Only super-user can see something after logon to RT, no one else

Helo,
I think I must have some mismatch in my RT’s users rights settings. When
user with super-user rights login, then he can see everything on RT. But
if someone other is login to the RT then he is getting just blank page.
I can’t see anything wrong in my users rights settings, and I could not
find where the problem is.
Another problem I have is that privileged users (staff members) don’t
getting any mail about new request. Even I was put some users as
AdminCC, than the user still getting no mail from RT. Autoreply is
working well, so I guess that mail system(Exim) is ok.
Please anybody know some resolutions for my problems? I’m using RT 3.0.9.
Thanks,
David

David Michal wrote:

Helo,
I think I must have some mismatch in my RT’s users rights settings. When
user with super-user rights login, then he can see everything on RT. But
if someone other is login to the RT then he is getting just blank page.
Blank or RT layout with emptylists? ‘blank page’ is bad.
What do log files tell?

Unfortonatelly other users are getting just blank page. They can see
nothing in their internet browser. Log files telling nothing about this.
In log files I can find some standard messages about new tickets,
sending mails etc. Log of Apache telling nothing important too. I just
can see that the browser is connected.
Could be a problem that my RT is running inside chroot? (that’s because
my other stable app is using older perl than RT).
I found other problem in RT. I have user name david.michal@rabatcr.cz
and I want to fill email address in RT. If I’m trying to fill
david.michal@rabatcr.cz as email address, then I’m getting message “bad
value in email address”, if I’m trying to fill michal@rabatcr.cz as
email address then everything is ok. So should I understand that email
address must be different than user name? I hope not, because I have all
users in LDAP directory and all user’s names are the same as their email
address.
But the problem with ‘nothing in internet browser’ is more important for
me. :frowning:
Thanks,
David

Ruslan U. Zakirov napsal(a):

David Michal wrote:

Unfortonatelly other users are getting just blank page. They can see
nothing in their internet browser. Log files telling nothing about this.
In log files I can find some standard messages about new tickets,
sending mails etc. Log of Apache telling nothing important too. I just
can see that the browser is connected.
Could be a problem that my RT is running inside chroot? (that’s because
my other stable app is using older perl than RT).
Didn’t play a lot with chroot env and also didn’t see situation when one
RT user can see WebUI, but another can’t.

I found other problem in RT. I have user name david.michal@rabatcr.cz
and I want to fill email address in RT. If I’m trying to fill
david.michal@rabatcr.cz as email address, then I’m getting message “bad
value in email address”, if I’m trying to fill michal@rabatcr.cz as
email address then everything is ok. So should I understand that email
address must be different than user name?
It’s confusing error mean: user allready exists. :slight_smile: You have such user
in unpriveleged group I think.

It happened also once to me about blank pages.
I already had a user, that was added as watcher, and had his username and mail the same.
Es he did a log in to the web interface, my system did an LDAP lookup and wanted to create a new user with the same mail address
There is no error output, but the user can’t be created, so the page display is not processed… And you get a blank page.

I don’t know if it’s a problem in core RT or our import user info using LDAP, perhaps half half… So anyway,
As soon I have time i will post my patch, but if somebody other has an idea…

Thanks

sAmuel

If you have problems in notifications of certain persons, look at debug level logging, you can see which scripts find users to send mail to.
If you see no recipients found, or no other address except the adresses that get the mail look at your scripts.

SamuelFrom: Ruslan U. Zakirov [mailto:cubic@acronis.ru]
Sent: Wednesday,12 May,2004 18:53
To: david.michal@rabatcr.cz
Cc: rt-users@lists.bestpractical.com
Subject: Re: [rt-users] Only super-user can see something after logon to RT,no one else.

David Michal wrote:

Helo,
I think I must have some mismatch in my RT’s users rights settings.
When user with super-user rights login, then he can see everything on
RT. But if someone other is login to the RT then he is getting just blank page.
Blank or RT layout with emptylists? ‘blank page’ is bad.
What do log files tell?

I can’t see anything wrong in my users rights settings, and I could
not find where the problem is.
Another problem I have is that privileged users (staff members) don’t
getting any mail about new request. Even I was put some users as
AdminCC, than the user still getting no mail from RT. Autoreply is
working well, so I guess that mail system(Exim) is ok.
Please anybody know some resolutions for my problems? I’m using RT 3.0.9.
Thanks,
David

http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

RT Developer and Administrator training is coming to LA, DC and Frankfurt this spring and summer.
http://bestpractical.com/services/training.html

Sign up early, as class space is limited.

Hi,

Is it possible to have a user with only read-only acces to the WebUI.
I want some users be able to only consult tickets opened by others users
from the same company but this user must not be able to open new ticket.

I don’t have group for a company.
I don’t have queue for a company.

With this configuration, is there a solution ?

Jean-Pierre.FORCIOLI@cyber-networks.fr CYBER NETWORKS
http://www.freebsd.org http://www.cyber-networks.fr
PGP Key fingerprint = 9AEA 910F CB46 C39B 89EE EF4C 68AC 2AF1 CF17 3713

signature.asc (187 Bytes)

Hi,

Is it possible to have a user with only read-only acces to the WebUI.
I want some users be able to only consult tickets opened by others users
from the same company but this user must not be able to open new ticket.

I don’t have group for a company.
I don’t have queue for a company.

With this configuration, is there a solution ?

Jean-Pierre.FORCIOLI@cyber-networks.fr CYBER NETWORKS
http://www.freebsd.org http://www.cyber-networks.fr
PGP Key fingerprint = 9AEA 910F CB46 C39B 89EE EF4C 68AC 2AF1 CF17 3713

signature.asc (187 Bytes)

Hi,
Thanks for your reply. I thought that RT doesn’t have any LDAP support.
That it just can take user name from apache, which is doing ldap lookup.
And then I thought that RT is looking if there is a user in
DBbackend(MySQL in my case) and if not and parameter WebExternalAuto is
true only then is trying to create the user. So if there is user already
exists why it should stop on user creating procedure? (I’m not a
programmer so please excuse if my thinking is bad).
I’ve didn’t try the Ldap Overlay plugin, becuase the link
http://thefeed.no/marcus/User_Overlay.ldap.pm is not working and I could
not find it. But I guess that auth via apache is quite enough for now.
Just to need to find any way how user can see their RT in browser. :slight_smile:
Thanks,
David

Senoner Samuel napsal(a):

As I understood your problem where a user with an e-mail address that already exists, try to do a search on users with this specific mail address and also include disabled users. Delete the user you don’t want, and the other user can be created.
Anyway if you activate debug logging you should see the error.

Samuel

Jean-Pierre FORCIOLI wrote:

Hi,

Is it possible to have a user with only read-only acces to the WebUI.
I want some users be able to only consult tickets opened by others users
from the same company but this user must not be able to open new ticket.

I don’t have group for a company.
I don’t have queue for a company.

With this configuration, is there a solution ?
May be this article can help you.
Request Tracker Wiki
There is also cross-links almost on all RT rights.