2008, mrwhiskers@gmail.com wrote: Show quoted text

> Can't call method "Disabled" on an undefined value at > /var/www/rt_38/bin/../local/lib/RT/User_Vendor.pm line 351. > > Debug logs on the RT server show no LDAP activity, but indicate the > following: > > Jul 17 12:30:27 servername RT: Transaction->Create couldn't, as you > didn't specify an object type and id > (/var/www/rt_38/bin/../lib/RT/Record.pm:1439) > Jul 17 12:30:27 servername RT: Couldn't get principal for not loaded > object (/var/www/rt_38/bin/../lib/RT/User_Overlay.pm:1113)

This patch fixed it for me: --- lib/RT/User_Vendor.pm~ 2008-04-09 10:40:44.000000000 +0200 +++ lib/RT/User_Vendor.pm 2008-08-04 17:46:32.000000000 +0200 @@ -348,7 +348,7 @@ return (undef); } - if ( $self->PrincipalObj->Disabled ) { + if ( $self->PrincipalObj and $self->PrincipalObj->Disabled ) { $RT::Logger->info("Disabled user " . $self->Name . " tried to log in" ); return (undef);

Fri Sep 12 11:41:23 2008 mrwhiskers [...] gmail.com - Correspondence added

Subject:	Re: [rt.cpan.org #37767] RT::Authen::ExternalAuth insall issue on RT3.8.0
Date:	Fri, 12 Sep 2008 09:40:37 -0600
To:	bug-RT-Authen-ExternalAuth [...] rt.cpan.org
From:	"Matt M" <mrwhiskers [...] gmail.com>

Coincidentally, I applied this patch the other after noticing it on the RT mailing lists :) Works fine for me too! Thanks! -M On Fri, Sep 12, 2008 at 00:57, http://blog.grumblesmurf.org/ via RT <bug-RT-Authen-ExternalAuth@rt.cpan.org> wrote: Show quoted text

> <URL: http://rt.cpan.org/Ticket/Display.html?id=37767 > > > On Thu Jul 17 19:38:27 2008, mrwhiskers@gmail.com wrote:

>> Can't call method "Disabled" on an undefined value at >> /var/www/rt_38/bin/../local/lib/RT/User_Vendor.pm line 351. >> >> Debug logs on the RT server show no LDAP activity, but indicate the >> following: >> >> Jul 17 12:30:27 servername RT: Transaction->Create couldn't, as you >> didn't specify an object type and id >> (/var/www/rt_38/bin/../lib/RT/Record.pm:1439) >> Jul 17 12:30:27 servername RT: Couldn't get principal for not loaded >> object (/var/www/rt_38/bin/../lib/RT/User_Overlay.pm:1113)

> > This patch fixed it for me: > > --- lib/RT/User_Vendor.pm~ 2008-04-09 10:40:44.000000000 +0200 > +++ lib/RT/User_Vendor.pm 2008-08-04 17:46:32.000000000 +0200 > @@ -348,7 +348,7 @@ > return (undef); > } > > - if ( $self->PrincipalObj->Disabled ) { > + if ( $self->PrincipalObj and $self->PrincipalObj->Disabled ) { > $RT::Logger->info("Disabled user " . $self->Name . > " tried to log in" ); > return (undef);

Mon Oct 20 18:44:29 2008 cpan [...] jibsheet.com - Correspondence added

This patch has been rolled into the new pre-release 0.06_02 version

Mon Oct 20 18:44:31 2008 cpan [...] jibsheet.com - Status changed from 'open' to 'resolved'