Re: [rt-users] auto-populate email from short username?
On 05/28/13 01:00 PM, Kevin Falcone wrote: As mentioned earlier by my colleague, you can use http://bestpractical.com/rt/docs/latest/RT/User.html#CanonicalizeUserInfo-HASH-of-ARGS to massage the user data during creation. Thanks for the reference. However... that particular link seems to merely "reference" that the capability exists somehow. I cant' fathom how to use it. Could you point me to any examples of how to actually use it, please? -- RT Training in Seattle, June 19-20: http://bestpractical.com/training
[rt-users] shredder on specific user
After doing a few searches, it seems that using the "rt-shredder" tool is the one true way to delete a user. Unfortunately... i find the documentation on it, inscruitable :( Could someone please give me a simple, straightforward commandline to delete user X? I was hoping it would be as simple as rt-shredder --plugin User name=doomeduser but that does not seem to be adequate. -- RT Training in Seattle, June 19-20: http://bestpractical.com/training
Re: [rt-users] auto-populate email from short username?
On 5/15/13 3:27 PM, Jok Thuau wrote: It would be an interesting scrip, but I believe you would be able to update the user from a "on create" scrip, and update that one user's email from ldap. other than I want this to be "from account name", not "from ldap", this sounds fine.:] but... isnt an "on create" script, related to *ticket creation*, not user creation? -- RT Training in Seattle, June 19-20: http://bestpractical.com/training
[rt-users] auto-populate email from short username?
Well, lets try a simpler, hopefully easier to tackle subject line :) lets say I have autocreate turned on. And accounts get created just fine when someone authenticates via web. ... however, the autocreated account name will be just the username. no @my.com What's the best way to get the email field set, with @my.com added, when the account is autocreated? -- RT Training in Seattle, June 19-20: http://bestpractical.com/training
Re: [rt-users] REMOTE_USER, external auth, and email mismatching
Err.. thanks, but that's not what I'm looking for. For one thing, even if I got permission to do that (which I wont), we have 40,000 users in ldap. I dont actually WANT all of them in the rt database. particularly since we have a 15,000 user/year churn rate. From: Jok Thuau [jth...@spacex.com] Sent: Tuesday, May 14, 2013 05:36 PM To: Philip Brown; rt-users@lists.bestpractical.com Subject: Re: [rt-users] REMOTE_USER, external auth, and email mismatching I have use the LDAPImport extension to pull all my users out of AD into RT. I even submitted a patch on the cpan bug tracker to add a feature to "automatically grant rights" to some groups based on LDAP queries. (and you'll probably need to "merge" the users that you have now into their imported equivalent) Thanks, Jok -- | Joachim Thuau | IT Systems Engineer - Linux / SpaceX | On 5/14/13 1:41 PM, "Philip Brown" wrote: >On 04/26/13 04:38 PM, Thomas Sibley wrote: >> On 04/26/2013 02:35 PM, Philip Brown wrote: >>> hi there, >>> We are looking at using kerb auth and mod_auth_kerb as our external >>>auth mechanism for RT. >>> >>> ... I was hoping there was potentially a way to do any of the >>>following: >>> >>> a) automatically drop the @xyz from REMOTE_USER entirely >>> b) autoconvert the @xyz to @real.domain >>> >>> c) (least preferable) have the autocreate routines, atomatically fill >>>in @real.domain as the email address >> You can accomplish (b) with these options: >> >>http://bestpractical.com/rt/docs/latest/RT_Config.html#CanonicalizeEmailA >>ddressMatch-CanonicalizeEmailAddressReplace >> >> You can also do more sophisticated munging by writing your own >> RT::User::CanonicalizeUserInfo: >> >>http://bestpractical.com/rt/docs/latest/RT/User.html#CanonicalizeUserInfo >>-HASH-of-ARGS >> >> Or you can take the easy way of (a) by setting the mod_auth_kerb config >> option that Jok pointed out earlier. >> > > >Well, I'm back, now that I've had more time to follow up :) > >I have tried out using the KrbLocalUser tweak, and run into problems. >The email field does not get filled out on autocreate of an account. > >I then attempted to do the fallback suggested via > >CanonicalizeEmailAddressMatch > >after removing the KrbLocalUser from my apache configs. >however, the replace did not seem to have any effect. I'm still getting >logged in as >u...@kerb.my.com >rather than u...@my.com > >for the record, I'm using a match string of >'\@.*\.my.com$' > >and replace of >'\@my.com' > >it's kinda odd that I cant seem to google any sample RT_Config.pm files >for this' > > > > > >-- >RT Training in Seattle, June 19-20: http://bestpractical.com/training -- RT Training in Seattle, June 19-20: http://bestpractical.com/training
Re: [rt-users] REMOTE_USER, external auth, and email mismatching
On 04/26/13 04:38 PM, Thomas Sibley wrote: On 04/26/2013 02:35 PM, Philip Brown wrote: hi there, We are looking at using kerb auth and mod_auth_kerb as our external auth mechanism for RT. ... I was hoping there was potentially a way to do any of the following: a) automatically drop the @xyz from REMOTE_USER entirely b) autoconvert the @xyz to @real.domain c) (least preferable) have the autocreate routines, atomatically fill in @real.domain as the email address You can accomplish (b) with these options: http://bestpractical.com/rt/docs/latest/RT_Config.html#CanonicalizeEmailAddressMatch-CanonicalizeEmailAddressReplace You can also do more sophisticated munging by writing your own RT::User::CanonicalizeUserInfo: http://bestpractical.com/rt/docs/latest/RT/User.html#CanonicalizeUserInfo-HASH-of-ARGS Or you can take the easy way of (a) by setting the mod_auth_kerb config option that Jok pointed out earlier. Well, I'm back, now that I've had more time to follow up :) I have tried out using the KrbLocalUser tweak, and run into problems. The email field does not get filled out on autocreate of an account. I then attempted to do the fallback suggested via CanonicalizeEmailAddressMatch after removing the KrbLocalUser from my apache configs. however, the replace did not seem to have any effect. I'm still getting logged in as u...@kerb.my.com rather than u...@my.com for the record, I'm using a match string of '\@.*\.my.com$' and replace of '\@my.com' it's kinda odd that I cant seem to google any sample RT_Config.pm files for this' -- RT Training in Seattle, June 19-20: http://bestpractical.com/training
Re: [rt-users] REMOTE_USER, external auth, and email mismatching
(arg, outlook.com...) From: rt-users-boun...@lists.bestpractical.com [rt-users-boun...@lists.bestpractical.com] on behalf of Thomas Sibley [t...@bestpractical.com] Sent: Friday, April 26, 2013 04:38 PM To: rt-users@lists.bestpractical.com Subject: Re: [rt-users] REMOTE_USER, external auth, and email mismatching On 04/26/2013 02:35 PM, Philip Brown wrote: > > > So, I was hoping there was potentially a way to do any of the following: > > a) automatically drop the @xyz from REMOTE_USER entirely > b) autoconvert the @xyz to @real.domain You can accomplish (b) with these options: http://bestpractical.com/rt/docs/latest/RT_Config.html#CanonicalizeEmailAddressMatch-CanonicalizeEmailAddressReplace Thanks for the tip. I followed the link, but it didnt explicitly give an answer to the following question. For posterity and the list archive's sake: does it also work for extern auth? In other words, when it auto-creates an account, will it rewrite the *account name*? Or will it just get triggered on actual email that comes in?
[rt-users] REMOTE_USER, external auth, and email mismatching
hi there, We are looking at using kerb auth and mod_auth_kerb as our external auth mechanism for RT. Trouble is.. our kerb domain is not the same as people's email address domain. We have mumble-thousand users. Hand-populating things is not an option. So, I was hoping there was potentially a way to do any of the following: a) automatically drop the @xyz from REMOTE_USER entirely b) autoconvert the @xyz to @real.domain c) (least preferable) have the autocreate routines, atomatically fill in @real.domain as the email address
