Option to Emulate another RT user from SuperUser

RT Users
1

At time some folks on campus report that RT is slow for them.

I try to create a test user with the same access but this does not always help me because they may have a lot of tickets or a dashboard item/report that I cannot emulate.

Does RT have any built-in mechanism for SuperUser to do such a thing.

We use single sign on and thus I am unable to override that.

Thanks

Joe

Joe Kirby , Assistant Vice President, Business Systems
Division of Information Technology (DoIT)
Support Response - http://www.umbc.edu/doit
Administration 627
Office - 410-455-3020
Email - kirby@umbc.edu

2

At time some folks on campus report that RT is slow for them.

I try to create a test user with the same access but this does not always
help me because they may have a lot of tickets or a dashboard item/report
that I cannot emulate.

I wouldn’t try to recreate the user that is experiencing slowness. I
would try to work with that person.

Does RT have any built-in mechanism for SuperUser to do such a thing.

I would start off by enabling query execute time logging. Search the
internet for “slow query logging” and your database and you’ll get the
instructions for enabling the logging.

We use single sign on and thus I am unable to override that.

We use SSO and if you wanted to side step that, there are mechanisms.

-m

3

We recently turned of Set($UseSQLForACLChecks, 1) for performance reasons.

Are you saying we could have a special config in place that would allow me to access our system in non-SSO mode or would I have to cloned the db to such an area?

Thanks for getting back so quickly

Joe

Joe Kirby , Assistant Vice President, Business Systems
Division of Information Technology (DoIT)
Support Response - http://www.umbc.edu/doit
Administration 627
Office - 410-455-3020
Email - kirby@umbc.edu> On Nov 12, 2015, at 1:37 PM, ktm@rice.edu wrote:

On Thu, Nov 12, 2015 at 01:23:53PM -0500, Joe Kirby wrote:

At time some folks on campus report that RT is slow for them.

I try to create a test user with the same access but this does not always help me because they may have a lot of tickets or a dashboard item/report that I cannot emulate.

Does RT have any built-in mechanism for SuperUser to do such a thing.

We use single sign on and thus I am unable to override that.

Thanks

Joe

Joe Kirby , Assistant Vice President, Business Systems
Division of Information Technology (DoIT)
Support Response - http://www.umbc.edu/doit
Administration 627
Office - 410-455-3020
Email - kirby@umbc.edu

Hi Joe,

You might be able to set up an alternate frontend configured to use
local authentication. Then you could test with that by setting a local
password for the account. What version are you running and are you do
you have Set($UseSQLForACLChecks, 1) in your RT_SiteConfig.pm? Superuser
skips all of the access checks that regular accounts pass through.

Regards,
Ken

4

We recently turned of Set($UseSQLForACLChecks, 1) for performance reasons.

Sorry. Haven’t used that setting yet.

Are you saying we could have a special config in place that would allow me
to access our system in non-SSO mode or would I have to cloned the db to
such an area?

We bypass it via the browser user agent. Here is a snippet from our
apache configs:

SetEnvIf User-Agent ^KnockKnock let_me_in

# Allow either Shib-ed users or KnockKnock agents to be able to access the
# system. KnockKnock agents will still have to authenticate to the local
# RT login page.
<Location />
    <RequireAny>
        AuthType shibboleth
        ShibRequireSession on
        Require valid-user

        Require env let_me_in
    </RequireAny>

    Options +ExecCGI
    AddHandler fastcgi-script fcgi
</Location>

Then to access RT’s login page, change your browser’s user agent to
“KnockKnock” or whatever string you choose.

-m

5

At time some folks on campus report that RT is slow for them.

I try to create a test user with the same access but this does not always help me because they may have a lot of tickets or a dashboard item/report that I cannot emulate.

Does RT have any built-in mechanism for SuperUser to do such a thing.

We use single sign on and thus I am unable to override that.

Thanks

Joe

Joe Kirby , Assistant Vice President, Business Systems
Division of Information Technology (DoIT)
Support Response - http://www.umbc.edu/doit
Administration 627
Office - 410-455-3020
Email - kirby@umbc.edu

Hi Joe,

You might be able to set up an alternate frontend configured to use
local authentication. Then you could test with that by setting a local
password for the account. What version are you running and are you do
you have Set($UseSQLForACLChecks, 1) in your RT_SiteConfig.pm? Superuser
skips all of the access checks that regular accounts pass through.

Regards,
Ken

6

Search github for: RTx-BecomeUser this Could help you.> Am 12.11.2015 um 19:23 schrieb Joe Kirby kirby@umbc.edu:

At time some folks on campus report that RT is slow for them.

I try to create a test user with the same access but this does not always help me because they may have a lot of tickets or a dashboard item/report that I cannot emulate.

Does RT have any built-in mechanism for SuperUser to do such a thing.

We use single sign on and thus I am unable to override that.

Thanks

Joe

Joe Kirby , Assistant Vice President, Business Systems
Division of Information Technology (DoIT)
Support Response - http://www.umbc.edu/doit
Administration 627
Office - 410-455-3020
Email - kirby@umbc.edu