Re: [rt-users] Filter by requestor email domain

2012-02-03 Thread Bart
I think your exception list is ok, but this line basically tells the if
statement that the content needs to exactly match your list:

  return if grep { $ticketRequestor eq lc($_) } @exceptionList;

Instead of eq you could try using =~ instead, below a little info:

http://www.troubleshooters.com/codecorn/littperl/perlreg.htm#SymbolExplanations

You might also need to edit the exception list with /@example.com/, or
something like that.

Maybe someone with a little more programming skills can reply on this ^_^
I'm not sure if the above would work.

-- Bart


Op 2 februari 2012 21:56 schreef Ram Moskovitz ram0...@gmail.com het
volgende:

 Thanks Bart,
 That looks good. I'm having an issue with it though - I need to match
 against a regexp for the exception list.. I added an entry like '*@
 example.com' to @exceptionlist  and rt is still sending out create
 confirmations. What am I missing?
 thanks!


 On Mon, Jan 30, 2012 at 2:41 AM, Bart b...@pleh.info wrote:

 Hi,

 We had a similar requirement for a bunch of e-mail addresses.

 This can be achieved by editing the autoreply scrip to look something
 like this:

- Condition: User Defined
- Action: Auto Reply To Requestors
- Template: Your AutoReply template
- Stage: TransactionCreate
- Custom Condition:


 my @exceptionList = ('na...@example.com',
  'na...@example.com',
  'na...@example.com');

 my $transactionType = $self-TransactionObj-Type;
 my $ticketRequestor = lc($self-TicketObj-RequestorAddresses);
 my $trans = $self-TransactionObj;

 if ($transactionType eq 'Create') {
   return if grep { $ticketRequestor eq lc($_) } @exceptionList;
   my $msgattr = $trans-Message-First;
   return 0 unless $msgattr;
   return 1 if $msgattr-GetHeader('Received');
 }
 return 0;

 In addition the above only sends an autoreply when someone sends an
 e-mail, in our case we don't like the autoreply mails when we manually
 create a ticket (e.g. via quick create).

 Hope this helps.

 -- Bart


 Op 25 januari 2012 21:02 schreef Ram Moskovitz ram0...@gmail.com het
 volgende:

  Hey there,
 I'm looking to not auto-reply on create to inbound emails from a certain
 domain ( anyth...@example.com and even anyth...@sd.example.com). I
 suppose the right way to go about this is via user defined condition in the
 global scrip for autoreply on create. I have steps 1 and 3.. what's step 2?

 1 return 0 unless $self-TransactionObj-Type eq Create;
 2 return 0 if #self-TicketObj-
 3 return 1

 thanks
 ram


 
 RT Training Sessions (http://bestpractical.com/services/training.html)
 * Boston — March 5  6, 2012





RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

[rt-users] [rt 4.0.4] Unable to change status from New - Open

2012-02-03 Thread Ronald J. Yacketta

Hello all!

We went live with rt 4.0.04 last night and have been getting reports of 
end-users being unable to change ticket status in ANY queue from New - 
Open.


Ticket 39927: Status 'open' isn't a valid status for tickets in this queue.

We are using the 'default' Lifecycle which allows for 'new' - 'open'

default = {
initial = [ 'new' ],
active  = [ 'new',' open', 'stalled' ],
inactive= [ 'resolved', 'rejected', 'deleted', 'billed' ],

...
# Added 'billed' transaction status
transitions = {
''   = [qw(new open resolved)],

# from   = [ to list ],
new  = [qw(open stalled resolved rejected billed 
deleted)],

open = [qw(new stalled resolved rejected billed deleted)],
stalled  = [qw(new open rejected resolved billed deleted)],
resolved = [qw(new open stalled rejected billed deleted)],
rejected = [qw(new open stalled resolved billed deleted)],
billed   = [qw(new open stalled rejected resolved deleted)],
deleted  = [qw(new open stalled rejected resolved billed)],
},
...
actions = [
'new - open'  = {
label  = 'Open It', # loc
update = 'Respond',
},

...



RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

Re: [rt-users] [rt 4.0.4] Unable to change status from New - Open

2012-02-03 Thread Ronald J. Yacketta

On 2/3/2012 10:36 AM, Ronald J. Yacketta wrote:

Hello all!

We went live with rt 4.0.04 last night and have been getting reports 
of end-users being unable to change ticket status in ANY queue from 
New - Open.


Ticket 39927: Status 'open' isn't a valid status for tickets in this 
queue.


We are using the 'default' Lifecycle which allows for 'new' - 'open'

default = {
initial = [ 'new' ],
active  = [ 'new',' open', 'stalled' ],
inactive= [ 'resolved', 'rejected', 'deleted', 
'billed' ],


...
# Added 'billed' transaction status
transitions = {
''   = [qw(new open resolved)],

# from   = [ to list ],
new  = [qw(open stalled resolved rejected billed 
deleted)],
open = [qw(new stalled resolved rejected billed 
deleted)],

stalled  = [qw(new open rejected resolved billed deleted)],
resolved = [qw(new open stalled rejected billed deleted)],
rejected = [qw(new open stalled resolved billed deleted)],
billed   = [qw(new open stalled rejected resolved deleted)],
deleted  = [qw(new open stalled rejected resolved billed)],
},
...
actions = [
'new - open'  = {
label  = 'Open It', # loc
update = 'Respond',
},

...





RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston --- March 5  6, 2012
Seeing the following log message when attempting to set status from 
'new' to 'open'


Feb  3 11:37:39 track RT: 
SelectQueue---33610---CreateTicket---1CurrentUserSelectQueue---33610---ShowTicket---1ticketsDefaultQueuecreate_in_typesActions_session_idCurrentSearchHashmy_rt_portletsSelectQueue---33610---CreateTicket---0NextPagei 
at 
/opt/rt4/local/plugins/RTx-AssetTracker/html/Callbacks/AssetTracker/Elements/Tabs/Privileged 
line 11. 
(/opt/rt4/local/plugins/RTx-AssetTracker/html/Callbacks/AssetTracker/Elements/Tabs/Privileged:11


time to dig

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

Re: [rt-users] [rt 4.0.4] Unable to change status from New - Open

2012-02-03 Thread Ronald J. Yacketta

On 2/3/2012 11:37 AM, Ronald J. Yacketta wrote:

On 2/3/2012 10:36 AM, Ronald J. Yacketta wrote:

Hello all!

We went live with rt 4.0.04 last night and have been getting reports 
of end-users being unable to change ticket status in ANY queue from 
New - Open.


Ticket 39927: Status 'open' isn't a valid status for tickets in this 
queue.


We are using the 'default' Lifecycle which allows for 'new' - 'open'

default = {
initial = [ 'new' ],
active  = [ 'new',' open', 'stalled' ],
inactive= [ 'resolved', 'rejected', 'deleted', 
'billed' ],


...
# Added 'billed' transaction status
transitions = {
''   = [qw(new open resolved)],

# from   = [ to list ],
new  = [qw(open stalled resolved rejected billed 
deleted)],
open = [qw(new stalled resolved rejected billed 
deleted)],

stalled  = [qw(new open rejected resolved billed deleted)],
resolved = [qw(new open stalled rejected billed deleted)],
rejected = [qw(new open stalled resolved billed deleted)],
billed   = [qw(new open stalled rejected resolved deleted)],
deleted  = [qw(new open stalled rejected resolved billed)],
},
...
actions = [
'new - open'  = {
label  = 'Open It', # loc
update = 'Respond',
},

...





RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston --- March 5  6, 2012
Seeing the following log message when attempting to set status from 
'new' to 'open'


Feb  3 11:37:39 track RT: 
SelectQueue---33610---CreateTicket---1CurrentUserSelectQueue---33610---ShowTicket---1ticketsDefaultQueuecreate_in_typesActions_session_idCurrentSearchHashmy_rt_portletsSelectQueue---33610---CreateTicket---0NextPagei 
at 
/opt/rt4/local/plugins/RTx-AssetTracker/html/Callbacks/AssetTracker/Elements/Tabs/Privileged 
line 11. 
(/opt/rt4/local/plugins/RTx-AssetTracker/html/Callbacks/AssetTracker/Elements/Tabs/Privileged:11


time to dig



RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston --- March 5  6, 2012
Ignore that last message, looks like RT:AT devs left a hanging 'warn' in 
'Privileged' still trying to figure out whye we can not go from 'new' - 
'open'

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

Re: [rt-users] [rt 4.0.4] Unable to change status from New - Open

2012-02-03 Thread Kevin Falcone
On Fri, Feb 03, 2012 at 10:36:07AM -0500, Ronald J. Yacketta wrote:
Hello all!
 
We went live with rt 4.0.04 last night and have been getting reports of 
 end-users being unable
to change ticket status in ANY queue from New - Open.
 
Ticket 39927: Status 'open' isn't a valid status for tickets in this queue.

This error means that open is invalid for the current Queue, not there
is no transition from new - open. Unfortunately, your truncated config
doesn't fail locally.  Are you sure you don't have other lifecycles
configured and applied?  If you look at the System Configuration page,
does it show the Lifecycle config you expect?

You could also tweak Ticket.pm's SetStatus to warn when you encounter
the error so you could see $cycle-Name.

-kevin


We are using the 'default' Lifecycle which allows for 'new' - 'open'
 
default = {
initial = [ 'new' ],
active  = [ 'new',' open', 'stalled' ],
inactive= [ 'resolved', 'rejected', 'deleted', 'billed' ],
 
...
# Added 'billed' transaction status
transitions = {
''   = [qw(new open resolved)],
 
# from   = [ to list ],
new  = [qw(open stalled resolved rejected billed 
 deleted)],
open = [qw(new stalled resolved rejected billed deleted)],
stalled  = [qw(new open rejected resolved billed deleted)],
resolved = [qw(new open stalled rejected billed deleted)],
rejected = [qw(new open stalled resolved billed deleted)],
billed   = [qw(new open stalled rejected resolved deleted)],
deleted  = [qw(new open stalled rejected resolved billed)],
},
...
actions = [
'new - open'  = {
label  = 'Open It', # loc
update = 'Respond',
},
 
...

 
 RT Training Sessions (http://bestpractical.com/services/training.html)
 * Boston ? March 5  6, 2012



pgp2g8q7nsjwT.pgp
Description: PGP signature

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

Re: [rt-users] External Auth using Active Directory 2008

2012-02-03 Thread Kevin Falcone
On Thu, Feb 02, 2012 at 06:21:20PM +, Howell, Van wrote:
 I added Set($LogToSyslog, debug); to my RT_SiteConfig.pm file
 I don't seem to be getting an more logging.
 I restarted the httpd service, didn't see any more logging so I restarted the 
 server.

Unfortunately - it seems you have syslog itself set to discard debug
messages.  You can try turning up $LogToScreen to debug and then check
your webserver logs instead of your syslog logs.

-kevin

 This is the entire tail of the messages log
 
 [root@OpenNMS etc]# tail /var/log/messages
 Feb  2 11:56:45 localhost abrtd: Dump directory is a duplicate of 
 /var/spool/abrt/ccpp-2012-02-01-14:08:36-18683
 Feb  2 11:56:45 localhost abrtd: Deleting dump directory 
 ccpp-2012-02-02-11:54:56-2567 (dup of ccpp-2012-02-01-14:08:36-18683), 
 sending dbus signal
 Feb  2 12:00:42 localhost RT: The actual HTTP_HOST (192.168.1.200) does NOT 
 match the configured WebDomain (lcu.edu). Perhaps you should Set($WebDomain, 
 '192.168.1.200'); in RT_SiteConfig.pm, otherwise your internal links may be 
 broken. (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:1087)
 Feb  2 12:05:43 localhost RT: The actual HTTP_HOST (192.168.1.200) does NOT 
 match the configured WebDomain (lcu.edu). Perhaps you should Set($WebDomain, 
 '192.168.1.200'); in RT_SiteConfig.pm, otherwise your internal links may be 
 broken. (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:1087)
 Feb  2 12:10:44 localhost RT: The actual HTTP_HOST (192.168.1.200) does NOT 
 match the configured WebDomain (helpdesk.lcu.edu). Perhaps you should 
 Set($WebDomain, '192.168.1.200'); in RT_SiteConfig.pm, otherwise your 
 internal links may be broken. (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:1087)
 Feb  2 12:14:00 localhost RT: My_LDAP AUTH FAILED: van.howell 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:127)
 Feb  2 12:14:00 localhost RT: FAILED LOGIN for van.howell from 10.1.5.9 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:655)
 Feb  2 12:15:45 localhost RT: The actual HTTP_HOST (192.168.1.200) does NOT 
 match the configured WebDomain (helpdesk.lcu.edu). Perhaps you should 
 Set($WebDomain, '192.168.1.200'); in RT_SiteConfig.pm, otherwise your 
 internal links may be broken. (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:1087)
 Feb  2 12:16:16 localhost RT: My_LDAP AUTH FAILED: van.howell 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:127)
 Feb  2 12:16:16 localhost RT: FAILED LOGIN for van.howell from 10.1.5.9 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:655)
 
 Thanks for helping with this.
 
 Van Howell
 System Administrator
 Lubbock Christian University
 
 
 -Original Message-
 From: rt-users-boun...@lists.bestpractical.com 
 [mailto:rt-users-boun...@lists.bestpractical.com] On Behalf Of Kevin Falcone
 Sent: Thursday, February 02, 2012 11:17 AM
 To: rt-users@lists.bestpractical.com
 Subject: Re: [rt-users] External Auth using Active Directory 2008
 
 On Thu, Feb 02, 2012 at 04:16:53PM +, Howell, Van wrote:
  I do not have Debugging turned on. I am going to need some help turning it 
  on since this is new to me.
  
  Here are some errors from /var/log/messages...
  
  This is a failed attempt...
  
  Feb  1 16:02:25 localhost RT: My_LDAP AUTH FAILED mary.servantez 
  (can't bind: LDAP_INVALID_CREDENTIALS 49 ) 
  (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalA
  uth/LDAP.pm:82) Feb  1 16:02:25 localhost RT: FAILED LOGIN for 
  mary.servantez from 10.1.41.95 
  (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:655)
  
  Here is a successful attemt
  
  Feb  2 10:14:02 localhost RT: RT::Authen::ExternalAuth::LDAP::GetAuth 
  External Auth OK ( My_LDAP ): test.account 
  (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalA
  uth/LDAP.pm:139) Feb  2 10:14:02 localhost RT: Couldn't enable user 28 
  (/opt/rt4/sbin/../lib/RT/User.pm:1066)
  Feb  2 10:14:02 localhost RT: User marked as ENABLED ( test.account ) 
  per External Service (, ) 
  (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalA
  uth.pm:274) Feb  2 10:14:02 localhost RT: 
  RT::Authen::ExternalAuth::CanonicalizeUserInfo returning Address1: , 
  City: , Country: , EmailAddress: test.acco...@lcu.edu, ExternalAuthId: 
  test.account, Gecos: test.account, Name: test.account, Organization: , 
  RealName: Test Account, State: , WorkPhone: , Zip:  
  (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalA
  uth.pm:536) Feb  2 10:14:02 localhost RT: Successful login for 
  test.account from 10.1.5.9 
  (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalA
  uth.pm:219)
 
 Since you're seeing these in /var/log/messages I assume you're using the 
 syslog configuration.
 
 You want to read about LogToSyslog in etc/RT_Config.pm then copy that setting 
 to RT_SiteConfig.pm and change it to debug.
 
 Restart RT and try the failed login again.
 
 -kevin
 
 
 RT Training Sessions 

Re: [rt-users] RT Bounce messages

2012-02-03 Thread Kevin Falcone
On Thu, Feb 02, 2012 at 07:15:28PM -, Tim Dunphy wrote:
 In this case, it means RT will be comparing against all the Queue
 address and your Correspond/Comment address.  Is it possible that RT
 is sending to an email address that feeds back into RT via an
 /etc/aliases file or something similar?
 
 Interesting question. I did try the approach of using the aliases file
 in order to retrieve emails into the RT database, but I was having a
 little trouble with that. So, while it's a bit kludgy, I ultimately
 chose to achive this through pop and that's been working quite well.
 However I never got around to removing the aliases entry.

 From my aliases file:
 
 
 #rt: |/usr/local/rt4/bin/rt-mailgate --queue ops --action correspond --url 
 http://rt.mm3.mlbam.com/helpdesk;
 
 #rt-comment: |/usr/local/rt4/bin/rt-mailgate --queue ops --action comment 
 --url http://rt.mm3.mlbam.com/helpdesk;
 
 ops: |/usr/local/rt4/bin/rt-mailgate --queue ops --action correspond --url 
 http://rt.mm3.mlbam.com/helpdesk;
 ops-comment: |/usr/local/rt4/bin/rt-mailgate --queue ops --action comment 
 --url http://rt.mm3.mlbam.com/helpdesk;
 
 
 I notice that I commented out the first two rt entries but left a couple of 
 entries for queues that I had built in there.

If you're using ops@ then unless you've configured those addresses on
the Queue's CorrespondAddress, RT doesn't know that ops@ is an RT
address and you might be accidentally looping mail back into it.

You may need to provide headers for one of the mails that is looping
sot that they can be compared to your correspond/comment addresses and
other internally configured addresses.

-kevin


pgpb4QU3KfoiK.pgp
Description: PGP signature

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

Re: [rt-users] RT-to-RT communication

2012-02-03 Thread Kevin Falcone
On Thu, Feb 02, 2012 at 10:40:22PM +0100, Alek Cesarz wrote:
 Alek Cesarz pisze, W dniu 2012-01-25 21:48:
 
  thanks Kevin. will check and get back with results.
 
 I tried to review the code but with no success. nothing found in
 incoming mail looks like it should trigger any special behaviour, but...
 I am not a Perl hacker so my understanding of RT's code is limited.
 what I found is that during ticket creation RT adds following headers to
 first transaction:
 
 RT-Squelch-Replies-To: requ...@blahblah.net.pl
 RT-DetectedAutoGenerated:  true
 
 which may block autoresponder.
 requ...@blahblah.net.pl is the address from which other instance of RT
 is sending mails.
 
 below are original headers from incoming email and headers recorded in
 RT's first transation (Ticket created)
 
 *original headers*:
 
 Precedence: bulk

This one ^ is going to cause the CheckForAutoGenerated method to
return true, which will cause those headers you saw and turn off
outgoing mail back to the auto generated user.  I'm not sure if there
is a config you could use to turn this off unfortunately, since RT is
trying to avoid having a mail loop.

Do further correspondences on your local ticket sent to the external
RT?

-kevin


pgpKuhyNNpBZ1.pgp
Description: PGP signature

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

Re: [rt-users] [rt 4.0.4] Unable to change status from New - Open

2012-02-03 Thread Ronald J Yacketta


 On Fri, Feb 03, 2012 at 10:36:07AM -0500, Ronald J. Yacketta wrote:
Hello all!

We went live with rt 4.0.04 last night and have been getting reports
 of end-users being unable
to change ticket status in ANY queue from New - Open.

Ticket 39927: Status 'open' isn't a valid status for tickets in this
 queue.

 This error means that open is invalid for the current Queue, not there
 is no transition from new - open. Unfortunately, your truncated config
 doesn't fail locally.  Are you sure you don't have other lifecycles
 configured and applied?  If you look at the System Configuration page,
 does it show the Lifecycle config you expect?

Fixed, someone had a typo in the RT_Config.pm

'active' = [
   'new',
   =' open',= darn space between ' and open
   'stalled'
 ],
-Ron



RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston  March 5  6, 2012


Re: [rt-users] Two questions

2012-02-03 Thread Kevin Falcone
On Thu, Feb 02, 2012 at 01:25:13PM -0500, Josh Narins wrote:
  On Tue, Jan 31, 2012 at 12:54:04PM -0500, Josh Narins wrote:
On Tue, Jan 31, 2012 at 09:28:00AM -0500, Josh Narins wrote:
I got partway along writing a Mail Plugin for RT3.8, but,
somewhere along the way, I lost it.

Can anyone point me to any documentation on them? My goal is
  to
remove the endlessly
duplicating newlines of the quoted text on each reply to our
tickets and to remove the
signatures.
   
There is actually code in 3.8.10 or later to work around Outlook's
bugs with newlines.
  
   I'm running 4.0.2 and still have the problem.
 
  Please followup with some sample data to rt-bugs?  Thanks
 
 Sure. What data do you actually want? I'm happy to run any sort of
 query. I found a ticket with no business-sensitive information that
 has the problem.

I suspect the most useful thing is reconstructing from the Attachments
table email that can be shoved through rt-mailgate so they can be
added to the existing tests for the newline removal.

-kevin


pgphtZQDoRlAM.pgp
Description: PGP signature

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

Re: [rt-users] [rt 4.0.4] Unable to change status from New - Open

2012-02-03 Thread Kevin Falcone
On Fri, Feb 03, 2012 at 12:42:47PM -0500, Ronald J Yacketta wrote:
 
 
  On Fri, Feb 03, 2012 at 10:36:07AM -0500, Ronald J. Yacketta wrote:
 Hello all!
 
 We went live with rt 4.0.04 last night and have been getting reports
  of end-users being unable
 to change ticket status in ANY queue from New - Open.
 
 Ticket 39927: Status 'open' isn't a valid status for tickets in this
  queue.
 
  This error means that open is invalid for the current Queue, not there
  is no transition from new - open. Unfortunately, your truncated config
  doesn't fail locally.  Are you sure you don't have other lifecycles
  configured and applied?  If you look at the System Configuration page,
  does it show the Lifecycle config you expect?
 
 Fixed, someone had a typo in the RT_Config.pm

You really want all local configs in RT_SiteConfig.pm, not
RT_Config.pm.  Next time you upgrade, any changes to RT_Config.pm will
be blown away.

 'active' = [
'new',
=' open',= darn space between ' and open
'stalled'
  ],


pgpYrvL4EFMUd.pgp
Description: PGP signature

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

Re: [rt-users] External Auth using Active Directory 2008

2012-02-03 Thread Howell, Van
Here is the Apache Log from my last login attempt

[Fri Feb  3 18:02:40 2012] [debug]: Password validation required for service - 
Executing... 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:155)
[Fri Feb  3 18:02:40 2012] [debug]: Trying external auth service: My_LDAP 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:16)
[Fri Feb  3 18:02:40 2012] [debug]: LDAP Search ===  Base: 
DC=xx,DC=xxx,DC=edu == Filter: 
((sAMAccountName=van.howell)((ObjectCategory=User)(ObjectClass=Person))) == 
Attrs: dn 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:43)
[Fri Feb  3 18:02:40 2012] [debug]: Found LDAP DN: CN=Howell\, 
Van,OU=Staff,OU=LCU,DC=xx,DC=xxx,DC=edu 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:75)
[Fri Feb  3 18:02:40 2012] [debug]: LDAP Search ===  Base: 
DC=xx,DC=xxx,DC=edu == Filter: (member=CN=Howell, 
Van,OU=Staff,OU=LCU,DC=xx,DC=xxx,DC=edu) == Attrs: dn 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:100)
[Fri Feb  3 18:02:40 2012] [info]: My_LDAP AUTH FAILED: van.howell 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:127)
[Fri Feb  3 18:02:40 2012] [debug]: LDAP password validation result: 0 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:334)
[Fri Feb  3 18:02:40 2012] [debug]: Password Validation Check Result:  0 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:159)
[Fri Feb  3 18:02:40 2012] [debug]: Autohandler called ExternalAuth. Response: 
(0, Password Invalid) 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/html/Elements/DoAuth:11)
[Fri Feb  3 18:02:40 2012] [error]: FAILED LOGIN for van.howell from 10.1.5.9 
(/opt/rt4/sbin/../lib/RT/Interface/Web.pm:655)

Van Howell
System Administrator
Lubbock Christian University

-Original Message-
From: rt-users-boun...@lists.bestpractical.com 
[mailto:rt-users-boun...@lists.bestpractical.com] On Behalf Of Kevin Falcone
Sent: Friday, February 03, 2012 11:32 AM
To: rt-users@lists.bestpractical.com
Subject: Re: [rt-users] External Auth using Active Directory 2008

On Thu, Feb 02, 2012 at 06:21:20PM +, Howell, Van wrote:
 I added Set($LogToSyslog, debug); to my RT_SiteConfig.pm file I 
 don't seem to be getting an more logging.
 I restarted the httpd service, didn't see any more logging so I restarted the 
 server.

Unfortunately - it seems you have syslog itself set to discard debug messages.  
You can try turning up $LogToScreen to debug and then check your webserver logs 
instead of your syslog logs.

-kevin

 This is the entire tail of the messages log
 
 [root@OpenNMS etc]# tail /var/log/messages Feb  2 11:56:45 localhost 
 abrtd: Dump directory is a duplicate of 
 /var/spool/abrt/ccpp-2012-02-01-14:08:36-18683
 Feb  2 11:56:45 localhost abrtd: Deleting dump directory 
 ccpp-2012-02-02-11:54:56-2567 (dup of ccpp-2012-02-01-14:08:36-18683), 
 sending dbus signal Feb  2 12:00:42 localhost RT: The actual HTTP_HOST 
 (192.168.1.200) does NOT match the configured WebDomain (lcu.edu). 
 Perhaps you should Set($WebDomain, '192.168.1.200'); in 
 RT_SiteConfig.pm, otherwise your internal links may be broken. 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:1087)
 Feb  2 12:05:43 localhost RT: The actual HTTP_HOST (192.168.1.200) 
 does NOT match the configured WebDomain (lcu.edu). Perhaps you should 
 Set($WebDomain, '192.168.1.200'); in RT_SiteConfig.pm, otherwise your 
 internal links may be broken. 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:1087)
 Feb  2 12:10:44 localhost RT: The actual HTTP_HOST (192.168.1.200) 
 does NOT match the configured WebDomain (helpdesk.lcu.edu). Perhaps 
 you should Set($WebDomain, '192.168.1.200'); in RT_SiteConfig.pm, 
 otherwise your internal links may be broken. 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:1087)
 Feb  2 12:14:00 localhost RT: My_LDAP AUTH FAILED: van.howell 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalA
 uth/LDAP.pm:127) Feb  2 12:14:00 localhost RT: FAILED LOGIN for 
 van.howell from 10.1.5.9 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:655)
 Feb  2 12:15:45 localhost RT: The actual HTTP_HOST (192.168.1.200) 
 does NOT match the configured WebDomain (helpdesk.lcu.edu). Perhaps 
 you should Set($WebDomain, '192.168.1.200'); in RT_SiteConfig.pm, 
 otherwise your internal links may be broken. 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:1087)
 Feb  2 12:16:16 localhost RT: My_LDAP AUTH FAILED: van.howell 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalA
 uth/LDAP.pm:127) Feb  2 12:16:16 localhost RT: FAILED LOGIN for 
 van.howell from 10.1.5.9 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:655)
 
 Thanks for helping with this.
 
 Van Howell
 System Administrator
 Lubbock Christian University
 
 
 -Original Message-
 From: rt-users-boun...@lists.bestpractical.com 
 

Re: [rt-users] External Auth using Active Directory 2008

2012-02-03 Thread Howell, Van
One more thing,
It's like it is not sending the password to AD at all. I can type a random 
password multiple times and is does not lock my account.

Van Howell
System Administrator
Lubbock Christian University


-Original Message-
From: rt-users-boun...@lists.bestpractical.com 
[mailto:rt-users-boun...@lists.bestpractical.com] On Behalf Of Kevin Falcone
Sent: Friday, February 03, 2012 11:32 AM
To: rt-users@lists.bestpractical.com
Subject: Re: [rt-users] External Auth using Active Directory 2008

On Thu, Feb 02, 2012 at 06:21:20PM +, Howell, Van wrote:
 I added Set($LogToSyslog, debug); to my RT_SiteConfig.pm file I 
 don't seem to be getting an more logging.
 I restarted the httpd service, didn't see any more logging so I restarted the 
 server.

Unfortunately - it seems you have syslog itself set to discard debug messages.  
You can try turning up $LogToScreen to debug and then check your webserver logs 
instead of your syslog logs.

-kevin

 This is the entire tail of the messages log
 
 [root@OpenNMS etc]# tail /var/log/messages Feb  2 11:56:45 localhost 
 abrtd: Dump directory is a duplicate of 
 /var/spool/abrt/ccpp-2012-02-01-14:08:36-18683
 Feb  2 11:56:45 localhost abrtd: Deleting dump directory 
 ccpp-2012-02-02-11:54:56-2567 (dup of ccpp-2012-02-01-14:08:36-18683), 
 sending dbus signal Feb  2 12:00:42 localhost RT: The actual HTTP_HOST 
 (192.168.1.200) does NOT match the configured WebDomain (lcu.edu). 
 Perhaps you should Set($WebDomain, '192.168.1.200'); in 
 RT_SiteConfig.pm, otherwise your internal links may be broken. 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:1087)
 Feb  2 12:05:43 localhost RT: The actual HTTP_HOST (192.168.1.200) 
 does NOT match the configured WebDomain (lcu.edu). Perhaps you should 
 Set($WebDomain, '192.168.1.200'); in RT_SiteConfig.pm, otherwise your 
 internal links may be broken. 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:1087)
 Feb  2 12:10:44 localhost RT: The actual HTTP_HOST (192.168.1.200) 
 does NOT match the configured WebDomain (helpdesk.lcu.edu). Perhaps 
 you should Set($WebDomain, '192.168.1.200'); in RT_SiteConfig.pm, 
 otherwise your internal links may be broken. 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:1087)
 Feb  2 12:14:00 localhost RT: My_LDAP AUTH FAILED: van.howell 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalA
 uth/LDAP.pm:127) Feb  2 12:14:00 localhost RT: FAILED LOGIN for 
 van.howell from 10.1.5.9 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:655)
 Feb  2 12:15:45 localhost RT: The actual HTTP_HOST (192.168.1.200) 
 does NOT match the configured WebDomain (helpdesk.lcu.edu). Perhaps 
 you should Set($WebDomain, '192.168.1.200'); in RT_SiteConfig.pm, 
 otherwise your internal links may be broken. 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:1087)
 Feb  2 12:16:16 localhost RT: My_LDAP AUTH FAILED: van.howell 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalA
 uth/LDAP.pm:127) Feb  2 12:16:16 localhost RT: FAILED LOGIN for 
 van.howell from 10.1.5.9 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:655)
 
 Thanks for helping with this.
 
 Van Howell
 System Administrator
 Lubbock Christian University
 
 
 -Original Message-
 From: rt-users-boun...@lists.bestpractical.com 
 [mailto:rt-users-boun...@lists.bestpractical.com] On Behalf Of Kevin 
 Falcone
 Sent: Thursday, February 02, 2012 11:17 AM
 To: rt-users@lists.bestpractical.com
 Subject: Re: [rt-users] External Auth using Active Directory 2008
 
 On Thu, Feb 02, 2012 at 04:16:53PM +, Howell, Van wrote:
  I do not have Debugging turned on. I am going to need some help turning it 
  on since this is new to me.
  
  Here are some errors from /var/log/messages...
  
  This is a failed attempt...
  
  Feb  1 16:02:25 localhost RT: My_LDAP AUTH FAILED mary.servantez 
  (can't bind: LDAP_INVALID_CREDENTIALS 49 ) 
  (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/Externa
  lA
  uth/LDAP.pm:82) Feb  1 16:02:25 localhost RT: FAILED LOGIN for 
  mary.servantez from 10.1.41.95
  (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:655)
  
  Here is a successful attemt
  
  Feb  2 10:14:02 localhost RT: 
  RT::Authen::ExternalAuth::LDAP::GetAuth
  External Auth OK ( My_LDAP ): test.account 
  (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/Externa
  lA
  uth/LDAP.pm:139) Feb  2 10:14:02 localhost RT: Couldn't enable user 
  28
  (/opt/rt4/sbin/../lib/RT/User.pm:1066)
  Feb  2 10:14:02 localhost RT: User marked as ENABLED ( test.account 
  ) per External Service (, ) 
  (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/Externa
  lA
  uth.pm:274) Feb  2 10:14:02 localhost RT: 
  RT::Authen::ExternalAuth::CanonicalizeUserInfo returning Address1: ,
  City: , Country: , EmailAddress: test.acco...@lcu.edu, ExternalAuthId: 
  test.account, Gecos: test.account, Name: test.account, Organization: 
  ,
  RealName: Test Account, State: , WorkPhone: , Zip:  
  

Re: [rt-users] External Auth using Active Directory 2008

2012-02-03 Thread Howell, Van
Here is the debug log for a successful attempt

[Fri Feb  3 18:20:32 2012] [warning]: Couldn't enable user 28 
(/opt/rt4/sbin/../lib/RT/User.pm:1066)
[Fri Feb  3 18:20:32 2012] [info]: User marked as ENABLED ( test.account ) per 
External Service (, ) 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:274)
[Fri Feb  3 18:20:32 2012] [debug]: 
RT::Authen::ExternalAuth::CanonicalizeUserInfo called by 
RT::Authen::ExternalAuth 
/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm 553 
with: Name: test.account 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:450)
[Fri Feb  3 18:20:32 2012] [debug]: Attempting to get user info using this 
external service: My_LDAP 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:458)
[Fri Feb  3 18:20:32 2012] [debug]: Attempting to use this canonicalization 
key: Name 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:472)
[Fri Feb  3 18:20:32 2012] [debug]: LDAP Search ===  Base: 
DC=xx,DC=xxx,DC=edu == Filter: 
(((ObjectCategory=User)(ObjectClass=Person))(sAMAccountName=test.account)) == 
Attrs: 
l,cn,st,mail,sAMAccountName,co,streetAddress,postalCode,telephoneNumber,sAMAccountName,physicalDeliveryOfficeName,sAMAccountName
 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:195)
[Fri Feb  3 18:20:32 2012] [info]: 
RT::Authen::ExternalAuth::CanonicalizeUserInfo returning Address1: , City: , 
Country: , EmailAddress: test.acco...@lcu.edu, ExternalAuthId: test.account, 
Gecos: test.account, Name: test.account, Organization: , RealName: Test 
Account, State: , WorkPhone: , Zip:  
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:536)
[Fri Feb  3 18:20:32 2012] [debug]: UPDATED user ( test.account ) from External 
Service 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:307)
[Fri Feb  3 18:20:32 2012] [info]: Successful login for test.account from 
10.1.5.9 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:219)
[Fri Feb  3 18:20:32 2012] [debug]: Autohandler called ExternalAuth. Response: 
(1, Successful login) 
(/opt/rt4/local/plugins/RT-Authen-ExternalAuth/html/Elements/DoAuth:11)

Van Howell
System Administrator
Lubbock Christian University


-Original Message-
From: rt-users-boun...@lists.bestpractical.com 
[mailto:rt-users-boun...@lists.bestpractical.com] On Behalf Of Kevin Falcone
Sent: Friday, February 03, 2012 11:32 AM
To: rt-users@lists.bestpractical.com
Subject: Re: [rt-users] External Auth using Active Directory 2008

On Thu, Feb 02, 2012 at 06:21:20PM +, Howell, Van wrote:
 I added Set($LogToSyslog, debug); to my RT_SiteConfig.pm file I 
 don't seem to be getting an more logging.
 I restarted the httpd service, didn't see any more logging so I restarted the 
 server.

Unfortunately - it seems you have syslog itself set to discard debug messages.  
You can try turning up $LogToScreen to debug and then check your webserver logs 
instead of your syslog logs.

-kevin

 This is the entire tail of the messages log
 
 [root@OpenNMS etc]# tail /var/log/messages Feb  2 11:56:45 localhost 
 abrtd: Dump directory is a duplicate of 
 /var/spool/abrt/ccpp-2012-02-01-14:08:36-18683
 Feb  2 11:56:45 localhost abrtd: Deleting dump directory 
 ccpp-2012-02-02-11:54:56-2567 (dup of ccpp-2012-02-01-14:08:36-18683), 
 sending dbus signal Feb  2 12:00:42 localhost RT: The actual HTTP_HOST 
 (192.168.1.200) does NOT match the configured WebDomain (lcu.edu). 
 Perhaps you should Set($WebDomain, '192.168.1.200'); in 
 RT_SiteConfig.pm, otherwise your internal links may be broken. 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:1087)
 Feb  2 12:05:43 localhost RT: The actual HTTP_HOST (192.168.1.200) 
 does NOT match the configured WebDomain (lcu.edu). Perhaps you should 
 Set($WebDomain, '192.168.1.200'); in RT_SiteConfig.pm, otherwise your 
 internal links may be broken. 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:1087)
 Feb  2 12:10:44 localhost RT: The actual HTTP_HOST (192.168.1.200) 
 does NOT match the configured WebDomain (helpdesk.lcu.edu). Perhaps 
 you should Set($WebDomain, '192.168.1.200'); in RT_SiteConfig.pm, 
 otherwise your internal links may be broken. 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:1087)
 Feb  2 12:14:00 localhost RT: My_LDAP AUTH FAILED: van.howell 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalA
 uth/LDAP.pm:127) Feb  2 12:14:00 localhost RT: FAILED LOGIN for 
 van.howell from 10.1.5.9 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:655)
 Feb  2 12:15:45 localhost RT: The actual HTTP_HOST (192.168.1.200) 
 does NOT match the configured WebDomain (helpdesk.lcu.edu). Perhaps 
 you should Set($WebDomain, '192.168.1.200'); in RT_SiteConfig.pm, 
 otherwise your internal links may be broken. 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:1087)
 Feb  2 12:16:16 localhost RT: My_LDAP 

Re: [rt-users] RT-to-RT communication

2012-02-03 Thread Alek Cesarz
Kevin Falcone pisze, W dniu 2012-02-03 18:42:
 Precedence: bulk
 
 This one ^ is going to cause the CheckForAutoGenerated method to
 return true, which will cause those headers you saw and turn off
 outgoing mail back to the auto generated user.  I'm not sure if there
 is a config you could use to turn this off unfortunately, since RT is
 trying to avoid having a mail loop.

maybe I can add a custom scrip which will unsquelch this email
address? the only question is if it will be fired before autoreply is
being sent...

 Do further correspondences on your local ticket sent to the external
 RT?

yes.

-- 
Alek

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston  March 5  6, 2012


Re: [rt-users] Filter by requestor email domain

2012-02-03 Thread Ram Moskovitz
Yep  changed the comparison from equality (eq) to match reg-exp (=~) and
was a bit more careful with my expression...

  '.*?\@example\.com',

The ? makes the * 'non-greedy' and the back-slashes make the dots literal.

thanks Bart,
ram


On Fri, Feb 3, 2012 at 1:45 AM, Bart b...@pleh.info wrote:

 I think your exception list is ok, but this line basically tells the if
 statement that the content needs to exactly match your list:

   return if grep { $ticketRequestor eq lc($_) } @exceptionList;

 Instead of eq you could try using =~ instead, below a little info:


 http://www.troubleshooters.com/codecorn/littperl/perlreg.htm#SymbolExplanations

 You might also need to edit the exception list with /@example.com/, or
 something like that.

 Maybe someone with a little more programming skills can reply on this ^_^
 I'm not sure if the above would work.

 -- Bart


 Op 2 februari 2012 21:56 schreef Ram Moskovitz ram0...@gmail.com het
 volgende:

 Thanks Bart,
 That looks good. I'm having an issue with it though - I need to match
 against a regexp for the exception list.. I added an entry like '*@
 example.com' to @exceptionlist  and rt is still sending out create
 confirmations. What am I missing?
 thanks!


 On Mon, Jan 30, 2012 at 2:41 AM, Bart b...@pleh.info wrote:

 Hi,

 We had a similar requirement for a bunch of e-mail addresses.

 This can be achieved by editing the autoreply scrip to look something
 like this:

- Condition: User Defined
- Action: Auto Reply To Requestors
- Template: Your AutoReply template
- Stage: TransactionCreate
- Custom Condition:


 my @exceptionList = ('na...@example.com',
  'na...@example.com',
  'na...@example.com');

 my $transactionType = $self-TransactionObj-Type;
 my $ticketRequestor = lc($self-TicketObj-RequestorAddresses);
 my $trans = $self-TransactionObj;

 if ($transactionType eq 'Create') {
   return if grep { $ticketRequestor eq lc($_) } @exceptionList;
   my $msgattr = $trans-Message-First;
   return 0 unless $msgattr;
   return 1 if $msgattr-GetHeader('Received');
 }
 return 0;

 In addition the above only sends an autoreply when someone sends an
 e-mail, in our case we don't like the autoreply mails when we manually
 create a ticket (e.g. via quick create).

 Hope this helps.

 -- Bart


 Op 25 januari 2012 21:02 schreef Ram Moskovitz ram0...@gmail.com het
 volgende:

  Hey there,
 I'm looking to not auto-reply on create to inbound emails from a
 certain domain ( anyth...@example.com and even anyth...@sd.example.com).
 I suppose the right way to go about this is via user defined condition in
 the global scrip for autoreply on create. I have steps 1 and 3.. what's
 step 2?

 1 return 0 unless $self-TransactionObj-Type eq Create;
 2 return 0 if #self-TicketObj-
 3 return 1

 thanks
 ram


 
 RT Training Sessions (http://bestpractical.com/services/training.html)
 * Boston — March 5  6, 2012






RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

Re: [rt-users] [rt 4.0.4] Unable to change status from New - Open

2012-02-03 Thread Jeff Blaine

You really want all local configs in RT_SiteConfig.pm, not
RT_Config.pm.  Next time you upgrade, any changes to RT_Config.pm will
be blown away.


Why doesn't Best Practical just do away this idea?

1. make install
  put new RT_Config.pm in place
  make a new 'RT_SiteConfig' help document from it (yes, Site)
  if there is an RT_SiteConfig.pm in place
  leave it alone
  else
  cp RT_Config.pm RT_SiteConfig.pm

2. Never mention RT_Config.pm anywhere.  Mention
   the help document you made from it.

[ Yes, I use RT_SiteConfig.pm, the gigantic WARNING ]
[ block in RT_Config.pm was obvious to me   ]

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston  March 5  6, 2012


[rt-users] rt-crontool question

2012-02-03 Thread Mark Fuller
I have 3 things we did from cron we updated to 4.0.2 from 3.6 and they
don’t work now. Can someone advise what I have to change



## At 3 am everyday send a notification to the requestors of tickets in
custpndng untouched for 3 days

30 3 */1 * * root /opt/rt4/bin/rt-crontool --search
RT::Search::TicketsWithStatus --search-arg custpndng --condition
RT::Condition::UntouchedInHours --condition-arg 72 --action
RT::Action::NotifyFromRTSystem --action-arg Requestor --template-id 20
--verbose  /var/log/cpend7daynotifyrequestor.out

#

## At 3 am everyday resolve tickets in custpndng untouched for 17 days

0 3 */1 * * root /opt/rt4/bin/rt-crontool --search
RT::Search::TicketsWithStatus --search-arg custpndng --condition
RT::Condition::UntouchedInHours --condition-arg 168 --action
RT::Action::SetStatus --action-arg resolved --verbose 
/var/log/cpend14dayresolve.out

#

## At 3 am everyday send a notification to the owners of open tickets
untouched in 1 days

45 3 */1 * * root /opt/rt4/bin/rt-crontool --search
RT::Search::TicketsWithStatus --search-arg open --condition
RT::Condition::UntouchedInHours --condition-arg 24 --action
RT::Action::NotifyFromRTSystem --action-arg Owner --template-id 21
--verbose  /var/log/open3daynotifyowner.out





I get an error when they run



[crit]: Failed to load module RT::Search::TicketsWithStatus. () at
/opt/rt4/bin/rt-crontool line 307. (/opt/rt4/bin/../lib/RT.pm:340)

Failed to load module RT::Search::TicketsWithStatus. () at
/opt/rt4/bin/rt-crontool line 307.



Thanks





Mark

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

Re: [rt-users] External Auth using Active Directory 2008

2012-02-03 Thread james machado
On Fri, Feb 3, 2012 at 10:55 AM, james machado hvgeekwt...@gmail.com wrote:
 I would use ldapsearch on that machine to make sure you can bind to
 the AD server using the login credentials in your Site_Config.  Make
 sure you are using the proper certificates to connect via the TLS you
 have configured.  I've noticed that being one of the biggest problems
 with ldap and Windows 2008 and 2008 R2 AD servers.

 james

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston  March 5  6, 2012


Re: [rt-users] [rt 4.0.4] Unable to change status from New - Open

2012-02-03 Thread Kevin Falcone
On Fri, Feb 03, 2012 at 01:34:52PM -0500, Jeff Blaine wrote:
 You really want all local configs in RT_SiteConfig.pm, not
 RT_Config.pm.  Next time you upgrade, any changes to RT_Config.pm will
 be blown away.
 
 Why doesn't Best Practical just do away this idea?
 
 1. make install
   put new RT_Config.pm in place
   make a new 'RT_SiteConfig' help document from it (yes, Site)
   if there is an RT_SiteConfig.pm in place
   leave it alone
   else
   cp RT_Config.pm RT_SiteConfig.pm
 
 2. Never mention RT_Config.pm anywhere.  Mention
the help document you made from it.

Because having an RT_SiteConfig.pm that is the same as RT_Config.pm
means that RT can never tell you if you overrode the setting.
Go look at the System Configuration page, note that for each setting
it says core vs site.  That's a tremendously useful piece of
information.

Also keep in mind that RT can read from 3, 4 or even 5 local config
files so you can keep your setting distinct.

Having a sparse RT_SiteConfig.pm also makes it trivial as a sysadmin
to tell what you've changed locally, especially when looking back
through your source control.

The solution here is not more separation of the config files, but
moving more configuration into the database which is something that is
being worked on.

-kevin


pgpnn44sboMxL.pgp
Description: PGP signature

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

Re: [rt-users] rt-crontool question

2012-02-03 Thread Kevin Falcone
On Fri, Feb 03, 2012 at 01:39:15PM -0500, Mark Fuller wrote:
I have 3 things we did from cron we updated to 4.0.2 from 3.6 and they 
 don*t work now. Can
someone advise what I have to change
 
## At 3 am everyday send a notification to the requestors of tickets in 
 custpndng untouched
for 3 days
 
30 3 */1 * * root /opt/rt4/bin/rt-crontool --search 
 RT::Search::TicketsWithStatus --search-arg

RT::Search::TicketsWithStatus isn't an RT built-in.  You'll either
need to port this customization from your 3.6 install or replace it with
RT::Search::FromSQL and an arg of something like  Status = 'custpndng'

-kevin

custpndng --condition RT::Condition::UntouchedInHours --condition-arg 72 
 --action
RT::Action::NotifyFromRTSystem --action-arg Requestor --template-id 20 
 --verbose 
/var/log/cpend7daynotifyrequestor.out
 
#
 
## At 3 am everyday resolve tickets in custpndng untouched for 17 days
 
0 3 */1 * * root /opt/rt4/bin/rt-crontool --search 
 RT::Search::TicketsWithStatus --search-arg
custpndng --condition RT::Condition::UntouchedInHours --condition-arg 168 
 --action
RT::Action::SetStatus --action-arg resolved --verbose  
 /var/log/cpend14dayresolve.out
 
#
 
## At 3 am everyday send a notification to the owners of open tickets 
 untouched in 1 days
 
45 3 */1 * * root /opt/rt4/bin/rt-crontool --search 
 RT::Search::TicketsWithStatus --search-arg
open --condition RT::Condition::UntouchedInHours --condition-arg 24 
 --action
RT::Action::NotifyFromRTSystem --action-arg Owner --template-id 21 
 --verbose 
/var/log/open3daynotifyowner.out
 
I get an error when they run
 
[crit]: Failed to load module RT::Search::TicketsWithStatus. () at 
 /opt/rt4/bin/rt-crontool
line 307. (/opt/rt4/bin/../lib/RT.pm:340)
 
Failed to load module RT::Search::TicketsWithStatus. () at 
 /opt/rt4/bin/rt-crontool line 307.


pgpgUvQTGZPk5.pgp
Description: PGP signature

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

Re: [rt-users] External Auth using Active Directory 2008

2012-02-03 Thread Kevin Falcone
On Fri, Feb 03, 2012 at 06:08:46PM +, Howell, Van wrote:
 Here is the Apache Log from my last login attempt
 
 [Fri Feb  3 18:02:40 2012] [debug]: Found LDAP DN: CN=Howell\, 
 Van,OU=Staff,OU=LCU,DC=xx,DC=xxx,DC=edu 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:75)

There was a bug reported about commas in DNs causing problems, I
wonder if you're running afoul of that (note that your testuser has a
different CN).

You can try with 0.09_02 which my colleague released last week and is
available on CPAN.  It contains a bugfix for this.

-kevin

 [Fri Feb  3 18:02:40 2012] [debug]: LDAP Search ===  Base: 
 DC=xx,DC=xxx,DC=edu == Filter: (member=CN=Howell, 
 Van,OU=Staff,OU=LCU,DC=xx,DC=xxx,DC=edu) == Attrs: dn 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:100)
 [Fri Feb  3 18:02:40 2012] [info]: My_LDAP AUTH FAILED: van.howell 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:127)
 [Fri Feb  3 18:02:40 2012] [debug]: LDAP password validation result: 0 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:334)
 [Fri Feb  3 18:02:40 2012] [debug]: Password Validation Check Result:  0 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:159)
 [Fri Feb  3 18:02:40 2012] [debug]: Autohandler called ExternalAuth. 
 Response: (0, Password Invalid) 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/html/Elements/DoAuth:11)
 [Fri Feb  3 18:02:40 2012] [error]: FAILED LOGIN for van.howell from 10.1.5.9 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:655)


pgpmJY5CvCaXh.pgp
Description: PGP signature

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

Re: [rt-users] [rt 4.0.4] Unable to change status from New - Open

2012-02-03 Thread Jeff Blaine

Because having an RT_SiteConfig.pm that is the same as RT_Config.pm
means that RT can never tell you if you overrode the setting.


Sure it can.  In those rare needs, the code can just compare
the value in RT_Config.pm to the one in RT_SiteConfig.pm.
If they're the same, it was not overridden.


Also keep in mind that RT can read from 3, 4 or even 5 local config
files so you can keep your setting distinct.

Having a sparse RT_SiteConfig.pm also makes it trivial as a sysadmin
to tell what you've changed locally, especially when looking back
through your source control.


Isn't that what revision diffs are for?

But okay.  Just had to throw the idea out there.

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston  March 5  6, 2012


[rt-users] RT stripping FROM on internal emails

2012-02-03 Thread Michele Hershey, CTR



Curiously, when an unprivileged RT users is sent a comment and they reply 
(internal users only...same domain as RT), the FROM is stripped and the comment 
in not entered into RT.  This used to work about 6 months ago.

What did we change?  That is an long list.

Here is the error message:
==
(/var/log/messages)

Feb  2 15:01:38 rt3 RT: Permission Denied 
(/opt/rt3/bin/../lib/RT/Interface/Email.pm:244)
Feb  2 15:01:38 rt3 RT: Could not record email: Message not recorded: 
Permission Denied
(/opt/rt-3.8.8/share/html/REST/1.0/NoAuth/mail-gateway:75)
=

Any place we could start looking would be helpful.  

Thanks,
Mich


 

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston  March 5  6, 2012


Re: [rt-users] [rt 4.0.4] Unable to change status from New - Open

2012-02-03 Thread Kevin Falcone
On Fri, Feb 03, 2012 at 02:21:22PM -0500, Jeff Blaine wrote:
 Because having an RT_SiteConfig.pm that is the same as RT_Config.pm
 means that RT can never tell you if you overrode the setting.
 
 Sure it can.  In those rare needs, the code can just compare
 the value in RT_Config.pm to the one in RT_SiteConfig.pm.
 If they're the same, it was not overridden.

That's not how RT's Config system works.
If you'd be interested in providing a patch to support this,
lib/RT/Config.pm is the right place to start.

 Also keep in mind that RT can read from 3, 4 or even 5 local config
 files so you can keep your setting distinct.
 
 Having a sparse RT_SiteConfig.pm also makes it trivial as a sysadmin
 to tell what you've changed locally, especially when looking back
 through your source control.
 
 Isn't that what revision diffs are for?
 
 But okay.  Just had to throw the idea out there.

You have revision diffs, I do too, that's an unusual situation.
Also, when you're handed an 8 year old RT install, it's easier to tell
what the maintainer who left 5 years ago did.

Again, the solution is probably to push more things into the DB where
we can have better control.

-kevin


pgp7olBItoDSJ.pgp
Description: PGP signature

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

[rt-users] 4.0.2 upgrade to 4.0.5

2012-02-03 Thread Scott Benson
I have an RT 4.0.2 box that I'd like to update to the newest 
version(4.0.5).  Are there any database changes, or anything that I 
should watch out for while upgrading?  Is there a walk through available 
for an upgrade like this?  Thanks in advance.


--
Scott Benson
System Administrator | A1 Networks
Voice: 707-703-1043

For support issues please email supp...@a-1networks.com or call 707-703-1050


RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston  March 5  6, 2012


Re: [rt-users] RT stripping FROM on internal emails

2012-02-03 Thread Kevin Falcone
On Fri, Feb 03, 2012 at 10:00:19AM -1000, Michele Hershey, CTR wrote:
 
 Curiously, when an unprivileged RT users is sent a comment and they
 reply (internal users only...same domain as RT), the FROM is stripped
 and the comment in not entered into RT. This used to work about 6
 months ago.
 
 What did we change?  That is an long list.
 
 Here is the error message:
 ==
 (/var/log/messages)
 
 Feb  2 15:01:38 rt3 RT: Permission Denied 
 (/opt/rt3/bin/../lib/RT/Interface/Email.pm:244)
 Feb  2 15:01:38 rt3 RT: Could not record email: Message not recorded: 
 Permission Denied
 (/opt/rt-3.8.8/share/html/REST/1.0/NoAuth/mail-gateway:75)
 =
 
 Any place we could start looking would be helpful.  

You can turn your logs up to debug and have them try again.
You probably removed Comment rights from Unprivileged users and left
them Reply rights, although I am confused by what is being stripped.

-kevin


pgpbOjjNNPCdy.pgp
Description: PGP signature

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

Re: [rt-users] rt-crontool question

2012-02-03 Thread Mark Fuller
That worked for the most part but now it has an issue sending out the
email using  SendEmailFromRTSystem  it breaks on

my $creator = $self-TransactionObj-CreatorObj-EmailAddress();

I have tried several other actions and they all do the same thing

Any suggestions

Mark

-Original Message-
From: rt-users-boun...@lists.bestpractical.com
[mailto:rt-users-boun...@lists.bestpractical.com] On Behalf Of Kevin
Falcone
Sent: Friday, February 03, 2012 2:01 PM
To: rt-users@lists.bestpractical.com
Subject: Re: [rt-users] rt-crontool question

On Fri, Feb 03, 2012 at 01:39:15PM -0500, Mark Fuller wrote:
I have 3 things we did from cron we updated to 4.0.2 from 3.6 and
they don*t work now. Can
someone advise what I have to change

## At 3 am everyday send a notification to the requestors of tickets
in custpndng untouched
for 3 days

30 3 */1 * * root /opt/rt4/bin/rt-crontool --search
RT::Search::TicketsWithStatus --search-arg

RT::Search::TicketsWithStatus isn't an RT built-in.  You'll either
need to port this customization from your 3.6 install or replace it with
RT::Search::FromSQL and an arg of something like  Status = 'custpndng'

-kevin

custpndng --condition RT::Condition::UntouchedInHours --condition-arg
72 --action
RT::Action::NotifyFromRTSystem --action-arg Requestor --template-id
20 --verbose 
/var/log/cpend7daynotifyrequestor.out

#

## At 3 am everyday resolve tickets in custpndng untouched for 17
days

0 3 */1 * * root /opt/rt4/bin/rt-crontool --search
RT::Search::TicketsWithStatus --search-arg
custpndng --condition RT::Condition::UntouchedInHours --condition-arg
168 --action
RT::Action::SetStatus --action-arg resolved --verbose 
/var/log/cpend14dayresolve.out

#

## At 3 am everyday send a notification to the owners of open tickets
untouched in 1 days

45 3 */1 * * root /opt/rt4/bin/rt-crontool --search
RT::Search::TicketsWithStatus --search-arg
open --condition RT::Condition::UntouchedInHours --condition-arg 24
--action
RT::Action::NotifyFromRTSystem --action-arg Owner --template-id 21
--verbose 
/var/log/open3daynotifyowner.out

I get an error when they run

[crit]: Failed to load module RT::Search::TicketsWithStatus. () at
/opt/rt4/bin/rt-crontool
line 307. (/opt/rt4/bin/../lib/RT.pm:340)

Failed to load module RT::Search::TicketsWithStatus. () at
/opt/rt4/bin/rt-crontool line 307.

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston  March 5  6, 2012


Re: [rt-users] External Auth using Active Directory 2008

2012-02-03 Thread Howell, Van
I ran the install again, The version it put on is 0.09
FALCONE/RT-Authen-ExternalAuth-0.09.tar.gz

Not the new version. I still have the same problem

I shelled into CPAN 
perl -MCPAN -e shell

then I ran 
install RT::Authen::ExternalAuth

Is there a different way?

Sorry for the dumb questions, but I'm new to this.

Van

From: rt-users-boun...@lists.bestpractical.com 
[rt-users-boun...@lists.bestpractical.com] on behalf of Kevin Falcone 
[falc...@bestpractical.com]
Sent: Friday, February 03, 2012 1:05 PM
To: rt-users@lists.bestpractical.com
Subject: Re: [rt-users] External Auth using Active Directory 2008

On Fri, Feb 03, 2012 at 06:08:46PM +, Howell, Van wrote:
 Here is the Apache Log from my last login attempt

 [Fri Feb  3 18:02:40 2012] [debug]: Found LDAP DN: CN=Howell\, 
 Van,OU=Staff,OU=LCU,DC=xx,DC=xxx,DC=edu 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:75)

There was a bug reported about commas in DNs causing problems, I
wonder if you're running afoul of that (note that your testuser has a
different CN).

You can try with 0.09_02 which my colleague released last week and is
available on CPAN.  It contains a bugfix for this.

-kevin

 [Fri Feb  3 18:02:40 2012] [debug]: LDAP Search ===  Base: 
 DC=xx,DC=xxx,DC=edu == Filter: (member=CN=Howell, 
 Van,OU=Staff,OU=LCU,DC=xx,DC=xxx,DC=edu) == Attrs: dn 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:100)
 [Fri Feb  3 18:02:40 2012] [info]: My_LDAP AUTH FAILED: van.howell 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth/LDAP.pm:127)
 [Fri Feb  3 18:02:40 2012] [debug]: LDAP password validation result: 0 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:334)
 [Fri Feb  3 18:02:40 2012] [debug]: Password Validation Check Result:  0 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm:159)
 [Fri Feb  3 18:02:40 2012] [debug]: Autohandler called ExternalAuth. 
 Response: (0, Password Invalid) 
 (/opt/rt4/local/plugins/RT-Authen-ExternalAuth/html/Elements/DoAuth:11)
 [Fri Feb  3 18:02:40 2012] [error]: FAILED LOGIN for van.howell from 10.1.5.9 
 (/opt/rt4/sbin/../lib/RT/Interface/Web.pm:655)


RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston  March 5  6, 2012


Re: [rt-users] rt-crontool question

2012-02-03 Thread Kevin Falcone
On Fri, Feb 03, 2012 at 06:12:57PM -0500, Mark Fuller wrote:
 That worked for the most part but now it has an issue sending out the
 email using  SendEmailFromRTSystem  it breaks on
 
 my $creator = $self-TransactionObj-CreatorObj-EmailAddress();
 
 I have tried several other actions and they all do the same thing


I forgot to mention that SendEmailFromRTSysten is *also* a custom
action you'll need to forward port.  You might get away with the
Notify action, you'll definitely need to provide the --transaction
command line argument, which you can read more about in the initial
--help.

-kevin

 
 -Original Message-
 From: rt-users-boun...@lists.bestpractical.com
 [mailto:rt-users-boun...@lists.bestpractical.com] On Behalf Of Kevin
 Falcone
 Sent: Friday, February 03, 2012 2:01 PM
 To: rt-users@lists.bestpractical.com
 Subject: Re: [rt-users] rt-crontool question
 
 On Fri, Feb 03, 2012 at 01:39:15PM -0500, Mark Fuller wrote:
 I have 3 things we did from cron we updated to 4.0.2 from 3.6 and
 they don*t work now. Can
 someone advise what I have to change
 
 ## At 3 am everyday send a notification to the requestors of tickets
 in custpndng untouched
 for 3 days
 
 30 3 */1 * * root /opt/rt4/bin/rt-crontool --search
 RT::Search::TicketsWithStatus --search-arg
 
 RT::Search::TicketsWithStatus isn't an RT built-in.  You'll either
 need to port this customization from your 3.6 install or replace it with
 RT::Search::FromSQL and an arg of something like  Status = 'custpndng'
 
 -kevin
 
 custpndng --condition RT::Condition::UntouchedInHours --condition-arg
 72 --action
 RT::Action::NotifyFromRTSystem --action-arg Requestor --template-id
 20 --verbose 
 /var/log/cpend7daynotifyrequestor.out
 
 #
 
 ## At 3 am everyday resolve tickets in custpndng untouched for 17
 days
 
 0 3 */1 * * root /opt/rt4/bin/rt-crontool --search
 RT::Search::TicketsWithStatus --search-arg
 custpndng --condition RT::Condition::UntouchedInHours --condition-arg
 168 --action
 RT::Action::SetStatus --action-arg resolved --verbose 
 /var/log/cpend14dayresolve.out
 
 #
 
 ## At 3 am everyday send a notification to the owners of open tickets
 untouched in 1 days
 
 45 3 */1 * * root /opt/rt4/bin/rt-crontool --search
 RT::Search::TicketsWithStatus --search-arg
 open --condition RT::Condition::UntouchedInHours --condition-arg 24
 --action
 RT::Action::NotifyFromRTSystem --action-arg Owner --template-id 21
 --verbose 
 /var/log/open3daynotifyowner.out
 
 I get an error when they run
 
 [crit]: Failed to load module RT::Search::TicketsWithStatus. () at
 /opt/rt4/bin/rt-crontool
 line 307. (/opt/rt4/bin/../lib/RT.pm:340)
 
 Failed to load module RT::Search::TicketsWithStatus. () at
 /opt/rt4/bin/rt-crontool line 307.
 
 RT Training Sessions (http://bestpractical.com/services/training.html)
 * Boston  March 5  6, 2012


pgp8RCKRyZI1x.pgp
Description: PGP signature

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

Re: [rt-users] 4.0.2 upgrade to 4.0.5

2012-02-03 Thread Kevin Falcone
On Fri, Feb 03, 2012 at 02:25:15PM -0800, Scott Benson wrote:
 I have an RT 4.0.2 box that I'd like to update to the newest
 version(4.0.5).  Are there any database changes, or anything that I
 should watch out for while upgrading?  Is there a walk through
 available for an upgrade like this?  Thanks in advance.

There are database upgrades, as the README specifies, you can run make
upgrade-database and it'll prompt you for your version.

All of the documentation you need is in the README and the
docs/UPGRADING-4.0 file.

-kevin


pgpbPyL9pz3Rh.pgp
Description: PGP signature

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

Re: [rt-users] 4.0.2 upgrade to 4.0.5

2012-02-03 Thread Kevin Falcone
On Fri, Feb 03, 2012 at 04:06:29PM -0800, Scott Benson wrote:
 
 On 2/3/12 3:52 PM, Kevin Falcone wrote:
 There are database upgrades, as the README specifies, you can run make
 upgrade-database and it'll prompt you for your version.
 
 All of the documentation you need is in the README and the
 docs/UPGRADING-4.0 file.

 well, after attempting to update, we're getting this
 
* Config file /opt/rt4/etc/RT_SiteConfig.pm is locked
 
 The file isn't opened by anything, it's not listed in lsof, no .swp
 file or anything.  Thanks in advance.

This implies that your RT has gone into Install mode.
Have you looked in the RT logs?  Most of the time, this is because
your database server is unreachable.

-kevin


pgpBddfKUsKPh.pgp
Description: PGP signature

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012