Re: [rt-users] Option to Emulate another RT user from SuperUser

[Torsten Brumm]

Search github for: RTx-BecomeUser this Could help you.

Von meinem iPhone gesendet

> Am 12.11.2015 um 19:23 schrieb Joe Kirby :
> 
> At time some folks on campus report that RT is slow for them. 
> 
> I try to create a test user with the same access but this does not always 
> help me because they may have a lot of tickets or a dashboard item/report 
> that I cannot emulate.
> 
> Does RT have any built-in mechanism for SuperUser to do such a thing.
> 
> We use single sign on and thus I am unable to override that.
> 
> Thanks
> 
> Joe
> 
> Joe Kirby ,  Assistant Vice President, Business Systems
> Division of Information Technology (DoIT) 
> Support Response -   http://www.umbc.edu/doit 
> Administration 627
> Office - 410-455-3020 
> Email - ki...@umbc.edu
> 

Re: [rt-users] Option to Emulate another RT user from SuperUser

[k...@rice.edu]

On Thu, Nov 12, 2015 at 01:23:53PM -0500, Joe Kirby wrote:
> At time some folks on campus report that RT is slow for them. 
> 
> I try to create a test user with the same access but this does not always 
> help me because they may have a lot of tickets or a dashboard item/report 
> that I cannot emulate.
> 
> Does RT have any built-in mechanism for SuperUser to do such a thing.
> 
> We use single sign on and thus I am unable to override that.
> 
> Thanks
> 
> Joe
> 
> Joe Kirby ,  Assistant Vice President, Business Systems
> Division of Information Technology (DoIT) 
> Support Response -   http://www.umbc.edu/doit 
> Administration 627
> Office - 410-455-3020 
> Email - ki...@umbc.edu
> 

Hi Joe,

You might be able to set up an alternate frontend configured to use
local authentication. Then you could test with that by setting a local
password for the account. What version are you running and are you do
you have Set($UseSQLForACLChecks, 1) in your RT_SiteConfig.pm? Superuser
skips all of the access checks that regular accounts pass through.

Regards,
Ken

[rt-users] Option to Emulate another RT user from SuperUser

[Joe Kirby]

At time some folks on campus report that RT is slow for them. 

I try to create a test user with the same access but this does not always help 
me because they may have a lot of tickets or a dashboard item/report that I 
cannot emulate.

Does RT have any built-in mechanism for SuperUser to do such a thing.

We use single sign on and thus I am unable to override that.

Thanks

Joe

Joe Kirby ,  Assistant Vice President, Business Systems
Division of Information Technology (DoIT) 
Support Response -   http://www.umbc.edu/doit 
Administration 627
Office - 410-455-3020 
Email - ki...@umbc.edu

Re: [rt-users] Option to Emulate another RT user from SuperUser

[Matt Zagrabelny]

On Thu, Nov 12, 2015 at 12:23 PM, Joe Kirby  wrote:
> At time some folks on campus report that RT is slow for them.
>
> I try to create a test user with the same access but this does not always
> help me because they may have a lot of tickets or a dashboard item/report
> that I cannot emulate.

I wouldn't try to recreate the user that is experiencing slowness. I
would try to work with that person.

> Does RT have any built-in mechanism for SuperUser to do such a thing.

I would start off by enabling query execute time logging. Search the
internet for "slow query logging" and your database and you'll get the
instructions for enabling the logging.

> We use single sign on and thus I am unable to override that.

We use SSO and if you wanted to side step that, there are mechanisms.

-m

Re: [rt-users] Option to Emulate another RT user from SuperUser

[Joe Kirby]

We recently turned of Set($UseSQLForACLChecks, 1) for performance reasons.

Are you saying we could have a special config in place that would allow me to 
access our system in non-SSO mode or would I have to cloned the db to such an 
area?

Thanks for getting back so quickly

Joe

Joe Kirby ,  Assistant Vice President, Business Systems
Division of Information Technology (DoIT) 
Support Response -   http://www.umbc.edu/doit 
Administration 627
Office - 410-455-3020 
Email - ki...@umbc.edu

> On Nov 12, 2015, at 1:37 PM, k...@rice.edu wrote:
> 
> On Thu, Nov 12, 2015 at 01:23:53PM -0500, Joe Kirby wrote:
>> At time some folks on campus report that RT is slow for them. 
>> 
>> I try to create a test user with the same access but this does not always 
>> help me because they may have a lot of tickets or a dashboard item/report 
>> that I cannot emulate.
>> 
>> Does RT have any built-in mechanism for SuperUser to do such a thing.
>> 
>> We use single sign on and thus I am unable to override that.
>> 
>> Thanks
>> 
>> Joe
>> 
>> Joe Kirby ,  Assistant Vice President, Business Systems
>> Division of Information Technology (DoIT) 
>> Support Response -   http://www.umbc.edu/doit 
>> Administration 627
>> Office - 410-455-3020 
>> Email - ki...@umbc.edu
>> 
> 
> Hi Joe,
> 
> You might be able to set up an alternate frontend configured to use
> local authentication. Then you could test with that by setting a local
> password for the account. What version are you running and are you do
> you have Set($UseSQLForACLChecks, 1) in your RT_SiteConfig.pm? Superuser
> skips all of the access checks that regular accounts pass through.
> 
> Regards,
> Ken

Re: [rt-users] Option to Emulate another RT user from SuperUser

[Matt Zagrabelny]

On Thu, Nov 12, 2015 at 12:40 PM, Joe Kirby  wrote:
> We recently turned of Set($UseSQLForACLChecks, 1) for performance reasons.

Sorry. Haven't used that setting yet.

> Are you saying we could have a special config in place that would allow me
> to access our system in non-SSO mode or would I have to cloned the db to
> such an area?

We bypass it via the browser user agent. Here is a snippet from our
apache configs:

SetEnvIf User-Agent ^KnockKnock let_me_in

# Allow either Shib-ed users or KnockKnock agents to be able to access the
# system. KnockKnock agents will still have to authenticate to the local
# RT login page.


AuthType shibboleth
ShibRequireSession on
Require valid-user

Require env let_me_in


Options +ExecCGI
AddHandler fastcgi-script fcgi


Then to access RT's login page, change your browser's user agent to
"KnockKnock" or whatever string you choose.

-m