Re: [rt-users] Problem with login when we using https://
Hi Kevin, link after log in: https://rt.ige.psnc.pl/rt/ link after log off depends on where I click: https://rt.ige.psnc.pl/rt/Search/Build.html https://rt.ige.psnc.pl/rt/Prefs/Other.html this is log: [Thu Jul 21 08:06:28 2011] [info]: Successful login for adisan from 150.254.149.220 (/usr/share/request-tracker3.8/lib/RT/Interface/Web.pm:430) [Thu Jul 21 08:06:29 2011] [error]: gpg: error reading key: public key not found (/usr/share/request-tracker3.8/lib/RT/Crypt/GnuPG.pm:2115) [Thu Jul 21 08:06:29 2011] [error]: gpg: error reading key: public key not found (/usr/share/request-tracker3.8/lib/RT/Crypt/GnuPG.pm:2115) [Thu Jul 21 08:07:12 2011] [info]: Successful login for adisan from 150.254.149.220 (/usr/share/request-tracker3.8/lib/RT/Interface/Web.pm:430) [Thu Jul 21 08:07:13 2011] [warning]: Resolver RT::URI::fsck_com_rt could not parse fsck.com-rt://IGE /ticket/99 (/usr/share/request-tracker3.8/lib/RT/URI.pm:147) [Thu Jul 21 08:07:13 2011] [warning]: Resolver RT::URI::fsck_com_rt could not parse fsck.com-rt://IGE /ticket/100 (/usr/share/request-tracker3.8/lib/RT/URI.pm:147) [Thu Jul 21 08:07:13 2011] [warning]: Resolver RT::URI::fsck_com_rt could not parse fsck.com-rt://IGE /ticket/99 (/usr/share/request-tracker3.8/lib/RT/URI.pm:147) [Thu Jul 21 08:07:13 2011] [warning]: Resolver RT::URI::fsck_com_rt could not parse fsck.com-rt://IGE /ticket/100 (/usr/share/request-tracker3.8/lib/RT/URI.pm:147) [Thu Jul 21 08:07:13 2011] [warning]: Resolver RT::URI::fsck_com_rt could not parse fsck.com-rt://IGE /ticket/99 (/usr/share/request-tracker3.8/lib/RT/URI.pm:147) Adrian 2011/7/20 Kevin Falcone falc...@bestpractical.com: On Wed, Jul 20, 2011 at 01:35:22PM +0200, Adrian Stel wrote: we have strange problem, we are using certificates for authentication to RT. User name in RT should be the same as your CN. The problem is if we have different user name and using https://, in normal case we should be able to use user/pass. And we are, but until we click on any link. After that we will be automatically logged off. Please provide the link before and after the click that logs you off. You also should provide your configuration and relevant logs. -kevin 2011 Training: http://bestpractical.com/services/training.html -- Pozdrawiam Adrian Stelmaszyk 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] Problem with login when we using https://
Hi, I forgot added configuration info: RT_SiteConfig.pm # tells RT to use the REMOTE_USER provided by the web server Set($WebExternalAuth , 1); # tells RT to display its normal login screen if REMOTE_USER fails Set($WebFallbackToInternalAuth , 1); # tells RT to create users automatically if no user matching REMOTE_USER is found Set($WebExternalAuto , 0); Set($WebExternalAuthContinuous, 1); httpd.conf VirtualHost *:443 SSLEngine On SSLVerifyClient require SSLVerifyDepth 1 #- # SSL_CLIENT_S_DN_CN = user name from cert SSLUserName SSL_CLIENT_S_DN_CN #- #--- # SSLCACertificatePath /usr/lib/ssl/certs/ SSLCADNRequestPath /usr/lib/ssl/certs/ #--- # # server cert SSLCertificateFile /etc/apache2/ssl/10563550.pem SSLCertificateKeyFile /etc/apache2/ssl/myserver.key # #- # CA cert SSLCertificateChainFile /etc/apache2/ssl/ca.crt SSLCACertificateFile /etc/apache2/ssl/ca.crt #- ServerAdmin i...@mydomain.com ServerName rt.ige.psnc.pl:443 DocumentRoot /var/www/ ErrorLog /var/log/apache2/error.log CustomLog /var/log/apache2/access.log combined Include /etc/request-tracker3.8/apache2-modperl2.conf RedirectMatch ^/$ /rt/ /VirtualHost 2011/7/21 Adrian Stel adisa...@gmail.com: Hi Kevin, link after log in: https://rt.ige.psnc.pl/rt/ link after log off depends on where I click: https://rt.ige.psnc.pl/rt/Search/Build.html https://rt.ige.psnc.pl/rt/Prefs/Other.html this is log: [Thu Jul 21 08:06:28 2011] [info]: Successful login for adisan from 150.254.149.220 (/usr/share/request-tracker3.8/lib/RT/Interface/Web.pm:430) [Thu Jul 21 08:06:29 2011] [error]: gpg: error reading key: public key not found (/usr/share/request-tracker3.8/lib/RT/Crypt/GnuPG.pm:2115) [Thu Jul 21 08:06:29 2011] [error]: gpg: error reading key: public key not found (/usr/share/request-tracker3.8/lib/RT/Crypt/GnuPG.pm:2115) [Thu Jul 21 08:07:12 2011] [info]: Successful login for adisan from 150.254.149.220 (/usr/share/request-tracker3.8/lib/RT/Interface/Web.pm:430) [Thu Jul 21 08:07:13 2011] [warning]: Resolver RT::URI::fsck_com_rt could not parse fsck.com-rt://IGE /ticket/99 (/usr/share/request-tracker3.8/lib/RT/URI.pm:147) [Thu Jul 21 08:07:13 2011] [warning]: Resolver RT::URI::fsck_com_rt could not parse fsck.com-rt://IGE /ticket/100 (/usr/share/request-tracker3.8/lib/RT/URI.pm:147) [Thu Jul 21 08:07:13 2011] [warning]: Resolver RT::URI::fsck_com_rt could not parse fsck.com-rt://IGE /ticket/99 (/usr/share/request-tracker3.8/lib/RT/URI.pm:147) [Thu Jul 21 08:07:13 2011] [warning]: Resolver RT::URI::fsck_com_rt could not parse fsck.com-rt://IGE /ticket/100 (/usr/share/request-tracker3.8/lib/RT/URI.pm:147) [Thu Jul 21 08:07:13 2011] [warning]: Resolver RT::URI::fsck_com_rt could not parse fsck.com-rt://IGE /ticket/99 (/usr/share/request-tracker3.8/lib/RT/URI.pm:147) Adrian 2011/7/20 Kevin Falcone falc...@bestpractical.com: On Wed, Jul 20, 2011 at 01:35:22PM +0200, Adrian Stel wrote: we have strange problem, we are using certificates for authentication to RT. User name in RT should be the same as your CN. The problem is if we have different user name and using https://, in normal case we should be able to use user/pass. And we are, but until we click on any link. After that we will be automatically logged off. Please provide the link before and after the click that logs you off. You also should provide your configuration and relevant logs. -kevin 2011 Training: http://bestpractical.com/services/training.html -- Pozdrawiam Adrian Stelmaszyk -- Pozdrawiam Adrian Stelmaszyk 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] RT3-RT4 GUI menu missing after upgrade?
Hi all! Please help me: i upgraded our test rig to 4.0.1 from 3.8.7, the GUI looks as on the attached pic: (menu is not working,etc). Also my config looks like the old config (template config missing, old rights setting system, etc.) What had i missed? Thank you all, Regards, Daniel. 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] RT3-RT4 GUI menu missing after upgrade?
Update: I managed to find out that in my /local/html something got stuck in there.. after renameing i now have to no gui, but no menu at all... picture: http://tinypic.com/r/a4o3eq/7 All help is welcome... Thanks, Daniel 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] New RT Installation and corrupted RT Graphics??
Thank you John. I deleted my RT_SiteConfig.pm and then used the web_installer which generated the config file again. The page is now displayed properly and i am able to login. But when I go into certain areas like Settings-Options I get an error page: Couldn't create object file /opt/rt4/var/mason_data/obj/3452818388/standard/Prefs/Other.html.obj: Permission denied Any ideas? john s. wrote: All apache files which are relevant for the rt instance. It depends on in which way you have build your apache infrastructure ... for example : you can manage apache with virtual host files or one main httpd.conf .. or you can include additional configs... if you have no idea about the apache configs... check the web_deployment.pod File in your rt4 file under the directory Docs Addition: The Error logs is definied in the RT_SiteConfig.pm And the apache error log dependes which linux u use fior example: debain linux is almost /var/logs/apache2 best regards john -- View this message in context: http://old.nabble.com/New-RT-Installation-and-corrupted-RT-Graphics---tp32068825p32106473.html Sent from the Request Tracker - User mailing list archive at Nabble.com. 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] New RT Installation and corrupted RT Graphics??
Ok, Just noticed that if i use port 8080 none of those error messages come up. Is this the port I am meant to use with RT ? nanastasiou wrote: Thank you John. I deleted my RT_SiteConfig.pm and then used the web_installer which generated the config file again. The page is now displayed properly and i am able to login. But when I go into certain areas like Settings-Options I get an error page: Couldn't create object file /opt/rt4/var/mason_data/obj/3452818388/standard/Prefs/Other.html.obj: Permission denied Any ideas? john s. wrote: All apache files which are relevant for the rt instance. It depends on in which way you have build your apache infrastructure ... for example : you can manage apache with virtual host files or one main httpd.conf .. or you can include additional configs... if you have no idea about the apache configs... check the web_deployment.pod File in your rt4 file under the directory Docs Addition: The Error logs is definied in the RT_SiteConfig.pm And the apache error log dependes which linux u use fior example: debain linux is almost /var/logs/apache2 best regards john -- View this message in context: http://old.nabble.com/New-RT-Installation-and-corrupted-RT-Graphics---tp32068825p32106499.html Sent from the Request Tracker - User mailing list archive at Nabble.com. 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] New RT Installation and corrupted RT Graphics??
On 2011-07-21 13:02, nanastasiou wrote: [...] But when I go into certain areas like Settings-Options I get an error page: Couldn't create object file /opt/rt4/var/mason_data/obj/3452818388/standard/Prefs/Other.html.obj: Permission denied Check the permissions of /opt/rt4/var/mason_data chmod is your friend Gerard 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] see new replies on home / dashboard
- Original Message - From: Thomas Sibley t...@bestpractical.com To: rt-users@lists.bestpractical.com Sent: Wednesday, July 20, 2011 9:28:54 PM Subject: Re: [rt-users] see new replies on home / dashboard On 07/20/2011 07:47 PM, Simon Walter wrote: One thing I need is to be able to see clearly on the Home screen / Dashboard is when a new reply to an existing ticket enters the system via email. It's clear when there is a new ticket in a queue, but there is no indication when a ticket has a new email reply. There are times when an issue is pending a customer's reply. If there is no clear way to see these replies on the home screen, that's kind of a show stopper. I think that is the only thing I miss from OTRS. I include the LastUpdatedBy column in my saved searches for just this reason. If the last person to update wasn't me, the ticket probably needs attention. Alternatively, on the at-a-glance page, you could edit the '10 highest priority tickets I own' section to include the 'UpdateStatus' column. That will show a status of New when a new comment/reply came in that isn't from you. Ryan I also use the Stalled status when I expect it might take a while and I want to push a ticket off my plate until something happens. When someone corresponds, the ticket is automatically set to Open again and it'll pop up in my saved searches. You can of course have tickets auto-open on any sort of action that you want just by configuring new scrips. Thomas 2011 Training: http://bestpractical.com/services/training.html 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] see new replies on home / dashboard
On 07/21/2011 08:30 AM, Ryan Frantz wrote: Alternatively, on the at-a-glance page, you could edit the '10 highest priority tickets I own' section to include the 'UpdateStatus' column. That will show a status of New when a new comment/reply came in that isn't from you. Yep, I always forget about that one since I turn off in my preferences the unread messages notification at the top of tickets. If you use that feature, however, the UpdateStatus column is great. Thomas 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] Tuning RT4
Hello All from my point of view Actually we use rt 3.8 in prod environment and the new rt 4.0 in labor environment the 3.8 speeds up like an local installed program ...very fast the 4.0.0 is not so fast as 3.8 but it is acceptable Neverthless i would like to know why is it that so? RT 3.8.9: Here are my configurations: rt 3.8.9: http://pastebin.com/2YMK6uzt http://pastebin.com/2YMK6uzt rt 4.0.1: http://pastebin.com/CFrNE2a3 http://pastebin.com/CFrNE2a3 could someone help me to figure out whats wrong on the rt 4.0.1 config best regards john s. -- View this message in context: http://old.nabble.com/Tuning-RT4-tp32056508p32107474.html Sent from the Request Tracker - User mailing list archive at Nabble.com. 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] New RT Installation and corrupted RT Graphics??
On Thu, Jul 21, 2011 at 04:07:58AM -0700, nanastasiou wrote: Ok, Just noticed that if i use port 8080 none of those error messages come up. Is this the port I am meant to use with RT ? RT runs on the port you configure it to use. As pointed out later in the thread, your error comes because of mixing permissions. I assume you're running rt-server on 8080 as root and apache on 80 as non-root and that'll break your permissions -kevin pgpt8Wj0Drgqo.pgp Description: PGP signature 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] 4.0.1 Cannot search for attachments in native file format
On Wed, Jul 20, 2011 at 11:02:59PM +, Jennings, Barbara wrote: We are not able to search for none text attachments in RT. Further, we indexed the RT database with google and the attachments do not open. Is there a config that we are missing or does RT not handle native format attachments? Barbara I'm not sure what you mean that you indexed the database with google and what a native format attachment is. -kevin pgpEX8EEHN57C.pgp Description: PGP signature 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] RT3-RT4 GUI menu missing after upgrade?
On Thu, Jul 21, 2011 at 11:16:41AM +0200, omaisz-takács dániel wrote: Update: I managed to find out that in my /local/html something got stuck in there.. after renameing i now have to no gui, but no menu at all... Your next step is looking at the source for the css and js urls and seeing what errors you're getting trying to load them. -kevin pgpVEaHr8zXsR.pgp Description: PGP signature 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] Error when receiving emails from external (e.g. gmail) accounts
Content is Subject: Check Routing Body: This is a test ticket Just validating the routing of emails. I will review the readme for this feature of RT to fully understand it. Thanks again Gerrard -Original Message- From: rt-users-boun...@lists.bestpractical.com [mailto:rt-users-boun...@lists.bestpractical.com] On Behalf Of Kevin Falcone Sent: Wednesday, July 20, 2011 8:52 AM To: rt-users@lists.bestpractical.com Subject: Re: [rt-users] Error when receiving emails from external (e.g. gmail) accounts On Tue, Jul 19, 2011 at 03:21:51PM -0400, Gerrard Leach wrote: After performing the search for users, I do see many users, however I don't see one from my personal email account which gave me the error I started the ticket with. I guess I am not familiar with CommandByMail vs. other options for creating and responding to tickets. What is the content of the email you are testing from your gmail account? Also, to learn more about CommandByMail, you can read the README and INSTALL files that ship with it. They're also linked from here: http://search.cpan.org/dist/RT-Extension-CommandByMail/ -kevin 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] Error when receiving emails from external (e.g. gmail) accounts
Are you quoting the literal body of your email there, or have you quoted the subject and then the body. It would be better to see something in standard internet email format with headers and the body so I'm clear what you're feeding in. -kevin On Thu, Jul 21, 2011 at 10:25:22AM -0400, Gerrard Leach wrote: Content is Subject: Check Routing Body: This is a test ticket Just validating the routing of emails. I will review the readme for this feature of RT to fully understand it. Thanks again Gerrard -Original Message- From: rt-users-boun...@lists.bestpractical.com [mailto:rt-users-boun...@lists.bestpractical.com] On Behalf Of Kevin Falcone Sent: Wednesday, July 20, 2011 8:52 AM To: rt-users@lists.bestpractical.com Subject: Re: [rt-users] Error when receiving emails from external (e.g. gmail) accounts On Tue, Jul 19, 2011 at 03:21:51PM -0400, Gerrard Leach wrote: After performing the search for users, I do see many users, however I don't see one from my personal email account which gave me the error I started the ticket with. I guess I am not familiar with CommandByMail vs. other options for creating and responding to tickets. What is the content of the email you are testing from your gmail account? Also, to learn more about CommandByMail, you can read the README and INSTALL files that ship with it. They're also linked from here: http://search.cpan.org/dist/RT-Extension-CommandByMail/ -kevin 2011 Training: http://bestpractical.com/services/training.html pgpRwWO5dG7st.pgp Description: PGP signature 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] Error when receiving emails from external (e.g. gmail) accounts
Gerrard Leach xx...@gmail.com to r...@domain.com dateThu, Jul 14, 2011 at 2:46 PM subject Checking routing mailed-by gmail.com hide details Jul 14 (7 days ago) This is a test ticket. Just validating the routing of emails. Gerrard -Original Message- From: rt-users-boun...@lists.bestpractical.com [mailto:rt-users-boun...@lists.bestpractical.com] On Behalf Of Kevin Falcone Sent: Thursday, July 21, 2011 10:36 AM To: rt-users@lists.bestpractical.com Subject: Re: [rt-users] Error when receiving emails from external (e.g. gmail) accounts Are you quoting the literal body of your email there, or have you quoted the subject and then the body. It would be better to see something in standard internet email format with headers and the body so I'm clear what you're feeding in. -kevin On Thu, Jul 21, 2011 at 10:25:22AM -0400, Gerrard Leach wrote: Content is Subject: Check Routing Body: This is a test ticket Just validating the routing of emails. I will review the readme for this feature of RT to fully understand it. Thanks again Gerrard -Original Message- From: rt-users-boun...@lists.bestpractical.com [mailto:rt-users-boun...@lists.bestpractical.com] On Behalf Of Kevin Falcone Sent: Wednesday, July 20, 2011 8:52 AM To: rt-users@lists.bestpractical.com Subject: Re: [rt-users] Error when receiving emails from external (e.g. gmail) accounts On Tue, Jul 19, 2011 at 03:21:51PM -0400, Gerrard Leach wrote: After performing the search for users, I do see many users, however I don't see one from my personal email account which gave me the error I started the ticket with. I guess I am not familiar with CommandByMail vs. other options for creating and responding to tickets. What is the content of the email you are testing from your gmail account? Also, to learn more about CommandByMail, you can read the README and INSTALL files that ship with it. They're also linked from here: http://search.cpan.org/dist/RT-Extension-CommandByMail/ -kevin 2011 Training: http://bestpractical.com/services/training.html 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] Problem with login when we using https://
On Thu, Jul 21, 2011 at 10:10:31AM +0200, Adrian Stel wrote: Hi Kevin, link after log in: https://rt.ige.psnc.pl/rt/ link after log off depends on where I click: https://rt.ige.psnc.pl/rt/Search/Build.html https://rt.ige.psnc.pl/rt/Prefs/Other.html Is it any link that logs you off, or in particular those two? I also note that you say that you're using SSL certs but falling back to internal auth. Are the SSL certs ever working? If not, it's entirely possible that RT is clearing your cooking on every page because you've told it to get the REMOTE_USER from your SSL certs. -kevin this is log: [Thu Jul 21 08:06:28 2011] [info]: Successful login for adisan from 150.254.149.220 (/usr/share/request-tracker3.8/lib/RT/Interface/Web.pm:430) [Thu Jul 21 08:06:29 2011] [error]: gpg: error reading key: public key not found (/usr/share/request-tracker3.8/lib/RT/Crypt/GnuPG.pm:2115) [Thu Jul 21 08:06:29 2011] [error]: gpg: error reading key: public key not found (/usr/share/request-tracker3.8/lib/RT/Crypt/GnuPG.pm:2115) [Thu Jul 21 08:07:12 2011] [info]: Successful login for adisan from 150.254.149.220 (/usr/share/request-tracker3.8/lib/RT/Interface/Web.pm:430) [Thu Jul 21 08:07:13 2011] [warning]: Resolver RT::URI::fsck_com_rt could not parse fsck.com-rt://IGE /ticket/99 (/usr/share/request-tracker3.8/lib/RT/URI.pm:147) [Thu Jul 21 08:07:13 2011] [warning]: Resolver RT::URI::fsck_com_rt could not parse fsck.com-rt://IGE /ticket/100 (/usr/share/request-tracker3.8/lib/RT/URI.pm:147) [Thu Jul 21 08:07:13 2011] [warning]: Resolver RT::URI::fsck_com_rt could not parse fsck.com-rt://IGE /ticket/99 (/usr/share/request-tracker3.8/lib/RT/URI.pm:147) [Thu Jul 21 08:07:13 2011] [warning]: Resolver RT::URI::fsck_com_rt could not parse fsck.com-rt://IGE /ticket/100 (/usr/share/request-tracker3.8/lib/RT/URI.pm:147) [Thu Jul 21 08:07:13 2011] [warning]: Resolver RT::URI::fsck_com_rt could not parse fsck.com-rt://IGE /ticket/99 (/usr/share/request-tracker3.8/lib/RT/URI.pm:147) Adrian 2011/7/20 Kevin Falcone falc...@bestpractical.com: On Wed, Jul 20, 2011 at 01:35:22PM +0200, Adrian Stel wrote: we have strange problem, we are using certificates for authentication to RT. User name in RT should be the same as your CN. The problem is if we have different user name and using https://, in normal case we should be able to use user/pass. And we are, but until we click on any link. After that we will be automatically logged off. Please provide the link before and after the click that logs you off. You also should provide your configuration and relevant logs. -kevin 2011 Training: http://bestpractical.com/services/training.html -- Pozdrawiam Adrian Stelmaszyk 2011 Training: http://bestpractical.com/services/training.html pgpT2QspiWUpd.pgp Description: PGP signature 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] New RT Installation and corrupted RT Graphics??
Actually even on port 8080 I get permission errors. At the moment I am running both rt+apache under the root account. Am I meant to create a seperate user account to run them on? Kevin Falcone-2 wrote: On Thu, Jul 21, 2011 at 04:07:58AM -0700, nanastasiou wrote: Ok, Just noticed that if i use port 8080 none of those error messages come up. Is this the port I am meant to use with RT ? RT runs on the port you configure it to use. As pointed out later in the thread, your error comes because of mixing permissions. I assume you're running rt-server on 8080 as root and apache on 80 as non-root and that'll break your permissions -kevin 2011 Training: http://bestpractical.com/services/training.html -- View this message in context: http://old.nabble.com/New-RT-Installation-and-corrupted-RT-Graphics---tp32068825p32108602.html Sent from the Request Tracker - User mailing list archive at Nabble.com. 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] New RT Installation and corrupted RT Graphics??
On Thu, Jul 21, 2011 at 08:56:09AM -0700, nanastasiou wrote: Actually even on port 8080 I get permission errors. At the moment I am running both rt+apache under the root account. Am I meant to create a seperate user account to run them on? Apache by default starts as root but drops privileges. Did you really override that to force it to run as root all the time? As noted, your permissions in mason_data/obj/ need to be fixed -kevin Kevin Falcone-2 wrote: On Thu, Jul 21, 2011 at 04:07:58AM -0700, nanastasiou wrote: Ok, Just noticed that if i use port 8080 none of those error messages come up. Is this the port I am meant to use with RT ? RT runs on the port you configure it to use. As pointed out later in the thread, your error comes because of mixing permissions. I assume you're running rt-server on 8080 as root and apache on 80 as non-root and that'll break your permissions -kevin 2011 Training: http://bestpractical.com/services/training.html -- View this message in context: http://old.nabble.com/New-RT-Installation-and-corrupted-RT-Graphics---tp32068825p32108602.html Sent from the Request Tracker - User mailing list archive at Nabble.com. 2011 Training: http://bestpractical.com/services/training.html pgpaqYicf9Kz8.pgp Description: PGP signature 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] Problem with login when we using https://
Is it any link that logs you off, or in particular those two? I also note that you say that you're using SSL certs but falling back to internal auth. Are the SSL certs ever working? If not, it's entirely possible that RT is clearing your cooking on every page I typically clean as I cook too! ;) because you've told it to get the REMOTE_USER from your SSL certs. -kevin 2011 Training: http://bestpractical.com/services/training.html
[rt-users] Configuring RT::Authen::ExternalAuth after successful install of RT4
Team
I am trying to get authentication happen between Microsoft Active Directory and
RT using RT::Authen::ExternalAuth. I have successfully installed it and as per
the README, I have configured the attached values in /etc/RT_SiteConfig.pm.
Now, I am getting the below error while authenticating to the site, regardless
of local or external user account:
Can't call method as_string on an undefined value at
/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm
line 195.
Can someone please help me in this?
Thanks
Raghu
This message and any attachments thereto contain information that may be
privileged, confidential or otherwise protected from disclosure and is the
property of SumTotal Systems, Inc. It is intended only for the person to whom
it is addressed. If you are not the intended recipient, you are not authorized
to read, print, retain, copy, disseminate, distribute, or use this message, any
attachments thereto or any part thereof. If you receive this message in error,
please notify me at
raghavendr...@sumtotalsystems.commailto:raghavendr...@sumtotalsystems.com and
delete all copies of this message and attachments. SumTotal Systems, Inc. has
implemented anti-virus software on its computers and servers, however, it is
the recipient's own responsibility to ensure that all attachments are scanned
for viruses prior to usage.
# Plugins Information
Set( @Plugins, qw(RT::Authen::ExternalAuth) );
# Enabling RT_ExternalAuthentication Module
# The order in which the services defined in ExternalSettings
# should be used to authenticate users. User is authenticated
# if successfully confirmed by any service - no more services
# are checked.
Set($ExternalAuthPriority, [ 'My_LDAP',
'My_MySQL',
'My_SSO_Cookie'
]
);
# The order in which the services defined in ExternalSettings
# should be used to get information about users. This includes
# RealName, Tel numbers etc, but also whether or not the user
# should be considered disabled.
#
# Once user info is found, no more services are checked.
#
# You CANNOT use a SSO cookie for authentication.
Set($ExternalInfoPriority, [ 'My_LDAP',
'My_MySQL'
]
);
# If this is set to true, then the relevant packages will
# be loaded to use SSL/TLS connections. At the moment,
# this just means use Net::SSLeay;
Set($ExternalServiceUsesSSLorTLS,1);
# If this is set to 1, then users should be autocreated by RT
# as internal users if they fail to authenticate from an
# external service.
Set($AutoCreateNonExternalUsers,0);
# These are the full settings for each external service as a HashOfHashes
# Note that you may have as many external services as you wish. They will
# be checked in the order specified in the Priority directives above.
# e.g.
#
Set(ExternalAuthPriority,['My_LDAP','My_MySQL','My_Oracle','SecondaryLDAP','Other-DB']);
#
Set($ExternalSettings, { # AN EXAMPLE DB SERVICE
'My_MySQL' = { ## GENERIC SECTION
# The type of service
(db/ldap/cookie)
'type'
= 'db',
# The server hosting
the service
'server'
= 'localhost',
## SERVICE-SPECIFIC
SECTION
# The database name
'database'
= 'rt4',
# The database table
'table'
= 'Users',
# The user to connect
to the database as
'user'
= '',
# The password to use
to connect with
'pass'
= 'x',
# The port to use to
connect with (e.g. 3306)
'port'
= '3306',
# The name of the Perl
DBI driver to use (e.g. mysql)
'dbi_driver'
= 'mysql',
# The field in the
table that holds usernames
'u_field'
= 'Name',
Re: [rt-users] Configuring RT::Authen::ExternalAuth after successful install of RT4
On Thu, 21 Jul 2011 18:08 +, Raghavendra Lal Kalyankar raghavendr...@sumtotalsystems.com wrote: Team I am trying to get authentication happen between Microsoft Active Directory and RT using RT::Authen::ExternalAuth. I have successfully installed it and as per the README, I have configured the attached values in /etc/RT_SiteConfig.pm. Now, I am getting the below error while authenticating to the site, regardless of local or external user account: Can't call method as_string on an undefined value at /opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm line 195. The config file has this comment: # ALL FILTERS MUST BE VALID LDAP FILTERS ENCASED IN PARENTHESES! # YOU **MUST** SPECIFY A filter AND A d_filter!! Your d_filter is commented out, so you don't have a d_filter. You need a d_filter. 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] Configuring RT::Authen::ExternalAuth after successful install of RT4
Hi Nick/All I have uncommented both filters and d_filters. Now, the configuration looks like below: # The filter to use to match RT-Users 'filter' = '(sAMAccountName=%u)', # A catch-all example filter: '(objectClass=*)' # # The filter that will only match disabled users 'd_filter' = '((objectCategory=person)(objectClass=user))', Now, I am not getting the below string error but my external authentication is still not successful. I am doubting if the above filter value is incorrect which is making RT unable to search for the user in AD. Can someone please guide me to setup External Authentication (using AD)? Thanks Raghu From: Nick Kartsioukas [change+lists...@nightwind.net] Sent: Thursday, July 21, 2011 11:59 PM To: Raghavendra Lal Kalyankar; rt-users@lists.bestpractical.com Subject: Re: [rt-users] Configuring RT::Authen::ExternalAuth after successful install of RT4 On Thu, 21 Jul 2011 18:08 +, Raghavendra Lal Kalyankar raghavendr...@sumtotalsystems.com wrote: Team I am trying to get authentication happen between Microsoft Active Directory and RT using RT::Authen::ExternalAuth. I have successfully installed it and as per the README, I have configured the attached values in /etc/RT_SiteConfig.pm. Now, I am getting the below error while authenticating to the site, regardless of local or external user account: Can't call method as_string on an undefined value at /opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm line 195. The config file has this comment: # ALL FILTERS MUST BE VALID LDAP FILTERS ENCASED IN PARENTHESES! # YOU **MUST** SPECIFY A filter AND A d_filter!! Your d_filter is commented out, so you don't have a d_filter. You need a d_filter. This message and any attachments thereto contain information that may be privileged, confidential or otherwise protected from disclosure and is the property of SumTotal Systems, Inc. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message, any attachments thereto or any part thereof. If you receive this message in error, please notify me at raghavendr...@sumtotalsystems.commailto:raghavendr...@sumtotalsystems.com and delete all copies of this message and attachments. SumTotal Systems, Inc. has implemented anti-virus software on its computers and servers, however, it is the recipient's own responsibility to ensure that all attachments are scanned for viruses prior to usage. 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] Configuring RT::Authen::ExternalAuth after successful install of RT4
On Thu, Jul 21, 2011 at 08:06:53PM +, Raghavendra Lal Kalyankar wrote: Hi Nick/All I have uncommented both filters and d_filters. Now, the configuration looks like below: # The filter to use to match RT-Users 'filter' = '(sAMAccountName=%u)', what's %u here? There is no printf style interpretation of filters. RT::Authen::ExternalAuth already builds (sAMAccountName=username) if you configure the rest properly. This is a filter to ensure that you don't match the wrong type of user. If you don't know what goes here, use the catch-all example filter. # A catch-all example filter: '(objectClass=*)' # # The filter that will only match disabled users 'd_filter' = '((objectCategory=person)(objectClass=user))', Now, I am not getting the below string error but my external authentication is still not successful. I am doubting if the above filter value is incorrect which is making RT unable to search for the user in AD. That says anyone who is a user and a person should be disabled. Is that really what you want? Leave it empty but not commented out if you don't know what you want. Also, run your install in debug logging mode, it'll show you what it is doing. -kevin pgpFFjXvRCJyg.pgp Description: PGP signature 2011 Training: http://bestpractical.com/services/training.html
[rt-users] Deep Recursion Error, rt-4.0.1
Dear Users, My new installation of RT (4.0.1) causes mod_perl to throw fatal errors when trying to restart apache. I use Apache 2.2.11 with mod_perl 2.0.4. Perl is at version 5.10.10, MySQL at 5.0.83, and I'm running Fedora 10. I compiled RT from source, downloaded from the bestpractical main download site. After I drop the apache configuration file for rt4 into the conf.d directory and try to start up apache, I get the following error: Deep recursion on subroutine RT::Config::__GetNameByRef at /opt/rt4/sbin/../lib/RT/Config.pm line 1180. Deep recursion on subroutine RT::Config::__GetNameByRef at /opt/rt4/sbin/../lib/RT/Config.pm line 1180. Deep recursion on subroutine RT::Config::__GetNameByRef at /opt/rt4/sbin/../lib/RT/Config.pm line 1180. Here's the config file for rt4 (it's pretty vanilla): VirtualHost *:8080 ### Optional apache logs for RT # ErrorLog /opt/rt4/var/log/apache2.error # TransferLog /opt/rt4/var/log/apache2.access # LogLevel debug AddDefaultCharset UTF-8 DocumentRoot /opt/rt4/share/html Location / Order allow,deny Allow from all SetHandler modperl PerlResponseHandler Plack::Handler::Apache2 PerlSetVar psgi_app /opt/rt4/sbin/rt-server /Location Perl use Plack::Handler::Apache2; Plack::Handler::Apache2-preload(/opt/rt4/sbin/rt-server); /Perl /VirtualHost Does anyone out there in the world wide web know a solution to this problem? Any help would be much appreciated! - Ryan 2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] Deep Recursion Error, rt-4.0.1
On Thu, 2011-07-21 at 14:05 -0700, Randy Schwager wrote: My new installation of RT (4.0.1) causes mod_perl to throw fatal errors when trying to restart apache. This points to an error in your RT configuration (not your Apache configuration, which is what you provided). Please show us your RT_SiteConfig.pm, with any passwords redacted. - Alex 2011 Training: http://bestpractical.com/services/training.html
[rt-users] Unable to transfer tickets to a queue with a different lifecycle
Hi,
I'm trying to allow ticket transfers between two queues that have modified
lifecycles and I'm running into a snag: There is no mapping for statuses
between these queues. Contact your system administrator.
I've attempted to configure the status mapping in RT_SiteConfig.pm, but I must
be missing something. Could someone confirm that I've got the formatting
proper? Also, do I need to place this in each corresponding lifecycle, or just
once in the lifecycle section of the file?
_maps__ = {
'swdev - default' = {
'Created = new',
'InDevelopment = open',
'Completed = resolved',
Etc...
},
},
I would greatly appreciate any assistance with my somewhat simple (yet
frustrating) problem.
Thanks,
Ian
2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] Unable to transfer tickets to a queue with a different lifecycle
On Thu, 2011-07-21 at 19:20 -0600, Ian Roy wrote:
I’ve attempted to configure the status mapping in RT_SiteConfig.pm,
but I must be missing something. Could someone confirm that I’ve got
the formatting proper? Also, do I need to place this in each
corresponding lifecycle, or just once in the lifecycle section of the
file?
_maps__ = {
'swdev - default' = {
'Created = new',
'InDevelopment = open',
'Completed = resolved',
…Etc…
},
},
Your __maps__ is missing one of its two leading underscores, but I
presume that to be a copy-and-paste mistake. The actual problem is your
quoting. You want:
__maps__ = {
'swdev - default' = {
'Created' = 'new',
'InDevelopment' = 'open',
'Completed' = 'resolved',
# ...
},
},
Note that each side of the = is a quoted string, not each line being a
single quoted string with a = in it.
- Alex
2011 Training: http://bestpractical.com/services/training.html
Re: [rt-users] Unable to transfer tickets to a queue with a different lifecycle
Your __maps__ is missing one of its two leading underscores, but I
presume that to be a copy-and-paste mistake. The actual problem is your
quoting. You want:
__maps__ = {
'swdev - default' = {
'Created' = 'new',
'InDevelopment' = 'open',
'Completed' = 'resolved',
# ...
},
},
Note that each side of the = is a quoted string, not each line being a
single quoted string with a = in it.
- Alex
Alex, thank you for the swift reply.
I've made the changes that you mentioned, but I'm still getting the error.
It would be handy if you could clarify the positioning of this code. Does the
above need to be located in the definition of swdev or default?
2011 Training: http://bestpractical.com/services/training.html
