[rt-users] shredder on specific user

2013-05-16 Thread Philip Brown
After doing a few searches, it seems that using the rt-shredder tool 
is the one true way to delete a user.


Unfortunately... i find the documentation on it, inscruitable :(

Could someone please give me a simple, straightforward commandline to 
delete user X?


I was hoping it would be as simple as


rt-shredder --plugin User name=doomeduser


but that does not seem to be adequate.





--
RT Training in Seattle, June 19-20: http://bestpractical.com/training


[rt-users] auto-populate email from short username?

2013-05-15 Thread Philip Brown

Well, lets try a simpler, hopefully easier to tackle subject line :)

lets say I have autocreate turned on. And accounts get created just fine 
when someone authenticates via web.  ... however, the autocreated 
account name will be just the username. no @my.com


What's the best way to get the email field set, with @my.com added, when 
the account is autocreated?





--
RT Training in Seattle, June 19-20: http://bestpractical.com/training


Re: [rt-users] auto-populate email from short username?

2013-05-15 Thread Philip Brown

On 5/15/13 3:27 PM, Jok Thuau wrote:

It would be an interesting scrip, but I believe you would be able to
update the user from a on create scrip, and update that one user's email
from ldap.


other than I want this to be from account name, not from ldap, this 
sounds fine.:]


but... isnt an on create script, related to *ticket creation*, not 
user creation?




--
RT Training in Seattle, June 19-20: http://bestpractical.com/training


Re: [rt-users] REMOTE_USER, external auth, and email mismatching

2013-05-14 Thread Philip Brown

On 04/26/13 04:38 PM, Thomas Sibley wrote:

On 04/26/2013 02:35 PM, Philip Brown wrote:

hi there,
We are looking at using kerb auth and mod_auth_kerb as our external auth 
mechanism for RT.

... I was hoping there was potentially a way to do any of the following:

a) automatically drop the @xyz from REMOTE_USER entirely
b) autoconvert the @xyz to @real.domain

c) (least preferable) have the autocreate routines, atomatically fill in 
@real.domain as the email address

You can accomplish (b) with these options:
http://bestpractical.com/rt/docs/latest/RT_Config.html#CanonicalizeEmailAddressMatch-CanonicalizeEmailAddressReplace

You can also do more sophisticated munging by writing your own
RT::User::CanonicalizeUserInfo:
http://bestpractical.com/rt/docs/latest/RT/User.html#CanonicalizeUserInfo-HASH-of-ARGS

Or you can take the easy way of (a) by setting the mod_auth_kerb config
option that Jok pointed out earlier.




Well, I'm back, now that I've had more time to follow up :)

I have tried out using the KrbLocalUser tweak, and run into problems.
The email field does not get filled out on autocreate of an account.

I then attempted to do the fallback suggested via

CanonicalizeEmailAddressMatch

after removing the KrbLocalUser from my apache configs.
however, the replace did not seem to have any effect. I'm still getting 
logged in as

u...@kerb.my.com
rather than u...@my.com

for the record, I'm using a match string of
'\@.*\.my.com$'

and replace of
'\@my.com'

it's kinda odd that I cant seem to google any sample RT_Config.pm files 
for this'






--
RT Training in Seattle, June 19-20: http://bestpractical.com/training


Re: [rt-users] REMOTE_USER, external auth, and email mismatching

2013-05-14 Thread Philip Brown
Err.. thanks, but that's not what I'm looking for.
For one thing, even if I got permission to do that (which I wont), we have 
40,000 users in ldap.
I dont actually WANT all of them in the rt database.
particularly since we have a 15,000 user/year churn rate.



From: Jok Thuau [jth...@spacex.com]
Sent: Tuesday, May 14, 2013 05:36 PM
To: Philip Brown; rt-users@lists.bestpractical.com
Subject: Re: [rt-users] REMOTE_USER, external auth, and email mismatching

I have use the LDAPImport extension to pull all my users out of AD into
RT. I even submitted a patch on the cpan bug tracker to add a feature to
automatically grant rights to some groups based on LDAP queries.

(and you'll probably need to merge the users that you have now into
their imported equivalent)

Thanks,
Jok


--
| Joachim Thuau | IT Systems Engineer - Linux / SpaceX |





On 5/14/13 1:41 PM, Philip Brown p...@usc.edu wrote:

On 04/26/13 04:38 PM, Thomas Sibley wrote:
 On 04/26/2013 02:35 PM, Philip Brown wrote:
 hi there,
 We are looking at using kerb auth and mod_auth_kerb as our external
auth mechanism for RT.

 ... I was hoping there was potentially a way to do any of the
following:

 a) automatically drop the @xyz from REMOTE_USER entirely
 b) autoconvert the @xyz to @real.domain

 c) (least preferable) have the autocreate routines, atomatically fill
in @real.domain as the email address
 You can accomplish (b) with these options:

http://bestpractical.com/rt/docs/latest/RT_Config.html#CanonicalizeEmailA
ddressMatch-CanonicalizeEmailAddressReplace

 You can also do more sophisticated munging by writing your own
 RT::User::CanonicalizeUserInfo:

http://bestpractical.com/rt/docs/latest/RT/User.html#CanonicalizeUserInfo
-HASH-of-ARGS

 Or you can take the easy way of (a) by setting the mod_auth_kerb config
 option that Jok pointed out earlier.



Well, I'm back, now that I've had more time to follow up :)

I have tried out using the KrbLocalUser tweak, and run into problems.
The email field does not get filled out on autocreate of an account.

I then attempted to do the fallback suggested via

CanonicalizeEmailAddressMatch

after removing the KrbLocalUser from my apache configs.
however, the replace did not seem to have any effect. I'm still getting
logged in as
u...@kerb.my.com
rather than u...@my.com

for the record, I'm using a match string of
'\@.*\.my.com$'

and replace of
'\@my.com'

it's kinda odd that I cant seem to google any sample RT_Config.pm files
for this'





--
RT Training in Seattle, June 19-20: http://bestpractical.com/training





-- 
RT Training in Seattle, June 19-20: http://bestpractical.com/training


[rt-users] REMOTE_USER, external auth, and email mismatching

2013-04-26 Thread Philip Brown
hi there,
We are looking at using kerb auth and mod_auth_kerb as our external auth 
mechanism for RT.

Trouble is.. our kerb domain is not the same as people's email address domain.

We have mumble-thousand users. Hand-populating things is not an option.

So, I was hoping there was potentially a way to do any of the following:

a) automatically drop the @xyz from REMOTE_USER entirely
b) autoconvert the @xyz to @real.domain 

c) (least preferable) have the autocreate routines, atomatically fill in 
@real.domain as the email address



Re: [rt-users] REMOTE_USER, external auth, and email mismatching

2013-04-26 Thread Philip Brown
(arg, outlook.com...)




From: rt-users-boun...@lists.bestpractical.com 
[rt-users-boun...@lists.bestpractical.com] on behalf of Thomas Sibley 
[t...@bestpractical.com]
Sent: Friday, April 26, 2013 04:38 PM
To: rt-users@lists.bestpractical.com
Subject: Re: [rt-users] REMOTE_USER, external auth, and email mismatching

On 04/26/2013 02:35 PM, Philip Brown wrote:


 So, I was hoping there was potentially a way to do any of the following:

 a) automatically drop the @xyz from REMOTE_USER entirely
 b) autoconvert the @xyz to @real.domain

You can accomplish (b) with these options:
http://bestpractical.com/rt/docs/latest/RT_Config.html#CanonicalizeEmailAddressMatch-CanonicalizeEmailAddressReplace


Thanks for the tip.
I followed the link, but it didnt explicitly give an answer to the following 
question.
For posterity and the list archive's sake:  does it also work for extern auth?
In other words, when it auto-creates an account, will it rewrite the *account 
name*?  Or will it just get triggered on actual email that comes in?