Re: [rt-users] RT 4.0.2 and ExternalAuth
Hi, solution: install Crypt::MySQL using CPAN. Adrian 2011/11/12 Adrian Stel adisa...@gmail.com: Hi, now I have : 'p_enc_pkg' = 'Crypt::MySQL', 'p_enc_sub' = 'password41', and still errors: [error]: AUTH FAILED, Couldn't Load Password Encryption Package. Error: Can't locate Crypt/MySQL.pm in @INC (@INC contains: /opt/rt4/sbin/../local/lib /opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib /opt/rt4/sbin/../lib /etc/perl /usr/local/lib/perl/5.10.1 /usr/local/share/perl/5.10.1 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.10 /usr/share/perl/5.10 /usr/local/lib/site_perl . /etc/apache2) at (eval 1304) line 3. [error]: My_MySQL AUTH FAILED The encryption package you gave me ( Crypt::MySQL ) does not support the encryption method you specified ( password41 ) (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/DBI.pm:99) [Sat Nov 12 12:08:58 2011] [debug]: DBI password validation result: 0 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:331) [Sat Nov 12 12:08:58 2011] [debug]: Password Validation Check Result: 0 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:159) [Sat Nov 12 12:08:58 2011] [debug]: Autohandler called ExternalAuth. Response: (0, Password Invalid) (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/html/Elements/DoAuth:11) [Sat Nov 12 12:08:58 2011] [error]: FAILED LOGIN for test123 from 31.174.157.24 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:655) Any idea why there we Can't locate Crypt/MySQL.pm ? Adrian 2011/11/10 Kevin Falcone falc...@bestpractical.com: On Thu, Nov 10, 2011 at 02:07:41PM +0100, Adrian Stel wrote: # The Perl package subroutine used to encrypt passwords # e.g. if the passwords are stored using the MySQL v3.23 PASSWORD # function, then you will need Crypt::MySQL::password, but for the # MySQL4+ password function you will need Crypt::MySQL::password41 # Alternatively, you could use Digest::MD5::md5_hex or any other # encryption subroutine you can load in your perl installation 'p_enc_pkg' = 'Crypt::MySQL::password41', #'p_enc_sub' = 'password41', # If your Couldn't Load Password Encryption Package. Error: Can't locate Crypt/MySQL/password.pm My_MySQL AUTH FAILED The encryption package you gave me ( Crypt::MySQL::password ) does not support the encryption method you specified ( ) You've configured it to use Crypt::MySQL::password41, which is not a perl module. I suspect you wanted it to load Crypt::MySQL and then use the password41 method on it. -kevin RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain — November 28 29, 2011 -- Pozdrawiam Adrian Stelmaszyk -- Pozdrawiam Adrian Stelmaszyk RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
[rt-users] RT 4.0.2 ExternalAuth and phpbb3
Hi, I would like to use phpbb3 base to auth to my RT. Problem is here: SiteConfig.pm # The Perl package subroutine used to encrypt passwords # e.g. if the passwords are stored using the MySQL v3.23 PASSWORD # function, then you will need Crypt::MySQL::password, but for the # MySQL4+ password function you will need Crypt::MySQL::password41 # Alternatively, you could use Digest::MD5::md5_hex or any other # encryption subroutine you can load in your perl installation 'p_enc_pkg' = 'Crypt::MySQL', 'p_enc_sub' = 'password41', I'm not sure which function I should use. -- Best Adrian Stelmaszyk RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] RT4 woes with Scrips and email
Hi, I'm able to reproduce your error, which might be a but. 1. Go to a queue via de config menu, click scrips so that you have the page with all scrips that apply to that queue. 2. Click on a scrip that applies to all queue's (the first list of scrips), these are the global scrips. 3. You'll get an error. But, if you have a queue specific scrip (the second list at the bottom of the page) then you'll see the scrip since that scrip applies to that queue. Also, if you go to Global - Scrips and click one of the global scrips you'll be shown the actual scrip. The difference in the URL's is basically the word Queue should be Global, then it's just fine. Link to a global scrip from the queue scrips view: weburl/Admin/Queues/Scrip.html?id=9Queue=0 Link to a global scrip from the global scrips page: weburl/Admin/Global/Scrip.html?id=9Queue=0 Can you confirm that this is the error your noticing? -- Bart 2011/11/11 Izz Abdullah izz.abdul...@hibbett.com So I flipped over the database from RT3.8 to RT4.0.2 today, and RT is not attempting to send out emails on our system. Fetchmail is working, pulling in emails, and Sendmail has been checked from the command line to work fine. Now, I mind you this is a database transferred from another server and upgraded. We see the following issue when going to Queues - General - Scrips and click on any scrip: ‘Queue X not found’ where X is the id number in: [weburl]/Admin/Queues/Scrip.html?id=XQueue=0 ** ** Now, no matter which queue we go to, it puts the queue number as 0, and the id number as the scrip number, yet it is failing, telling us the id number Queue is not found. I wish I could give a printscreen to explain this better, but basically I am sure something has gone awry with the scrips. ** ** Any ideas? ** ** Thanks, Izz RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain — November 28 29, 2011 RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] Categories are based on... How to handle the same value for multiple parent categories
We have a similar setup, and I'm afraid there isn't much you can change about it (to my knowledge at least). We've made it look like this: (CF names) - Item A - Item B - Item C When it comes to the search builder you'll see duplicate values, but if you search on Item C with value password (that's maybe listed three times) then it will show the content of all tickets containing the value password for Item C. The search builder simply checks for the string, if it matches then it will give you the results. If you want to make sure it shows the correct tickets then you'll have to combine the Item C value password with an Item A and/or Item B which will result in a specific result. Either way, you don't have to worry about the duplicates the result will be the same regardless of which duplicate you select. Hope this helps. -- Bart 2011/11/11 Jim Lesinski jim.lesin...@gmail.com Hi, In request tracker, how would you recommend setting up your dependent drop down lists that have a consistent drop down value for multiple parent values? Below, under the 1st level Administration value, I show an example of what I am asking about. - Hardware - item1.1 - item1.2 - item1.3 - Software - item2.1 - item2.2 - item2.3 - Administration - password reset - softwarename1.1 - softwarename1.2 - softwarename1.3 - profile update - softwarename1.1 - softwarename1.2 - softwarename1.3 I was able to set up the outline above by using the built in categories are based on option for drop down lists and entering the value one time for each parent value. The only thing that I see as a possible issue with doing this is that the search builder then shows the drop down text value multiple times. Maybe just a bug or improvement that could be made in the searchbuilder (ie; only show DISTINCT dropdownlist value)? Or should I handle this a different way? Either way I would appreciate your insight. Thanks, Jim RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain — November 28 29, 2011 RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] How to setup RT::Extension::SLA
Hi, This would roughly be how the SLA plugin works: - When a ticket is first created the SLA plugin makes sure that the Starts date is set to the first possible Business date (e.g. the next day on 8:30 in the morning). - It then if configured sets the SLA to the default value of a queue. - In our case, we have a scrip that sets the SLA value based on the combination of ticket type (Incident, Problem, Change) and ticket priority (1 to 4). - When the SLA is set for a ticket it then sets the Due date based on the Starts date takes the working hours/holidays into account. - In addition, on SLA change it sets the Due date accordingly (again based on the Starts date). More information on this page: http://search.cpan.org/dist/RT-Extension-SLA/lib/RT/Extension/SLA.pm.Doc To clarify the dates: - Starts: first working day based on business hours - Started: when someone first replies. - Due: roughly the deadline, is set by the SLA plugin. - In your case: - Response: Means it's set to Start + 2h. That's the first deadline, once someone responses the next will start. - Resolve: After a response the SLA plugin will set the due date based on this config, thus Start + 4h. - Closed: is set when you close a ticket. Below our SLA config, might help a little when it comes to business hours: # --- # BusinessHours Settings # --- Set( %ServiceBusinessHours, ( 0 = { Name = 'zondag', Start = 'undef', End = 'undef' }, 1 = { Name = 'maandag', Start = '08:30', End = '18:00' }, 2 = { Name = 'dinsdag', Start = '08:30', End = '18:00' }, 3 = { Name = 'woensdag', Start = '08:30', End = '18:00' }, 4 = { Name = 'donderdag', Start = '08:30', End = '18:00' }, 5 = { Name = 'vrijdag', Start = '08:30', End = '18:00' }, 6 = { Name = 'zaterdag', Start = 'undef', End = 'undef' }, # Non-service dagen: 2011 2012 holidays = [qw(2011-12-26 2012-04-09 2012-04-30 2012-05-17 2012-05-18 2012-05-28 2012-12-25 2012-12-26)], ) ); # --- # SLA Settings # --- # Maximum is 30 dagen! # 480 uur gebruiken om geen Due date in te stellen. Set( %ServiceAgreements, ( Levels = { '4' = { Resolve = { BusinessMinutes = 60*4 }, }, '8' = { Resolve = { BusinessMinutes = 60*8 }, }, '24' = { Resolve = { BusinessMinutes = 60*24 }, }, '48' = { Resolve = { BusinessMinutes = 60*48 }, }, '480' = { Resolve = { BusinessMinutes = 60*480 }, }, }, ) ); Hopefully this helps understanding the SLA plugin. -- Bart 2011/11/11 linuxsupport lin.supp...@gmail.com OK, it is working, but I could not understand Created:Fri Nov 11 16:35:18 2011 -- this is ok Starts:Fri Nov 11 16:35:18 2011-- this should be set to Created+ 1hours response time Started:Fri Nov 11 16:42:43 2011 Last Contacthttp://207.228.237.31/rt/Ticket/Display.html?id=8Action=SetTold:Not set Due:Sat Nov 12 09:35:18 2011 -- this should be set to Created + 4 hours resolution time Closed:Not set Updated:Fri Nov 11 16:42:43 2011 by Enoch Roothttp://207.228.237.31/rt/Ticket/Display.html?id=8#lasttrans Please correct me, I am doing something wrong or not understanding it a t all. On Fri, Nov 11, 2011 at 4:33 PM, Ruslan Zakirov r...@bestpractical.comwrote: On Fri, Nov 11, 2011 at 2:56 PM, linuxsupport lin.supp...@gmail.com wrote: Yes, it is enabled Set( @Plugins, qw( RT::Extension::SLA) ); In the log it says. [Fri Nov 11 10:55:12 2011] [warning]: SLA scrip applied to a queue that has no SLA CF (/usr/local/share/request-tracker4/plugins/RT-Extension-SLA/lib/RT/Action/SLA_SetDefault.pm:33 You didn't apply SLA custom field to queues. Goto admin UI and do it. On Fri, Nov 11, 2011 at 4:16 PM, Ruslan Zakirov r...@bestpractical.com wrote: Hi, Have you enabled plugin in the config? What do you have in logs when you create a ticket? On Fri, Nov 11, 2011 at 2:03 PM, linuxsupport lin.supp...@gmail.com wrote: I have modified the config as below. still not working Set(%ServiceAgreements, ( Default = 'GA', QueueDefault = { 'General' = 'GA', 'Support' = 'GA', 'Sales' = 'GA', 'Incident' = 'SA', }, Levels = { 'SA' = { StartImmediately = 1, Response = { RealMinutes = 60*1*2 }, Resolve = { RealMinutes = 60*4 }, }, 'GA' = { BusinessHours = 'ga_hours', Response = { BusinessMinutes = 60*1 }, Resolve = { BusinessMinutes = 60*4 }, }, }, )); Set(%ServiceBusinessHours, ( 'ga_hours' = { 0 = { Name = 'Sunday', Start = undef, End = undef }, 1 = { Name = 'Monday', Start = '09:00', End = '17:00' }, 2 = { Name = 'Tuesday', Start =
Re: [rt-users] Custom fields
I think it's hard to recommend a default setup regarding CF's, it entirely depends on the situation. Though it's a good policy to only set rights regarding to CF's in the CF rights page via group rights. Thus, don't set any rights on the queue for a group regarding CF's. Other then that it's mostly getting to know the system and evaluate on how you want to setup the permissions of various components. (making a permission matrix helps making things clear) -- Bart 2011/11/11 Zoedog dstro...@flexstar.com Is there a recommended defaut set up that I can use as a model to help us get to a working point, we like the the system, its learning how to navigate that becomes an issue. Thanks Zoedog wrote: We are in the process of adding the use of custom fields to our application. The issue we are having is that anyone without admin privileges is not seeing the custom fields when they are creating tickets, we have gone thru a number of iterations tweaking permissions to get these fields to appear but are having no success. What are we missing? -- View this message in context: http://old.nabble.com/Custom-fields-tp32822127p32823818.html Sent from the Request Tracker - User mailing list archive at Nabble.com. RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011 RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] How to setup RT::Extension::SLA
Oops, this is the correct URL: http://search.cpan.org/dist/RT-Extension-SLA/lib/RT/Extension/SLA.pm -- Bart 2011/11/14 Bart b...@pleh.info Hi, This would roughly be how the SLA plugin works: - When a ticket is first created the SLA plugin makes sure that the Starts date is set to the first possible Business date (e.g. the next day on 8:30 in the morning). - It then if configured sets the SLA to the default value of a queue. - In our case, we have a scrip that sets the SLA value based on the combination of ticket type (Incident, Problem, Change) and ticket priority (1 to 4). - When the SLA is set for a ticket it then sets the Due date based on the Starts date takes the working hours/holidays into account. - In addition, on SLA change it sets the Due date accordingly (again based on the Starts date). More information on this page: http://search.cpan.org/dist/RT-Extension-SLA/lib/RT/Extension/SLA.pm.Doc To clarify the dates: - Starts: first working day based on business hours - Started: when someone first replies. - Due: roughly the deadline, is set by the SLA plugin. - In your case: - Response: Means it's set to Start + 2h. That's the first deadline, once someone responses the next will start. - Resolve: After a response the SLA plugin will set the due date based on this config, thus Start + 4h. - Closed: is set when you close a ticket. Below our SLA config, might help a little when it comes to business hours: # --- # BusinessHours Settings # --- Set( %ServiceBusinessHours, ( 0 = { Name = 'zondag', Start = 'undef', End = 'undef' }, 1 = { Name = 'maandag', Start = '08:30', End = '18:00' }, 2 = { Name = 'dinsdag', Start = '08:30', End = '18:00' }, 3 = { Name = 'woensdag', Start = '08:30', End = '18:00' }, 4 = { Name = 'donderdag', Start = '08:30', End = '18:00' }, 5 = { Name = 'vrijdag', Start = '08:30', End = '18:00' }, 6 = { Name = 'zaterdag', Start = 'undef', End = 'undef' }, # Non-service dagen: 2011 2012 holidays = [qw(2011-12-26 2012-04-09 2012-04-30 2012-05-17 2012-05-18 2012-05-28 2012-12-25 2012-12-26)], ) ); # --- # SLA Settings # --- # Maximum is 30 dagen! # 480 uur gebruiken om geen Due date in te stellen. Set( %ServiceAgreements, ( Levels = { '4' = { Resolve = { BusinessMinutes = 60*4 }, }, '8' = { Resolve = { BusinessMinutes = 60*8 }, }, '24' = { Resolve = { BusinessMinutes = 60*24 }, }, '48' = { Resolve = { BusinessMinutes = 60*48 }, }, '480' = { Resolve = { BusinessMinutes = 60*480 }, }, }, ) ); Hopefully this helps understanding the SLA plugin. -- Bart 2011/11/11 linuxsupport lin.supp...@gmail.com OK, it is working, but I could not understand Created:Fri Nov 11 16:35:18 2011 -- this is ok Starts:Fri Nov 11 16:35:18 2011-- this should be set to Created+ 1hours response time Started:Fri Nov 11 16:42:43 2011 Last Contacthttp://207.228.237.31/rt/Ticket/Display.html?id=8Action=SetTold:Not set Due:Sat Nov 12 09:35:18 2011 -- this should be set to Created + 4 hours resolution time Closed:Not set Updated:Fri Nov 11 16:42:43 2011 by Enoch Roothttp://207.228.237.31/rt/Ticket/Display.html?id=8#lasttrans Please correct me, I am doing something wrong or not understanding it a t all. On Fri, Nov 11, 2011 at 4:33 PM, Ruslan Zakirov r...@bestpractical.comwrote: On Fri, Nov 11, 2011 at 2:56 PM, linuxsupport lin.supp...@gmail.com wrote: Yes, it is enabled Set( @Plugins, qw( RT::Extension::SLA) ); In the log it says. [Fri Nov 11 10:55:12 2011] [warning]: SLA scrip applied to a queue that has no SLA CF (/usr/local/share/request-tracker4/plugins/RT-Extension-SLA/lib/RT/Action/SLA_SetDefault.pm:33 You didn't apply SLA custom field to queues. Goto admin UI and do it. On Fri, Nov 11, 2011 at 4:16 PM, Ruslan Zakirov r...@bestpractical.com wrote: Hi, Have you enabled plugin in the config? What do you have in logs when you create a ticket? On Fri, Nov 11, 2011 at 2:03 PM, linuxsupport lin.supp...@gmail.com wrote: I have modified the config as below. still not working Set(%ServiceAgreements, ( Default = 'GA', QueueDefault = { 'General' = 'GA', 'Support' = 'GA', 'Sales' = 'GA', 'Incident' = 'SA', }, Levels = { 'SA' = { StartImmediately = 1, Response = { RealMinutes = 60*1*2 }, Resolve = { RealMinutes = 60*4 }, }, 'GA' = { BusinessHours = 'ga_hours', Response = { BusinessMinutes = 60*1 }, Resolve = { BusinessMinutes = 60*4 }, }, }, )); Set(%ServiceBusinessHours, (
[rt-users] RT::Authen::ExternalAuth with PHPass (phpbb3);
Hi, I'm trying to configure ExternalAuth on my RT4.0.2 External database use Portable PHP password hashing framework. (phpbb3) http://www.openwall.com/phpass/ There is perl module for this Authen::Passphrase::PHPass (Perl module reimplements the support for portable hashes introduced in phpass, but in Perl). My question is haw I should configure RT_siteConfig.pm: 'p_enc_pkg' = '?' 'p_enc_sub' = '?' When I use: 'p_enc_pkg' = 'Authen::Passphrase::PHPass', 'p_enc_sub' = '', I get: My_MySQL AUTH FAILED The encryption package you gave me ( Authen::Passphrase::PHPass ) does not support the encryption method you specified ( ) (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/DBI.pm:99) Any idea why ? -- Best Adrian Stelmaszyk RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] RT::Authen::ExternalAuth with PHPass (phpbb3);
Hi, thanks :) phpass has many method I use hash_base64, RTSiteConfig.pm: 'p_enc_pkg' = 'Authen::Passphrase::PHPass', 'p_enc_sub' = 'hash_base64', and when i put user/pass I get: RT Site: http://150.254.148.60/NoAuth/Login.html Can't use string (*) as a HASH ref while strict refs in use at /usr/local/share/perl/5.10.1/Authen/Passphrase/PHPass.pm line 278. But when I reload page I will be login to RT. Any idea why we get this error. I test 2 more method hash and cost i both case we get the same error. I'm not sure if I chose rigt method. Or there is issues in RTSiteConfig.pm Best Adrian 2011/11/14 Zordrak zord...@tpa.me.uk: Adrian Stel wrote: Hi, When I use: 'p_enc_pkg' = 'Authen::Passphrase::PHPass', 'p_enc_sub' = '', I get: My_MySQL AUTH FAILED The encryption package you gave me ( Authen::Passphrase::PHPass ) does not support the encryption method you specified ( ) (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/DBI.pm:99) Any idea why ? Very simple, you haven't specified a method (subroutine) for the encryption; only the package. Take MySQL's password function as an example. To use it you would specific the p_enc_pkg as Crypt::MySQL which will include that perl module, but that module provides many different methods. Normally you'd expect to use password41 as the p_enc_sub. If it were MD5: p_eng_pkg: Digest::MD5 p_enc_sub: md5_hex -- Zordrak zord...@tpa.me.uk -- Pozdrawiam Adrian Stelmaszyk RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] Limit upload to compressed files
Hi Ruslan, thanks for your reply. What do you mean with auto archive - export attached files directly after ticket creation or something similar ? Is is tricky to implement ? Maybe also someone else is interested in such a solution (maybe since prices for harddisks go higher and higher now :-) ) Cheers - Michael -Original Message- From: ruslan.zaki...@gmail.com [mailto:ruslan.zaki...@gmail.com] On Behalf Of Ruslan Zakirov Sent: Dienstag, 8. November 2011 21:56 To: Michael Polenske Cc: rt-users@lists.bestpractical.com Subject: Re: [rt-users] Limit upload to compressed files Hi, Uploads processing is done in multiple places, so it's doable with several callbacks and custom code. It's possible to auto archive big files when ticket is created or updated. I did it once many years ago, but code is not public and I even don't have access to it. On Tue, Nov 8, 2011 at 12:23 PM, Michael Polenske michael.polen...@skm-skyline.de wrote: Good morning, we allow our customers to upload files (configuration files, kernel dumps etc) to their ticket. Unfortunately not all customers follow the rule and compress their uploads, so it can be that they upload a config file with 20MB (compressed with standard zip it’s 1MB). So big question – can I limit the upload to .zip /.gz/.rar.7z or whatever on a easy way ? Any idea ? Thanks and best regards, Michael RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain — November 28 29, 2011 -- Best regards, Ruslan. RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] RT Authentication with google login
Hi, Can anyone have example of google login? On Sat, Nov 12, 2011 at 9:55 AM, linuxsupport lin.supp...@gmail.com wrote: I saw RT::Authen::OpenID and RT::Authen::OpenID2 but there is no documentation on how to configure it. On Sat, Nov 12, 2011 at 9:43 AM, David Nicol davidni...@gmail.com wrote: could not the openID login method (there is one isn't there?) turn into this? On 11/11/11, linuxsupport lin.supp...@gmail.com wrote: Hi, Anyone has a working example of RT authentication with google login? Thanks -- One only understands the things that one tames -- the fox RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] Limit upload to compressed files
On Mon, Nov 14, 2011 at 6:36 PM, Michael Polenske michael.polen...@skm-skyline.de wrote: Hi Ruslan, thanks for your reply. What do you mean with auto archive - export attached files directly after ticket creation or something similar ? Is is tricky to implement ? Auto archive - archive attached files before those are inserted into DB if name/size matches some conditions. Tricky, but doable. Maybe also someone else is interested in such a solution (maybe since prices for harddisks go higher and higher now :-) ) Cheers - Michael -- Best regards, Ruslan. RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] ExternalAuth
On Fri, Nov 11, 2011 at 01:14:14PM +, Witts J Mr wrote: We are using the ExternalAuth plugin with RT 4.0.2 at our school authenticating against two different LDAP branches. We also have some internal RT users defined too for users outside of our school who need to be able to log tickets in our queues. At the moment we are using the Everyone group to define the permissions on our internal queues, but this means that external users can see them too. What we would ideally like to be able to do is have all LDAP users put into a global group at the point of creation (i.e. when they first log in). Does anyone know if it would be possible to adjust the ExternalAuth plugin so that you could define a global group and have all users who authenticate from an external source automatically added to that group? This would really help our permissions set up, as it would allow us to create a global group for each LDAP source and assign the permissions to that group rather than using the Everyone group. This is not a feature of the plugin, although you could certainly add it and send a patch. Many people just make sure the LDAP users are Privileged and use that rather than Everyone. You could also use RT-Extension-LDAPImport and import groups and group memberships from LDAP. -kevin pgpjK3crUoI6N.pgp Description: PGP signature RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] RT 4.0.2 ExternalAuth and phpbb3
On Mon, Nov 14, 2011 at 3:27 AM, Adrian Stel adisa...@gmail.com wrote: Hi, I would like to use phpbb3 base to auth to my RT. Problem is here: SiteConfig.pm # The Perl package subroutine used to encrypt passwords # e.g. if the passwords are stored using the MySQL v3.23 PASSWORD # function, then you will need Crypt::MySQL::password, but for the # MySQL4+ password function you will need Crypt::MySQL::password41 # Alternatively, you could use Digest::MD5::md5_hex or any other # encryption subroutine you can load in your perl installation 'p_enc_pkg' = 'Crypt::MySQL', 'p_enc_sub' = 'password41', I'm not sure which function I should use. -- Best Adrian Stelmaszyk RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011 Assuming phpbb use this password library http://www.openwall.com/phpass/, as suggested in this post http://www.phpbb.com/community/viewtopic.php?f=71t=585387#p3225746. Then you could probably use that library's perl port available here http://search.cpan.org/~zefram/Authen-Passphrase/lib/Authen/Passphrase/PHPass.pm to authenticate your users. Otherwise I'm guessing you will have to port phpbb's hashing function to perl using the version that came with your phpbb as reference. Cheers. -- Carlos Ramos RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] Again: RT using reply-to field to authenticate sender email
On Fri, Nov 11, 2011 at 05:32:26PM +0100, Lars Reimann wrote: Queue address: service-...@example.org Sender address: sen...@example.com (known to RT, privileged, can create tickets, etc) Third party address: recipi...@example.net Sending an email with Cc to Queue address and have Reply-to Header set To: recipi...@example.net Cc: service-...@example.org Reply-to: recipi...@example.net yields Could not load a valid user for recipi...@example.net I think this may be a bug, because the original sender address is not used to auth against RT. RT explicitly tries to make the Requestor of the ticket be the Reply-To of an email. It's been this way for many years and I don't see it changing anytime soon. I actually use this all the time to log tickets that show Created by Me but set someone else as the Requestor since I'm logging the ticket for them. You need to configure your permissions to allow for the creation of recipi...@example.net or do a clean overlay of RT to prefer From over Reply-To in the ParseSenderAddressFromHead method. -kevin I don't know how reply addresses are normally handled via RT, but auth'ing a user via the Reply-to header field is wrong because it is almost every time different from the From field and to Reply-to address may have no rights in RT in most cases. Imagine the following workflow: recipi...@example.net is a list, I want to inform it of something while creating a ticket using the Cc field. In this case I am the requestor, emails should go to me and the Reply-to address could be set as CC or whatever. Giving the Reply-to address access to RT is impractical because it is a list address only. Can anybody confirm or has a solution to this? Maybe there is a quick code-fix ;) greetings, l.r. RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011 pgp8hkvvxNe0A.pgp Description: PGP signature RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] RT4 woes with Scrips and email
This bug is resolved in 4.0.4 If you're using 4.0.2 or lower, you'll need to do as Bart says and go to Configuration - Global - Scrips. -kevin On Mon, Nov 14, 2011 at 12:22:27PM +0100, Bart wrote: Hi, I'm able to reproduce your error, which might be a but. 1. Go to a queue via de config menu, click scrips so that you have the page with all scrips that apply to that queue. 2. Click on a scrip that applies to all queue's (the first list of scrips), these are the global scrips. 3. You'll get an error. But, if you have a queue specific scrip (the second list at the bottom of the page) then you'll see the scrip since that scrip applies to that queue. Also, if you go to Global - Scrips and click one of the global scrips you'll be shown the actual scrip. The difference in the URL's is basically the word Queue should be Global, then it's just fine. Link to a global scrip from the queue scrips view: weburl/Admin/Queues/Scrip.html?id=9Queue=0 Link to a global scrip from the global scrips page: weburl/Admin/Global/Scrip.html?id=9Queue=0 Can you confirm that this is the error your noticing? -- Bart 2011/11/11 Izz Abdullah [1]izz.abdul...@hibbett.com So I flipped over the database from RT3.8 to RT4.0.2 today, and RT is not attempting to send out emails on our system. Fetchmail is working, pulling in emails, and Sendmail has been checked from the command line to work fine. Now, I mind you this is a database transferred from another server and upgraded. We see the following issue when going to Queues - General - Scrips and click on any scrip: *Queue X not found* where X is the id number in: [weburl]/Admin/Queues/Scrip.html?id=XQueue=0 Now, no matter which queue we go to, it puts the queue number as 0, and the id number as the scrip number, yet it is failing, telling us the id number Queue is not found. I wish I could give a printscreen to explain this better, but basically I am sure something has gone awry with the scrips. pgpRRkNO3yuio.pgp Description: PGP signature RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] Categories are based on... How to handle the same value for multiple parent categories
On Fri, Nov 11, 2011 at 03:01:18PM -0500, Jim Lesinski wrote: Hi, In request tracker, how would you recommend setting up your dependent drop down lists that have a consistent drop down value for multiple parent values? Below, under the 1st level Administration value, I show an example of what I am asking about. If you use the 'Categories are based on' feature in later 3.8 and 4.0 you'll get much better search options than typing in the Category box. * Hardware * item1.1 * item1.2 * item1.3 * Software * item2.1 * item2.2 * item2.3 * Administration * password reset * softwarename1.1 * softwarename1.2 * softwarename1.3 * profile update * softwarename1.1 * softwarename1.2 * softwarename1.3 I was able to set up the outline above by using the built in categories are based on option for drop down lists and entering the value one time for each parent value. The only thing that I see as a possible issue with doing this is that the search builder then shows the drop down text value multiple times. Maybe just a bug or improvement that could be made in the searchbuilder (ie; only show DISTINCT dropdownlist value)? Or should I handle this a different way? Either way I would appreciate your insight. Thanks, Jim RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain ? November 28 29, 2011 pgpVRUwN62GbI.pgp Description: PGP signature RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] RT::Authen::ExternalAuth with PHPass (phpbb3);
On Mon, Nov 14, 2011 at 03:10:46PM +0100, Adrian Stel wrote: Hi, thanks :) phpass has many method I use hash_base64, RTSiteConfig.pm: 'p_enc_pkg' = 'Authen::Passphrase::PHPass', 'p_enc_sub' = 'hash_base64', and when i put user/pass I get: RT Site: http://150.254.148.60/NoAuth/Login.html Can't use string (*) as a HASH ref while strict refs in use at /usr/local/share/perl/5.10.1/Authen/Passphrase/PHPass.pm line 278. Sounds like the Authen::Passphrase::PHPass module doesn't like the way that RT-Authen-ExternalAuth is invoking it. Unfortunately, you'll need to add some debugging to figure out where it goes wrong unless someone on the list has experience with the configuration you want to use. -kevin But when I reload page I will be login to RT. Any idea why we get this error. I test 2 more method hash and cost i both case we get the same error. I'm not sure if I chose rigt method. Or there is issues in RTSiteConfig.pm Best Adrian 2011/11/14 Zordrak zord...@tpa.me.uk: Adrian Stel wrote: Hi, When I use: 'p_enc_pkg' = 'Authen::Passphrase::PHPass', 'p_enc_sub' = '', I get: My_MySQL AUTH FAILED The encryption package you gave me ( Authen::Passphrase::PHPass ) does not support the encryption method you specified ( ) (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/DBI.pm:99) Any idea why ? Very simple, you haven't specified a method (subroutine) for the encryption; only the package. Take MySQL's password function as an example. To use it you would specific the p_enc_pkg as Crypt::MySQL which will include that perl module, but that module provides many different methods. Normally you'd expect to use password41 as the p_enc_sub. If it were MD5: p_eng_pkg: Digest::MD5 p_enc_sub: md5_hex -- Zordrak zord...@tpa.me.uk -- Pozdrawiam Adrian Stelmaszyk RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011 pgpjIMd8zotgN.pgp Description: PGP signature RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] Sorting custom fields
Giuseppe, Are you talking about hoe the VALUES appear or the way the Fields themselves appear on a ticket page? Kenn LBNL On Thu, Nov 10, 2011 at 6:49 AM, Giuseppe Sollazzo gsoll...@sgul.ac.ukwrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi there, maybe this is stupid but is there a quick way of re-sorting custom fields? Thanks, Giuseppe - -- Giuseppe Sollazzo Senior Systems Analyst Computing Services Information Services St. George's, University Of London Cranmer Terrace London SW17 0RE Email: gsoll...@sgul.ac.uk Direct Dial: +44 20 8725 5160 Fax: +44 20 8725 3583 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJOu+RrAAoJEAqigArPBfJXNOQH/jdKeK/eqbuVnwD2aVmjpsAQ Fim6Z1yoojPuGmz/yPEVoxhDuZy7qwbCme7+pV2T6/miwUShJUJr/QflvK9pxxyQ W03MlQuuhlrFrka9atmDXcGzUM4hd7bZL3d3npUPtAfb8+ky2kP5+eBzMQqQeAXU gPnmN2jcpcMTPOcuFJVfp6I1r9wxzE+bEOo3frma5RpyEifkHDPopqldf6KRwMzM 0r/3SjN01bB9L2VgcxcT26HZYqi43Q4v4fq28EpzzFJFIAN3lipVPs1b8Q0cS4d8 9otLY5dTOQjiI28VWY+y1jKJeOa227EWdqyWWypAKJEU7nrk0Mk6yg0S4jLAb2A= =bEKW -END PGP SIGNATURE- RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011 RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] Sorting custom fields
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 14/11/11 17:24, Kenneth Crocker wrote: Giuseppe, Are you talking about hoe the VALUES appear or the way the Fields themselves appear on a ticket page? Hi Kenneth, the order of the fields themselves. I know you can give a sort order for the values within the interface, so I was expecting something similar to be available for Fields order. The only way to do it seems to be swapping them around. Any other possibility? Thanks, Giuseppe Kenn LBNL On Thu, Nov 10, 2011 at 6:49 AM, Giuseppe Sollazzo gsoll...@sgul.ac.uk mailto:gsoll...@sgul.ac.uk wrote: Hi there, maybe this is stupid but is there a quick way of re-sorting custom fields? Thanks, Giuseppe - RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011 RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain ? November 28 29, 2011 - -- Giuseppe Sollazzo Senior Systems Analyst Computing Services Information Services St. George's, University Of London Cranmer Terrace London SW17 0RE Email: gsoll...@sgul.ac.uk Direct Dial: +44 20 8725 5160 Fax: +44 20 8725 3583 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJOwVCDAAoJEAqigArPBfJXAzsH/3fcawXwyosVR9yPP65qky2R PpgMozygRBcoJnlh1Ic6cURrcXUfhn+xDYtrtmHzD4W8Uk+bgFWNd7bSx+14/SJy I5WmqpLo1Cv79vY2OWDe/DQ1eCxS45lSMk0CtjqbZM0ljWjc00D+oFU+wbBOoska 1TJH9lXueZ7ckeuC35v/9tbuZBxQgwfcFk2IRTxQZkuMM2Y5O6pdVp8+y0uXGprC ECSsTd8F1LT0ymajsoUUJYM0ymZno0wyTbW0fsTsHjZKsjQxJcqVHo8KZ2SKY+t7 gP4nXgGgE2yMk5ZXeEudtUdMUAH3waUSCM61oDMgnvKVoB1bWMZWmW9sR/AsXF4= =y21q -END PGP SIGNATURE- RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] Sorting custom fields
Giuseppe, As far as I know, you can only modify the sequence under Ticket Custom Fields when Configuring a Queue. So that all tickets in the same Queue see the Cf's in the same sequence. That's about the extent of my knowledge. Kenn LBNL On Mon, Nov 14, 2011 at 9:31 AM, Giuseppe Sollazzo gsoll...@sgul.ac.ukwrote: ** -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 14/11/11 17:24, Kenneth Crocker wrote: Giuseppe, Are you talking about hoe the VALUES appear or the way the Fields themselves appear on a ticket page? Hi Kenneth, the order of the fields themselves. I know you can give a sort order for the values within the interface, so I was expecting something similar to be available for Fields order. The only way to do it seems to be swapping them around. Any other possibility? Thanks, Giuseppe Kenn LBNL On Thu, Nov 10, 2011 at 6:49 AM, Giuseppe Sollazzo gsoll...@sgul.ac.uk mailto:gsoll...@sgul.ac.uk gsoll...@sgul.ac.uk wrote: Hi there, maybe this is stupid but is there a quick way of re-sorting custom fields? Thanks, Giuseppe - RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011 RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain ? November 28 29, 2011 - -- Giuseppe Sollazzo Senior Systems Analyst Computing Services Information Services St. George's, University Of London Cranmer Terrace London SW17 0RE Email: gsoll...@sgul.ac.uk Direct Dial: +44 20 8725 5160 Fax: +44 20 8725 3583 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJOwVCDAAoJEAqigArPBfJXAzsH/3fcawXwyosVR9yPP65qky2R PpgMozygRBcoJnlh1Ic6cURrcXUfhn+xDYtrtmHzD4W8Uk+bgFWNd7bSx+14/SJy I5WmqpLo1Cv79vY2OWDe/DQ1eCxS45lSMk0CtjqbZM0ljWjc00D+oFU+wbBOoska 1TJH9lXueZ7ckeuC35v/9tbuZBxQgwfcFk2IRTxQZkuMM2Y5O6pdVp8+y0uXGprC ECSsTd8F1LT0ymajsoUUJYM0ymZno0wyTbW0fsTsHjZKsjQxJcqVHo8KZ2SKY+t7 gP4nXgGgE2yMk5ZXeEudtUdMUAH3waUSCM61oDMgnvKVoB1bWMZWmW9sR/AsXF4= =y21q -END PGP SIGNATURE- RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] Sorting custom fields
On Mon, Nov 14, 2011 at 9:31 PM, Giuseppe Sollazzo gsoll...@sgul.ac.uk wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 14/11/11 17:24, Kenneth Crocker wrote: Giuseppe, Are you talking about hoe the VALUES appear or the way the Fields themselves appear on a ticket page? Hi Kenneth, the order of the fields themselves. I know you can give a sort order for the values within the interface, so I was expecting something similar to be available for Fields order. The only way to do it seems to be swapping them around. Any other possibility? Custom perl script that talks to API or direct SQL on ObjectCustomFields table. It's better to use fresh 3.8 or 4.0. Here is SQL to see the current state: SELECT cf.Name, q.Name, ocf.SortOrder FROM CustomFields cf JOIN ObjectCustomFields ocf ON ocf.CustomField = cf.id LEFT JOIN Queues q ON ocf.ObjectId = q.id WHERE cf.LookupType = 'RT::Queue-RT::Ticket' AND (q.Name IS NULL OR q.Name = 'Blocks') ORDER BY cf.LookupType ASC, ocf.SortOrder ASC; Thanks, Giuseppe Kenn LBNL On Thu, Nov 10, 2011 at 6:49 AM, Giuseppe Sollazzo gsoll...@sgul.ac.uk mailto:gsoll...@sgul.ac.uk wrote: Hi there, maybe this is stupid but is there a quick way of re-sorting custom fields? Thanks, Giuseppe - RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011 RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain ? November 28 29, 2011 - -- Giuseppe Sollazzo Senior Systems Analyst Computing Services Information Services St. George's, University Of London Cranmer Terrace London SW17 0RE Email: gsoll...@sgul.ac.uk Direct Dial: +44 20 8725 5160 Fax: +44 20 8725 3583 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJOwVCDAAoJEAqigArPBfJXAzsH/3fcawXwyosVR9yPP65qky2R PpgMozygRBcoJnlh1Ic6cURrcXUfhn+xDYtrtmHzD4W8Uk+bgFWNd7bSx+14/SJy I5WmqpLo1Cv79vY2OWDe/DQ1eCxS45lSMk0CtjqbZM0ljWjc00D+oFU+wbBOoska 1TJH9lXueZ7ckeuC35v/9tbuZBxQgwfcFk2IRTxQZkuMM2Y5O6pdVp8+y0uXGprC ECSsTd8F1LT0ymajsoUUJYM0ymZno0wyTbW0fsTsHjZKsjQxJcqVHo8KZ2SKY+t7 gP4nXgGgE2yMk5ZXeEudtUdMUAH3waUSCM61oDMgnvKVoB1bWMZWmW9sR/AsXF4= =y21q -END PGP SIGNATURE- RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain — November 28 29, 2011 -- Best regards, Ruslan. RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] RT4 woes with Scrips and email
This is exactly what we are seeing here. From: pleh.i...@gmail.com [mailto:pleh.i...@gmail.com] On Behalf Of Bart Sent: Monday, November 14, 2011 5:22 AM To: Izz Abdullah Cc: rt-users@lists.bestpractical.com Subject: Re: [rt-users] RT4 woes with Scrips and email Hi, I'm able to reproduce your error, which might be a but. 1. Go to a queue via de config menu, click scrips so that you have the page with all scrips that apply to that queue. 2. Click on a scrip that applies to all queue's (the first list of scrips), these are the global scrips. 3. You'll get an error. But, if you have a queue specific scrip (the second list at the bottom of the page) then you'll see the scrip since that scrip applies to that queue. Also, if you go to Global - Scrips and click one of the global scrips you'll be shown the actual scrip. The difference in the URL's is basically the word Queue should be Global, then it's just fine. Link to a global scrip from the queue scrips view: weburl/Admin/Queues/Scrip.html?id=9Queue=0 Link to a global scrip from the global scrips page: weburl/Admin/Global/Scrip.html?id=9Queue=0 Can you confirm that this is the error your noticing? -- Bart 2011/11/11 Izz Abdullah izz.abdul...@hibbett.commailto:izz.abdul...@hibbett.com So I flipped over the database from RT3.8 to RT4.0.2 today, and RT is not attempting to send out emails on our system. Fetchmail is working, pulling in emails, and Sendmail has been checked from the command line to work fine. Now, I mind you this is a database transferred from another server and upgraded. We see the following issue when going to Queues - General - Scrips and click on any scrip: 'Queue X not found' where X is the id number in: [weburl]/Admin/Queues/Scrip.html?id=XQueue=0 Now, no matter which queue we go to, it puts the queue number as 0, and the id number as the scrip number, yet it is failing, telling us the id number Queue is not found. I wish I could give a printscreen to explain this better, but basically I am sure something has gone awry with the scrips. Any ideas? Thanks, Izz RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain - November 28 29, 2011 RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
[rt-users] Transaction custom field not showing in Incident
Hi, I created a Ticket transactions custom field named Notification and applied to the Incidents queue of RTIR. However, it is not shown in the page when I try to Reply or Comment to ticket. I add Modify custom field and See custom fields privileges to everyone and it is still not shown. To test, I applied the field to the queue General and the field is shown correctly on the Reply page. I searched in the mailing list and somebody said RTIR queues are special. Is there anyway I can enable the transaction custom field in Incidents queue? Thanks, Qiao RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] Categories are based on... How to handle the same value for multiple parent categories
I wouldn't think that the searchbuilder would show the same string value though if you have the value occurring multiple times based on a parent field. In my example below the value softwarename1.1 will show up in the searchbuilder each time I have entered it for that field. What I was suggesting is that one way to handle this would be to make the searchbuilder page only add a string value if that string value doesn't exist in the values already. That seems like the simplest was to avoid the same value from showing up several times in the searchbuilder. Right now what happens is, you end up with 4 Password Reset Values in the example below. This also would create 4 Password Reset in the searchbuilder dropdown, which works because the search is based on the String value and not the ID of the record. * Active Directory * Password Reset * TimeSheet * Password Reset * TestDomain * Password Reset * Whatever * Password Reset Just a suggestion... but an excellent way to handle it may be to add functionality to the Categories are based on drop down so that you select the parent field first, and then select each value that the current value is visible for. This would let you have a more flexible relationship for building the hierarchy. Then you could select Field1 as the Parent for Field2, but also specify that Field2.Value1 would be an option when you select Field1.Value1, Field1.Value3, Field1.Value4, Field1.Value7 - etc. On Mon, Nov 14, 2011 at 10:53 AM, Kevin Falcone falc...@bestpractical.comwrote: On Fri, Nov 11, 2011 at 03:01:18PM -0500, Jim Lesinski wrote: Hi, In request tracker, how would you recommend setting up your dependent drop down lists that have a consistent drop down value for multiple parent values? Below, under the 1st level Administration value, I show an example of what I am asking about. If you use the 'Categories are based on' feature in later 3.8 and 4.0 you'll get much better search options than typing in the Category box. * Hardware * item1.1 * item1.2 * item1.3 * Software * item2.1 * item2.2 * item2.3 * Administration * password reset * softwarename1.1 * softwarename1.2 * softwarename1.3 * profile update * softwarename1.1 * softwarename1.2 * softwarename1.3 I was able to set up the outline above by using the built in categories are based on option for drop down lists and entering the value one time for each parent value. The only thing that I see as a possible issue with doing this is that the search builder then shows the drop down text value multiple times. Maybe just a bug or improvement that could be made in the searchbuilder (ie; only show DISTINCT dropdownlist value)? Or should I handle this a different way? Either way I would appreciate your insight. Thanks, Jim RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain ? November 28 29, 2011 RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain — November 28 29, 2011 RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
[rt-users] Allow requestor to be created even if not in ExternalAuth
Ok, we went production on RT4.0.2 on Friday, and there are certain requestors which are not in our LDAP / Active Directory. This works fine for the accounts I left in MySQL, but for new tickets with new requestors, it will not create the requestor if it can't be found in AD. Can anyone give me a quick fix for allowing a requestor not found in LDAP via ExternalAuth to be created? Thanks in advance, Izz RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] Allow requestor to be created even if not in ExternalAuth
Maybe I am an idiot. I have changed the Set($AutoCreateNonExternalUsers, 1); from 0 to 1. I am hoping that is the fix I was looking for. Thanks, Izz From: rt-users-boun...@lists.bestpractical.com [mailto:rt-users-boun...@lists.bestpractical.com] On Behalf Of Izz Abdullah Sent: Monday, November 14, 2011 1:45 PM To: rt-users@lists.bestpractical.com Subject: [rt-users] Allow requestor to be created even if not in ExternalAuth Ok, we went production on RT4.0.2 on Friday, and there are certain requestors which are not in our LDAP / Active Directory. This works fine for the accounts I left in MySQL, but for new tickets with new requestors, it will not create the requestor if it can't be found in AD. Can anyone give me a quick fix for allowing a requestor not found in LDAP via ExternalAuth to be created? Thanks in advance, Izz RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] Transaction custom field not showing in Incident
On Mon, Nov 14, 2011 at 01:55:42PM -0500, Xin, Qiao wrote: I created a Ticket transactions custom field named Notification and applied to the Incidents queue of RTIR. However, it is not shown in the page when I try to Reply or Comment to ticket. I add Modify custom field and See custom fields privileges to everyone and it is still not shown. To test, I applied the field to the queue General and the field is shown correctly on the Reply page. I searched in the mailing list and somebody said RTIR queues are special. Is there anyway I can enable the transaction custom field in Incidents queue? Unfortunately - the Reply page in RTIR predates Transaction Custom Fields and was never updated to include them. I thought there was a feature ticket open about this, but I can't find it. -kevin pgpljaYDMYENW.pgp Description: PGP signature RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] ExternalAuth
Date: Mon, 14 Nov 2011 10:36:19 -0500 From: Kevin Falcone falc...@bestpractical.com To: rt-users@lists.bestpractical.com Subject: Re: [rt-users] ExternalAuth Message-ID: 2014153619.gx1...@jibsheet.com Content-Type: text/plain; charset=us-ascii On Fri, Nov 11, 2011 at 01:14:14PM +, Witts J Mr wrote: We are using the ExternalAuth plugin with RT 4.0.2 at our school authenticating against two different LDAP branches. We also have some internal RT users defined too for users outside of our school who need to be able to log tickets in our queues. At the moment we are using the Everyone group to define the permissions on our internal queues, but this means that external users can see them too. What we would ideally like to be able to do is have all LDAP users put into a global group at the point of creation (i.e. when they first log in). Does anyone know if it would be possible to adjust the ExternalAuth plugin so that you could define a global group and have all users who authenticate from an external source automatically added to that group? This would really help our permissions set up, as it would allow us to create a global group for each LDAP source and assign the permissions to that group rather than using the Everyone group. This is not a feature of the plugin, although you could certainly add it and send a patch. Many people just make sure the LDAP users are Privileged and use that rather than Everyone. You could also use RT-Extension-LDAPImport and import groups and group memberships from LDAP. -kevin Hi Kevin, Thanks for responding. Are there any plugins which would provide a good starting point for me to look at the code to add users into a custom group? I am very new to Perl programming, but am not adverse to get in to the code if that is what is required! Thanks Jon Confidentiality: this e-mail and its attachments may be confidential and are intended solely for the use of the named recipient(s). If you are not the intended recipient you must take no action based on them, nor must you copy or show them to anyone. If you have received this e-mail in error, please advise the sender by return e-mail and delete all copies of this e-mail and any attachments from your computer. Security Warning: Please note that internet e-mail is not a completely secure or error free method of communication, and information could be intercepted, corrupted, lost, destroyed, or could arrive late or incomplete. You should understand and accept this lack of security when it communicating by email. Viruses: Whilst we have taken reasonable precautions to ensure that this e-mail and any attachment has been checked for viruses, we cannot guarantee that they are virus free and we cannot accept responsibility for any loss or damage you sustain as a result of software viruses. You are advised to carry out your own checks before any attachments are opened. Please note that any views or opinions expressed in this e-mail are solely those of the author and do not necessarily represent those of South Hunsley School and Sixth Form College and the content of their e-mail is not intended to be contractually binding. South Hunsley School and Sixth Form College is registered in England and Wales with company registration number 07542211 and VAT Registration Number 109 7208 18. RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
[rt-users] LDAP authentication problem
Hi, I know there are tons of questions on the list about getting LDAP authentication to work. And I have done it before at other employers, so I'm even more frustrated... Here's what I've got: RT 4.0.2 on CentOS 5.7 RT-Authen-ExternalAuth-0.09.tar.gz Active Directory on Server 2008 R2 I set up the /opt/rt4/local/plugins/RT-Authen-ExternalAuth/etc/RT_SiteConfig.pm file with the LDAP parameters that I thought would work. Also, I can do a successful ldapsearch from the command line against the AD server with the same credentials. Here's an ldapsearch run from the CLI on my RT server. This returns a successful result from the domain controller. [root@host ~]# ldapsearch -h dc-01.mydomain.com -x -b dc=mydomain,dc=com -D cn=mike james,cn=users,dc=mydomain,dc=com -w 'mypasswd' mail=anyu...@mydomain.commailto:mail=anyu...@mydomain.com Here's the LDAP portion of my config file. I got the d_filter from a google search. It was mentioned in a couple of places as being the correct string for disabled users. # AN EXAMPLE LDAP SERVICE 'My_LDAP' = { ## GENERIC SECTION 'type' = 'ldap', 'server' = 'dc-01.mydomain.com', 'user' = 'cn=mike james,cn=users,dc=mydomain,dc=com', 'pass' = 'mypasswd', 'base' = 'dc=mydomain,dc=com', 'filter' = '(objectClass=*)', 'd_filter' = '(userAccountControl:1.2.840.113556.1.4.803:=2))', 'tls' = 0, 'ssl_version' = 3, 'net_ldap_args' = [version = 3 ], 'attr_match_list' = ['Name', 'EmailAddress' ], # The mapping of RT attributes on to LDAP attributes 'attr_map' = { 'Name' = 'sAMAccountName', 'EmailAddress' = 'mail', 'RealName' = 'cn' } All requests for new tickets are being rejected, and it's making me crazy. Any ideas? Nov 14 15:07:46 x-tracker-01 RT: Use of uninitialized value in join or string at /usr/lib/perl5/site_perl/5.8.8/Log/Dispatch.pm line 23. (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:458) Nov 14 15:07:46 x-tracker-01 RT: RT::Authen::ExternalAuth::CanonicalizeUserInfo returning Comments: Autocreated on ticket submission, Disabled: 0, EmailAddress: mja...@mydomain.com, Name: mja...@mydomain.com, Password: , Privileged: 0, RealName: (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:536) Nov 14 15:07:46 x-tracker-01 RT: User creation failed in mailgateway: Could not set user info (/opt/rt4/sbin/../lib/RT/Interface/Email.pm:244) Nov 14 15:07:46 x-tracker-01 RT: Couldn't load user 'mja...@mydomain.com'.giving up (/opt/rt4/sbin/../lib/RT/Interface/Email.pm:1016) Nov 14 15:07:46 x-tracker-01 RT: User 'mja...@mydomain.com' could not be loaded in the mail gateway (/opt/rt4/sbin/../lib/RT/Interface/Email.pm:244) Nov 14 15:07:46 x-tracker-01 RT: RT could not load a valid user, and RT's configuration does not allow for the creation of a new user for this email (mja...@mydomain.com). You might need to grant 'Everyone' the right 'CreateTicket' for the queue general. (/opt/rt4/sbin/../lib/RT/Interface/Email.pm:244) Nov 14 15:07:46 x-tracker-01 RT: RT could not load a valid user, and RT's configuration does not allow for the creation of a new user for your email. (/opt/rt4/sbin/../lib/RT/Interface/Email.pm:244) Nov 14 15:07:46 x-tracker-01 RT: Could not record email: Could not load a valid user (/opt/rt4/share/html/REST/1.0/NoAuth/mail-gateway:75) Thanks, Mike RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] ExternalAuth
On Mon, Nov 14, 2011 at 08:55:24PM +, Witts J Mr wrote: Date: Mon, 14 Nov 2011 10:36:19 -0500 From: Kevin Falcone falc...@bestpractical.com To: rt-users@lists.bestpractical.com Subject: Re: [rt-users] ExternalAuth Message-ID: 2014153619.gx1...@jibsheet.com Content-Type: text/plain; charset=us-ascii On Fri, Nov 11, 2011 at 01:14:14PM +, Witts J Mr wrote: We are using the ExternalAuth plugin with RT 4.0.2 at our school authenticating against two different LDAP branches. We also have some internal RT users defined too for users outside of our school who need to be able to log tickets in our queues. At the moment we are using the Everyone group to define the permissions on our internal queues, but this means that external users can see them too. What we would ideally like to be able to do is have all LDAP users put into a global group at the point of creation (i.e. when they first log in). Does anyone know if it would be possible to adjust the ExternalAuth plugin so that you could define a global group and have all users who authenticate from an external source automatically added to that group? This would really help our permissions set up, as it would allow us to create a global group for each LDAP source and assign the permissions to that group rather than using the Everyone group. This is not a feature of the plugin, although you could certainly add it and send a patch. Many people just make sure the LDAP users are Privileged and use that rather than Everyone. You could also use RT-Extension-LDAPImport and import groups and group memberships from LDAP. -kevin Thanks for responding. Are there any plugins which would provide a good starting point for me to look at the code to add users into a custom group? I am very new to Perl programming, but am not adverse to get in to the code if that is what is required! RT-Extension-LDAPImport adds users to groups, so it'd be a place to look. -kevin pgpZfLvWHHmf5.pgp Description: PGP signature RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] Categories are based on... How to handle the same value for multiple parent categories
I had some time after work to code up a possible solution for the searchbuilder. I am new to perl so feel free to correct me. Below is a snippet of code from /html/Elements/SelectCustomFieldValue, starting at line 48. I have added my name after the lines I added to make the search builder drop down show only unique string values. It would be super cool if this made it into the base code. % $m-callback( Name = $Name, CustomField = $CustomField ); % if ($CustomField-Type =~ /Select/i) { % my $values = $CustomField-Values; % my %seen = ();# Jim Lesinski select name=%$Name% option value= selected=selected-/option option value=NULL|/l(no value)//option % while (my $value = $values-Next) { %unless ($seen{$value-Name}){# Jim Lesinski option value=%$value-Name%%$value-Name%/option % $seen{$value-Name} = 1;# Jim Lesinski %}# Jim Lesinski % } /select % } % else { input name=%$Name% size=20 / % } On Mon, Nov 14, 2011 at 2:09 PM, Jim Lesinski jim.lesin...@gmail.comwrote: I wouldn't think that the searchbuilder would show the same string value though if you have the value occurring multiple times based on a parent field. In my example below the value softwarename1.1 will show up in the searchbuilder each time I have entered it for that field. What I was suggesting is that one way to handle this would be to make the searchbuilder page only add a string value if that string value doesn't exist in the values already. That seems like the simplest was to avoid the same value from showing up several times in the searchbuilder. Right now what happens is, you end up with 4 Password Reset Values in the example below. This also would create 4 Password Reset in the searchbuilder dropdown, which works because the search is based on the String value and not the ID of the record. * Active Directory * Password Reset * TimeSheet * Password Reset * TestDomain * Password Reset * Whatever * Password Reset Just a suggestion... but an excellent way to handle it may be to add functionality to the Categories are based on drop down so that you select the parent field first, and then select each value that the current value is visible for. This would let you have a more flexible relationship for building the hierarchy. Then you could select Field1 as the Parent for Field2, but also specify that Field2.Value1 would be an option when you select Field1.Value1, Field1.Value3, Field1.Value4, Field1.Value7 - etc. On Mon, Nov 14, 2011 at 10:53 AM, Kevin Falcone falc...@bestpractical.com wrote: On Fri, Nov 11, 2011 at 03:01:18PM -0500, Jim Lesinski wrote: Hi, In request tracker, how would you recommend setting up your dependent drop down lists that have a consistent drop down value for multiple parent values? Below, under the 1st level Administration value, I show an example of what I am asking about. If you use the 'Categories are based on' feature in later 3.8 and 4.0 you'll get much better search options than typing in the Category box. * Hardware * item1.1 * item1.2 * item1.3 * Software * item2.1 * item2.2 * item2.3 * Administration * password reset * softwarename1.1 * softwarename1.2 * softwarename1.3 * profile update * softwarename1.1 * softwarename1.2 * softwarename1.3 I was able to set up the outline above by using the built in categories are based on option for drop down lists and entering the value one time for each parent value. The only thing that I see as a possible issue with doing this is that the search builder then shows the drop down text value multiple times. Maybe just a bug or improvement that could be made in the searchbuilder (ie; only show DISTINCT dropdownlist value)? Or should I handle this a different way? Either way I would appreciate your insight. Thanks, Jim RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain ? November 28 29, 2011 RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain — November 28 29, 2011 RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011
Re: [rt-users] Categories are based on... How to handle the same value for multiple parent categories
I don't know anything about your patch, but with Perl, it is more common to write something like... next if $seen{ $value-Name }++; From: Jim Lesinski [mailto:jim.lesin...@gmail.com] Sent: Monday, November 14, 2011 07:06 PM To: rt-users@lists.bestpractical.com rt-users@lists.bestpractical.com Subject: Re: [rt-users] Categories are based on... How to handle the same value for multiple parent categories I had some time after work to code up a possible solution for the searchbuilder. I am new to perl so feel free to correct me. Below is a snippet of code from /html/Elements/SelectCustomFieldValue, starting at line 48. I have added my name after the lines I added to make the search builder drop down show only unique string values. It would be super cool if this made it into the base code. % $m-callback( Name = $Name, CustomField = $CustomField ); % if ($CustomField-Type =~ /Select/i) { % my $values = $CustomField-Values; % my %seen = ();# Jim Lesinski select name=%$Name% option value= selected=selected-/option option value=NULL|/l(no value)//option % while (my $value = $values-Next) { %unless ($seen{$value-Name}){# Jim Lesinski option value=%$value-Name%%$value-Name%/option % $seen{$value-Name} = 1;# Jim Lesinski %}# Jim Lesinski % } /select % } % else { input name=%$Name% size=20 / % } On Mon, Nov 14, 2011 at 2:09 PM, Jim Lesinski jim.lesin...@gmail.commailto:jim.lesin...@gmail.com wrote: I wouldn't think that the searchbuilder would show the same string value though if you have the value occurring multiple times based on a parent field. In my example below the value softwarename1.1 will show up in the searchbuilder each time I have entered it for that field. What I was suggesting is that one way to handle this would be to make the searchbuilder page only add a string value if that string value doesn't exist in the values already. That seems like the simplest was to avoid the same value from showing up several times in the searchbuilder. Right now what happens is, you end up with 4 Password Reset Values in the example below. This also would create 4 Password Reset in the searchbuilder dropdown, which works because the search is based on the String value and not the ID of the record. * Active Directory * Password Reset * TimeSheet * Password Reset * TestDomain * Password Reset * Whatever * Password Reset Just a suggestion... but an excellent way to handle it may be to add functionality to the Categories are based on drop down so that you select the parent field first, and then select each value that the current value is visible for. This would let you have a more flexible relationship for building the hierarchy. Then you could select Field1 as the Parent for Field2, but also specify that Field2.Value1 would be an option when you select Field1.Value1, Field1.Value3, Field1.Value4, Field1.Value7 - etc. On Mon, Nov 14, 2011 at 10:53 AM, Kevin Falcone falc...@bestpractical.commailto:falc...@bestpractical.com wrote: On Fri, Nov 11, 2011 at 03:01:18PM -0500, Jim Lesinski wrote: Hi, In request tracker, how would you recommend setting up your dependent drop down lists that have a consistent drop down value for multiple parent values? Below, under the 1st level Administration value, I show an example of what I am asking about. If you use the 'Categories are based on' feature in later 3.8 and 4.0 you'll get much better search options than typing in the Category box. * Hardware * item1.1 * item1.2 * item1.3 * Software * item2.1 * item2.2 * item2.3 * Administration * password reset * softwarename1.1 * softwarename1.2 * softwarename1.3 * profile update * softwarename1.1 * softwarename1.2 * softwarename1.3 I was able to set up the outline above by using the built in categories are based on option for drop down lists and entering the value one time for each parent value. The only thing that I see as a possible issue with doing this is that the search builder then shows the drop down text value multiple times. Maybe just a bug or improvement that could be made in the searchbuilder (ie; only show DISTINCT dropdownlist value)? Or should I handle this a different way? Either way I would appreciate your insight. Thanks, Jim Josh Narins Director of Application Development SeniorBridge 845 Third Ave 7th Floor New York, NY 10022 Tel: (212) 994-6194 Fax: (212) 994-4260 Mobile: (917) 488-6248 jnar...@seniorbridge.com seniorbridge.comhttp://www.seniorbridge.com/ [http://www.seniorbridge.com/images/seniorbridgedisclaimerTAG.gif] SeniorBridge Statement of Confidentiality: The contents of this email message are
Re: [rt-users] Categories are based on... How to handle the same value for multiple parent categories
Right, but I think then I'd have to build an array of names and then iterate through that second array to output the option values. I am not sure which would be more efficient but there is probably a better way to do it. Either way the result of the code would be ideally added to the base code, but not necessarily my personal code :) Thanks, Jim Lesinski On Nov 14, 2011, at 7:10 PM, Josh Narins jnar...@seniorbridge.com wrote: I don't know anything about your patch, but with Perl, it is more common to write something like... next if $seen{ $value-Name }++; From: Jim Lesinski [mailto:jim.lesin...@gmail.com] Sent: Monday, November 14, 2011 07:06 PM To: rt-users@lists.bestpractical.com rt-users@lists.bestpractical.com Subject: Re: [rt-users] Categories are based on... How to handle the same value for multiple parent categories I had some time after work to code up a possible solution for the searchbuilder. I am new to perl so feel free to correct me. Below is a snippet of code from /html/Elements/SelectCustomFieldValue, starting at line 48. I have added my name after the lines I added to make the search builder drop down show only unique string values. It would be super cool if this made it into the base code. % $m-callback( Name = $Name, CustomField = $CustomField ); % if ($CustomField-Type =~ /Select/i) { % my $values = $CustomField-Values; % my %seen = ();# Jim Lesinski select name=%$Name% option value= selected=selected-/option option value=NULL|/l(no value)//option % while (my $value = $values-Next) { %unless ($seen{$value-Name}){# Jim Lesinski option value=%$value-Name%%$value-Name%/option % $seen{$value-Name} = 1;# Jim Lesinski %}# Jim Lesinski % } /select % } % else { input name=%$Name% size=20 / % } On Mon, Nov 14, 2011 at 2:09 PM, Jim Lesinski jim.lesin...@gmail.com wrote: I wouldn't think that the searchbuilder would show the same string value though if you have the value occurring multiple times based on a parent field. In my example below the value softwarename1.1 will show up in the searchbuilder each time I have entered it for that field. What I was suggesting is that one way to handle this would be to make the searchbuilder page only add a string value if that string value doesn't exist in the values already. That seems like the simplest was to avoid the same value from showing up several times in the searchbuilder. Right now what happens is, you end up with 4 Password Reset Values in the example below. This also would create 4 Password Reset in the searchbuilder dropdown, which works because the search is based on the String value and not the ID of the record. * Active Directory * Password Reset * TimeSheet * Password Reset * TestDomain * Password Reset * Whatever * Password Reset Just a suggestion... but an excellent way to handle it may be to add functionality to the Categories are based on drop down so that you select the parent field first, and then select each value that the current value is visible for. This would let you have a more flexible relationship for building the hierarchy. Then you could select Field1 as the Parent for Field2, but also specify that Field2.Value1 would be an option when you select Field1.Value1, Field1.Value3, Field1.Value4, Field1.Value7 - etc. On Mon, Nov 14, 2011 at 10:53 AM, Kevin Falcone falc...@bestpractical.com wrote: On Fri, Nov 11, 2011 at 03:01:18PM -0500, Jim Lesinski wrote: Hi, In request tracker, how would you recommend setting up your dependent drop down lists that have a consistent drop down value for multiple parent values? Below, under the 1st level Administration value, I show an example of what I am asking about. If you use the 'Categories are based on' feature in later 3.8 and 4.0 you'll get much better search options than typing in the Category box. * Hardware * item1.1 * item1.2 * item1.3 * Software * item2.1 * item2.2 * item2.3 * Administration * password reset * softwarename1.1 * softwarename1.2 * softwarename1.3 * profile update * softwarename1.1 * softwarename1.2 * softwarename1.3 I was able to set up the outline above by using the built in categories are based on option for drop down lists and entering the value one time for each parent value. The only thing that I see as a possible issue with doing this is that the search builder then shows the drop down text value multiple times. Maybe just a bug or improvement that could be made in the searchbuilder (ie; only show DISTINCT dropdownlist value)? Or should I handle this a
Re: [rt-users] Categories are based on... How to handle the same value for multiple parent categories
The array of names is get-at-able with keys %seen From: Jim Lesinski [mailto:jim.lesin...@gmail.com] Sent: Monday, November 14, 2011 08:19 PM To: Josh Narins Cc: rt-users@lists.bestpractical.com rt-users@lists.bestpractical.com Subject: Re: [rt-users] Categories are based on... How to handle the same value for multiple parent categories Right, but I think then I'd have to build an array of names and then iterate through that second array to output the option values. I am not sure which would be more efficient but there is probably a better way to do it. Either way the result of the code would be ideally added to the base code, but not necessarily my personal code :) Thanks, Jim Lesinski On Nov 14, 2011, at 7:10 PM, Josh Narins jnar...@seniorbridge.commailto:jnar...@seniorbridge.com wrote: I don't know anything about your patch, but with Perl, it is more common to write something like... next if $seen{ $value-Name }++; From: Jim Lesinski [mailto:jim.lesin...@gmail.com] Sent: Monday, November 14, 2011 07:06 PM To: rt-users@lists.bestpractical.commailto:rt-users@lists.bestpractical.com rt-users@lists.bestpractical.commailto:rt-users@lists.bestpractical.com Subject: Re: [rt-users] Categories are based on... How to handle the same value for multiple parent categories I had some time after work to code up a possible solution for the searchbuilder. I am new to perl so feel free to correct me. Below is a snippet of code from /html/Elements/SelectCustomFieldValue, starting at line 48. I have added my name after the lines I added to make the search builder drop down show only unique string values. It would be super cool if this made it into the base code. % $m-callback( Name = $Name, CustomField = $CustomField ); % if ($CustomField-Type =~ /Select/i) { % my $values = $CustomField-Values; % my %seen = ();# Jim Lesinski select name=%$Name% option value= selected=selected-/option option value=NULL|/l(no value)//option % while (my $value = $values-Next) { %unless ($seen{$value-Name}){# Jim Lesinski option value=%$value-Name%%$value-Name%/option % $seen{$value-Name} = 1;# Jim Lesinski %}# Jim Lesinski % } /select % } % else { input name=%$Name% size=20 / % } On Mon, Nov 14, 2011 at 2:09 PM, Jim Lesinski jim.lesin...@gmail.commailto:jim.lesin...@gmail.com wrote: I wouldn't think that the searchbuilder would show the same string value though if you have the value occurring multiple times based on a parent field. In my example below the value softwarename1.1 will show up in the searchbuilder each time I have entered it for that field. What I was suggesting is that one way to handle this would be to make the searchbuilder page only add a string value if that string value doesn't exist in the values already. That seems like the simplest was to avoid the same value from showing up several times in the searchbuilder. Right now what happens is, you end up with 4 Password Reset Values in the example below. This also would create 4 Password Reset in the searchbuilder dropdown, which works because the search is based on the String value and not the ID of the record. * Active Directory * Password Reset * TimeSheet * Password Reset * TestDomain * Password Reset * Whatever * Password Reset Just a suggestion... but an excellent way to handle it may be to add functionality to the Categories are based on drop down so that you select the parent field first, and then select each value that the current value is visible for. This would let you have a more flexible relationship for building the hierarchy. Then you could select Field1 as the Parent for Field2, but also specify that Field2.Value1 would be an option when you select Field1.Value1, Field1.Value3, Field1.Value4, Field1.Value7 - etc. On Mon, Nov 14, 2011 at 10:53 AM, Kevin Falcone falc...@bestpractical.commailto:falc...@bestpractical.com wrote: On Fri, Nov 11, 2011 at 03:01:18PM -0500, Jim Lesinski wrote: Hi, In request tracker, how would you recommend setting up your dependent drop down lists that have a consistent drop down value for multiple parent values? Below, under the 1st level Administration value, I show an example of what I am asking about. If you use the 'Categories are based on' feature in later 3.8 and 4.0 you'll get much better search options than typing in the Category box. * Hardware * item1.1 * item1.2 * item1.3 * Software * item2.1 * item2.2 * item2.3 * Administration * password reset * softwarename1.1 * softwarename1.2 * softwarename1.3 * profile update * softwarename1.1 * softwarename1.2 * softwarename1.3 I was able to set up the outline above by using the built in categories are based on option for drop
[rt-users] ExternalAuth error messages in 4.0.4
Hi list! Environment is following: debian 6.0 x86_64 RT 4.0.4 Postgres 8.4 OpenLDAP 2.4.11.1 ExternalAuth 0.09 I'm trying to install a ExternalAuth module in the test environment to prepare for the live system upgrade. Test environment is a snapshot of the live system that i have upgraded from 3.8.10 to 4.0.4(no problems there). Module installs and authentication works. Users are able to login, but there are following errors in the log: Nov 15 09:05:04 rttest RT: RT::Authen::ExternalAuth::LDAP::GetAuth External Auth OK ( My_LDAP ): user.name(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:139) Nov 15 09:05:04 rttest RT: Couldn't enable user 37 (/opt/rt4/sbin/../lib/RT/User.pm:1066) Nov 15 09:05:04 rttest RT: Use of uninitialized value $val in concatenation (.) or string at /opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm line 274. (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:274) Nov 15 09:05:04 rttest RT: Use of uninitialized value $message in concatenation (.) or string at /opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm line 274. (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:274) Nov 15 09:05:04 rttest RT: User marked as ENABLED ( user.name ) per External Service (, ) (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:274) Nov 15 09:05:04 rttest RT: Use of uninitialized value in string eq at /opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm line 236. (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:236) Nov 15 09:05:04 rttest RT: Use of uninitialized value in string eq at /opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm line 236. (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:236) Nov 15 09:05:04 rttest RT: Use of uninitialized value in string eq at /opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm line 236. (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:236) Nov 15 09:05:04 rttest RT: Use of uninitialized value in string eq at /opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm line 236. (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:236) Nov 15 09:05:04 rttest RT: Use of uninitialized value in string eq at /opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm line 236. (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:236) Nov 15 09:05:04 rttest RT: RT::Authen::ExternalAuth::CanonicalizeUserInfo returning EmailAddress: user.n...@domain.com, ExternalAuthId: user.name, Gecos: User Name, Name: user.name, RealName: User (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:536) Nov 15 09:05:04 rttest RT: Successful login for user.name from 192.168.178.13 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:219) We have same ExternalAuth version running in live environment with RT 3.8.10 and there we see only this: Nov 15 09:27:16 rt RT: RT::Authen::ExternalAuth::LDAP::GetAuth External Auth OK ( My_LDAP ): user.name(/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:139) Nov 15 09:27:17 rt RT: Couldn't enable user 37 (/opt/rt3/bin/../lib/RT/User_Overlay.pm:1226) Nov 15 09:27:17 rt RT: User marked as ENABLED ( user.name ) per External Service (, ) (/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:274) Nov 15 09:27:17 rt RT: Successful login for user.name from 192.168.178.13 (/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:219) The messages seem harmless, but i would rather have no error messages in the log. I have two theorys why i see these messages: * there are some perl modules missing in the 4.0.4(which?) * Our username form (firstname.lastname) is causing these errors I would be grateful if anyone could shed some light on this matter. Thanks, Joosep M RT Training Sessions (http://bestpractical.com/services/training.html) * Barcelona, Spain November 28 29, 2011