[rt-users] Could Not Set User Info RT-Authen-ExternalAuth (ExternalInfoPriority)
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello all,
I have seen many questions and posts based on this but I have yet to
find a working solution.
User could not be created: Could not set user info when creating a new
internal user.
What is the supposed setting please for ExternalInfoPriority?
I have tried undef, 0, internal etc.
If I disable the plugin I can create an internal user.
Set($ExternalAuthPriority, ['LDAP']);
Set($ExternalInfoPriority, ['WhatTheHellIsSupposedToGoInHere']);
Set($ExternalServiceUsesSSLorTLS, 0);
Set($AutoCreateNonExternalUsers, 0);
Set($ExternalSettings, {
'LDAP'= {
'type'= 'ldap',
'auth'= 1,
'info'= 0,
'server' = '*8',
'user'= '',
'pass'= '',
'base'= 'dc=,dc=***,dc=**,dc=**',
'filter' = '(objectClass=*)',
'd_filter'= '(objectClass=ThisWillNeverMatch)',
'tls' = 0,
'ssl_version' = 3,
'net_ldap_args' = [version = 3],
'group' = 'cn=rt,ou=groups,dc=**,dc=***,dc=**,dc=**',
'group_attr' = 'member',
'attr_match_list' = ['Name', 'EmailAddress'],
'attr_map'= {'Name' = 'uid', 'RealName' = 'cn',
'ExternalAuthId' = 'uid', 'Gecos' = 'cn', 'EmailAddress' = 'mail'}
}
}
);
1;
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iQEcBAEBAgAGBQJMmIuxAAoJEBMzHChmstlqAj8H/ikxqGvI1cN8ACdXzeHKCoUT
w1p5lT6eVsStsOTAP8u54m9clC6XhtNHRh8ub+a2Uin1Da8U0ST77pQ3DzF/4z2G
ZowljV+1RlsZdnODhj4nPkiuh8Ip3fTYI2Q30FLa9et49haMBneRSTrqP6qLtqQI
DIUi6tgSFMR+ywf57WfiEmJSPqAC+8PPOUGfOUAchcH5UPJQgmg+5PPpgg5QsgXQ
OJ+reysLOcdkWYOZD6+xRb9c5Cp/tZ2cDLQGAL0FcnsFNSaLL6+cim9DC3bA2oaS
rEdv0It0oQH8qeX6e7m/VsAowkhXyHlPUtaZq4DVfYijBHynJcaBcSAP7PJN+kc=
=wuU6
-END PGP SIGNATURE-
To read FirstRand Bank's Disclaimer for this email click on the following
address or copy into your Internet browser:
https://www.fnb.co.za/disclaimer.html
If you are unable to access the Disclaimer, send a blank e-mail to
firstrandbankdisclai...@fnb.co.za and we will send you a copy of the Disclaimer.
RT Training in Washington DC, USA on Oct 25 26 2010
Last one this year -- Learn how to get the most out of RT!
Re: [rt-users] Could Not Set User Info RT-Authen-ExternalAuth (ExternalInfoPriority)
On Tue, Sep 21, 2010 at 12:40:49PM +0200, Robert Gabriel wrote:
I have seen many questions and posts based on this but I have yet to
find a working solution.
User could not be created: Could not set user info when creating a new
internal user.
I suspect that most of the time this question comes up on the list,
you'll see someone telling you to check $AutoCreateNonExternalUsers
What is the supposed setting please for ExternalInfoPriority?
I have tried undef, 0, internal etc.
If I disable the plugin I can create an internal user.
The documentation says
# The order in which the services defined in ExternalSettings
# should be used to get information about users.
So, you use the service name you defined in ExternalSettings.
-kevin
Set($ExternalAuthPriority, ['LDAP']);
Set($ExternalInfoPriority, ['WhatTheHellIsSupposedToGoInHere']);
Set($ExternalServiceUsesSSLorTLS, 0);
Set($AutoCreateNonExternalUsers, 0);
Set($ExternalSettings, {
'LDAP'= {
'type'= 'ldap',
'auth'= 1,
'info'= 0,
'server' = '*8',
'user'= '',
'pass'= '',
'base'= 'dc=,dc=***,dc=**,dc=**',
'filter' = '(objectClass=*)',
'd_filter'= '(objectClass=ThisWillNeverMatch)',
'tls' = 0,
'ssl_version' = 3,
'net_ldap_args' = [version = 3],
'group' = 'cn=rt,ou=groups,dc=**,dc=***,dc=**,dc=**',
'group_attr' = 'member',
'attr_match_list' = ['Name', 'EmailAddress'],
'attr_map'= {'Name' = 'uid', 'RealName' = 'cn',
'ExternalAuthId' = 'uid', 'Gecos' = 'cn', 'EmailAddress' = 'mail'}
}
}
);
1;
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iQEcBAEBAgAGBQJMmIuxAAoJEBMzHChmstlqAj8H/ikxqGvI1cN8ACdXzeHKCoUT
w1p5lT6eVsStsOTAP8u54m9clC6XhtNHRh8ub+a2Uin1Da8U0ST77pQ3DzF/4z2G
ZowljV+1RlsZdnODhj4nPkiuh8Ip3fTYI2Q30FLa9et49haMBneRSTrqP6qLtqQI
DIUi6tgSFMR+ywf57WfiEmJSPqAC+8PPOUGfOUAchcH5UPJQgmg+5PPpgg5QsgXQ
OJ+reysLOcdkWYOZD6+xRb9c5Cp/tZ2cDLQGAL0FcnsFNSaLL6+cim9DC3bA2oaS
rEdv0It0oQH8qeX6e7m/VsAowkhXyHlPUtaZq4DVfYijBHynJcaBcSAP7PJN+kc=
=wuU6
-END PGP SIGNATURE-
To read FirstRand Bank's Disclaimer for this email click on the following
address or copy into your Internet browser:
https://www.fnb.co.za/disclaimer.html
If you are unable to access the Disclaimer, send a blank e-mail to
firstrandbankdisclai...@fnb.co.za and we will send you a copy of the
Disclaimer.
RT Training in Washington DC, USA on Oct 25 26 2010
Last one this year -- Learn how to get the most out of RT!
pgpIPnQKJvly0.pgp
Description: PGP signature
RT Training in Washington DC, USA on Oct 25 26 2010
Last one this year -- Learn how to get the most out of RT!
[rt-users] Take and Change Owner Permissions
I am having a problem with take and change owner permissions. I have a user group that only has the following permissions on a specific queue: CommentOnTicket CreateTicket ForwardMessage ModifyTicket OwnTicket ReplyToTicket SeeCustomField SeeQueue ShowTicket ShowTicketComments and everyone has the following on the same queue CreateTicket ModifyCustomField ReplyToTicket SeeQueue ShowTicket There are no other group or global rights appied that would affect this user. If they are looking at unowned tickets on their RT at a glance, they have a link for Take, even though they don't have the Take Ticket right. They can also go into the Jumbo view of a ticket and change the owner. Am I misunderstanding this right? If I am, how do I keep users from taking unowned tickets? We are trying to set it up so there is a queue manager who sorts and assigns and don't want everyone to be able to just take tickets. TIA for any help. RT Training in Washington DC, USA on Oct 25 26 2010 Last one this year -- Learn how to get the most out of RT!
Re: [rt-users] Take and Change Owner Permissions
On Tue, Sep 21, 2010 at 01:17:49PM -0400, Jason Ledford wrote: I am having a problem with take and change owner permissions. I have a user group that only has the following permissions on a specific queue: CommentOnTicket CreateTicket ForwardMessage ModifyTicket OwnTicket ReplyToTicket SeeCustomField SeeQueue ShowTicket ShowTicketComments and everyone has the following on the same queue CreateTicket ModifyCustomField ReplyToTicket SeeQueue ShowTicket There are no other group or global rights appied that would affect this user. If they are looking at unowned tickets on their RT at a glance, they have a link for Take, even though they don't have the Take Ticket right. If you look at that search, it has a Take column added in. If they didn't have the Take right, the link would fail (you can see it from Advanced when editing the search). They can also go into the Jumbo view of a ticket and change the owner. You gave them ModifyTicket, so they can modify the Owner. You may just want to give Owners ModifyTicket instead -kevin Am I misunderstanding this right? If I am, how do I keep users from taking unowned tickets? We are trying to set it up so there is a queue manager who sorts and assigns and don't want everyone to be able to just take tickets. TIA for any help. RT Training in Washington DC, USA on Oct 25 26 2010 Last one this year -- Learn how to get the most out of RT! pgpze7du8xkAv.pgp Description: PGP signature RT Training in Washington DC, USA on Oct 25 26 2010 Last one this year -- Learn how to get the most out of RT!
Re: [rt-users] Take and Change Owner Permissions
Changing the modifyticket to owner instead of my group did it. Thanks. -Original Message- From: rt-users-boun...@lists.bestpractical.com [mailto:rt-users-boun...@lists.bestpractical.com] On Behalf Of Kevin Falcone Sent: Tuesday, September 21, 2010 1:23 PM To: rt-users@lists.bestpractical.com Subject: Re: [rt-users] Take and Change Owner Permissions On Tue, Sep 21, 2010 at 01:17:49PM -0400, Jason Ledford wrote: I am having a problem with take and change owner permissions. I have a user group that only has the following permissions on a specific queue: CommentOnTicket CreateTicket ForwardMessage ModifyTicket OwnTicket ReplyToTicket SeeCustomField SeeQueue ShowTicket ShowTicketComments and everyone has the following on the same queue CreateTicket ModifyCustomField ReplyToTicket SeeQueue ShowTicket There are no other group or global rights appied that would affect this user. If they are looking at unowned tickets on their RT at a glance, they have a link for Take, even though they don't have the Take Ticket right. If you look at that search, it has a Take column added in. If they didn't have the Take right, the link would fail (you can see it from Advanced when editing the search). They can also go into the Jumbo view of a ticket and change the owner. You gave them ModifyTicket, so they can modify the Owner. You may just want to give Owners ModifyTicket instead -kevin Am I misunderstanding this right? If I am, how do I keep users from taking unowned tickets? We are trying to set it up so there is a queue manager who sorts and assigns and don't want everyone to be able to just take tickets. TIA for any help. RT Training in Washington DC, USA on Oct 25 26 2010 Last one this year -- Learn how to get the most out of RT! RT Training in Washington DC, USA on Oct 25 26 2010 Last one this year -- Learn how to get the most out of RT!
[rt-users] user's rights on tickets
Hi, I'm trying to set up RT (latest) for us, but have a problem understanding rights. We want to give users the ability to see their tickets, and _only_ their tickets, including tickets they submitted, but which are not taken. Ideally, the user could be a group (eg. an IT department) with several human members, who generally should have the same rights. Likewise, if some person out of such a user group, a confirmation should be sent to the group as a whole, not only to that member of the group. The only way I see how to do this, at this moment, is to create one queue per user/group, and assign this user/group rights to only this queue (use a special group if there is more than one person to deal with). I'd like to have the ability to (automatically) assign access rights on a per-ticket basis instead, but don't see how this could be done. It would be nice if you could share some tips or pointers! Kind regards, --Toni++ RT Training in Washington DC, USA on Oct 25 26 2010 Last one this year -- Learn how to get the most out of RT!
Re: [rt-users] Take and Change Owner Permissions
Jason, A few questions; You allow Everyone, not just Privileged or certain roles or specific User groups, the right to modify a custom field value in a ticket? Curious. Also, if you have granted CreateTicket to everyone, why did you grant it again to that group? They already have it as Everyone. Same applies to ReplyToTicket, SeeQueue, and ShowTicket. These can be dropped from the group. Redundant Privileges make for more difficult maintenance and a tougher time debugging Rights problems. I also noticed you didn't grant SeeOutgoingEmail to anyone. I would think that at least the group might want to see what Email is coming and going. Who is allowed to delete a ticket? The owner? Just a few thoughts. Kenn LBNL On Tue, Sep 21, 2010 at 10:17 AM, Jason Ledford jledf...@biltmore.comwrote: I am having a problem with take and change owner permissions. I have a user group that only has the following permissions on a specific queue: CommentOnTicket CreateTicket ForwardMessage ModifyTicket OwnTicket ReplyToTicket SeeCustomField SeeQueue ShowTicket ShowTicketComments and everyone has the following on the same queue CreateTicket ModifyCustomField ReplyToTicket SeeQueue ShowTicket There are no other group or global rights appied that would affect this user. If they are looking at unowned tickets on their RT at a glance, they have a link for Take, even though they don’t have the Take Ticket right. They can also go into the Jumbo view of a ticket and change the owner. Am I misunderstanding this right? If I am, how do I keep users from taking unowned tickets? We are trying to set it up so there is a queue manager who sorts and assigns and don’t want everyone to be able to just take tickets. TIA for any help. RT Training in Washington DC, USA on Oct 25 26 2010 Last one this year -- Learn how to get the most out of RT! RT Training in Washington DC, USA on Oct 25 26 2010 Last one this year -- Learn how to get the most out of RT!
[rt-users] replacing/eliminating undisclosed recipients
I'm using RT 3.8.8 with postfix 2.3.3, on CentOS 5.4 64bit. When RT sends email, the To: address is populated with 'undisclosed recipients'. It doesn't really cause a problem unless people do reply all, which will cause the 'undisclosed recipients' to appear in the To: field of the reply. I read about using the: Set($UseFriendlyToLine, 0); entry in RT_SiteConfig.pm, but didn't have much luck. If I set it to 1, I see errors in my maillog: Sep 16 22:09:54 foobox sendmail[2555]: o8GM9sbP002555: o8GM9sbQ002555: DSN: AdminCc of foobox.mysite.com Ticket #10:;... List:; syntax illegal for recipient addresses Is there a way to make the To: field be the same as the From: field? If not, I'd be happy if I could make the To: field be nob...@mydomain.com, where I'd simply /dev/null it. Thanks! If life gives you lemons, keep them-- because hey.. free lemons. RT Training in Washington DC, USA on Oct 25 26 2010 Last one this year -- Learn how to get the most out of RT!
Re: [rt-users] replacing/eliminating undisclosed recipients
On Tue, Sep 21, 2010 at 12:04:28PM -0700, Joseph Spenner wrote: I'm using RT 3.8.8 with postfix 2.3.3, on CentOS 5.4 64bit. Are you sure about the postfix part (See below)? When RT sends email, the To: address is populated with 'undisclosed recipients'. It doesn't really cause a problem unless people do reply all, which will cause the 'undisclosed recipients' to appear in the To: field of the reply. I read about using the: Set($UseFriendlyToLine, 0); entry in RT_SiteConfig.pm, but didn't have much luck. If I set it to 1, I see errors in my maillog: Sep 16 22:09:54 foobox sendmail[2555]: o8GM9sbP002555: o8GM9sbQ002555: DSN: AdminCc of foobox.mysite.com Ticket #10:;... List:; syntax illegal for recipient addresses This looks like a sendmail log, which is documented not to work with FriendlyToLIne Is there a way to make the To: field be the same as the From: field? If not, I'd be happy if I could make the To: field be nob...@mydomain.com, where I'd simply /dev/null it. Presumably you're not complaining that all email from RT lacks a To: line, but instead that mail to AdminCcs lacks a To: line. You could hardcode a To into the appropriate Template in that case. -kevin pgptdLy2hnDDV.pgp Description: PGP signature RT Training in Washington DC, USA on Oct 25 26 2010 Last one this year -- Learn how to get the most out of RT!
Re: [rt-users] replacing/eliminating undisclosed recipients
--- On Tue, 9/21/10, Kevin Falcone falc...@bestpractical.com wrote: On Tue, Sep 21, 2010 at 12:04:28PM -0700, Joseph Spenner wrote: I'm using RT 3.8.8 with postfix 2.3.3, on CentOS 5.4 64bit. Are you sure about the postfix part (See below)? I noticed the sendmail messages in the logs as well (both postfix and sendmail messages), even though postfix is the only one running. So, I just now removed the sendmail packages from the system, and updated the RT_SiteConfig.pm with: Set($UseFriendlyToLine, 1); I no longer see sendmail messages/errors in the log. However, now the To: address (directed to watchers), looks like this: to: AdminCc of rtbox.mydomain.com Ticket #7:; instead of undisclosed recipients. It's different, but still suboptimal. :) Any more help would be great. Thanks! RT Training in Washington DC, USA on Oct 25 26 2010 Last one this year -- Learn how to get the most out of RT!
Re: [rt-users] WOW !
WOW !! That's Amazing ...!! I removed it and after service restart it was gone ! ... Its is still there on the /SelfService page . (The CC: field) How do I remove that . Also is there a way I could remove it system wide .. Thanks Vikas Date: Mon, 20 Sep 2010 11:23:22 -0700 From: Kenneth Crocker kfcroc...@lbl.gov To: rt-users@lists.bestpractical.com Subject: Re: [rt-users] Hiding CC: Admin CC: Fields on new ticket creation Message-ID: aanlktinke8bnc9ivzweyfvgdbt75=trqb085zwl4f...@mail.gmail.com Content-Type: text/plain; charset=iso-8859-1 Vikas, Yes. We removed AdminCc from the Ticket Create because we use the AdminCc role as the Queue manager (Queue Watcher) and therefore will get all notifications needed due to Global scrips and we don't want anyone adding an AdminCc to any notifications going out. You need to create a local version of the Create.html file (copy /opt/rt3/share/html/Ticket/Create.html to /opt/rt3/local/html/Ticket/Create.html) and make your modifications there. Hope this helps. Kenn LBNL Kind Regards Vikas Srivastava Mobile : +91-665501 RT Training in Washington DC, USA on Oct 25 26 2010 Last one this year -- Learn how to get the most out of RT!
[rt-users] How to Re-size the TextBox created when putting a custom field on CreateTicket
Hi All , I added a custom field , name Problem Description (TextBox) .. It comes on the page fine but I would like to re-size it .. and reposition it . .. Is there a way we could achieve that ... Thanks Regards Vikas .. RT Training in Washington DC, USA on Oct 25 26 2010 Last one this year -- Learn how to get the most out of RT!
