SelfService and Apache Authentication

I just started using RT in a pilot mode for mangaging tasks in my
group… I’m also using it as a document review mechanism for a
documentation project we’re doing. Nice…

I enabled user authentication via the REMOTE_USER variable and it seems
to work great for both priv and non-priv users.

Except… that when I submit a request from another site (same company,
different mail domain), the name of the user sending in the request is
recorded in the Users table as the mail address. Unfortunately, I can’t
authenticate the user by e-mail address (there are too many possiblities
per user), so now the user can’t login.

Am I doing something wrong? Shouldn’t RT strip off everything after the
@? I tried manually updating the Users database so that the @ and all
text after it was stripped from the Name field, and that seems to have
done the trick.

Are there any problems with stripping the @.* from the Name field as far
as WebRT is concerned? Any idea where in the Code I should look to
permanantly strip the @.* from the Name field only?

Thanks for your help!

-Eric

Eric Horne wrote:

Am I doing something wrong? Shouldn’t RT strip off everything after the
@?

No. Otherwise it’d see eric@your.domain as the same guy as
eric@some.unrelated.company.

Are there any problems with stripping the @.* from the Name field as far
as WebRT is concerned? Any idea where in the Code I should look to
permanantly strip the @.* from the Name field only?

Do it the Right Way™: edit the CanonicalizeAddress routine
in config.pm to munge *@dept.your.domain into *@your.domain. :slight_smile:
Phil Homewood, Systems Janitor, www.SnapGear.com
pdh@snapgear.com Ph: +61 7 3435 2810 Fx: +61 7 3891 3630
SnapGear - Custom Embedded Solutions and Security Appliances

Well, Gee… I wish I would have thought of that - the right way :slight_smile:

Thanks, Phil! This is exactly what I was looking for.

-Eric

Phil Homewood wrote:

I just started using RT in a pilot mode for mangaging tasks in my group…

I enabled user authentication via the REMOTE_USER variable and it seems
to work great for both priv and non-priv users.

Except… that when I submit a request from another site (same company,
different mail domain), the name of the user sending in the request is
recorded in the Users table as the mail address. Unfortunately, I can’t
authenticate the user by e-mail address (there are too many possiblities
per user), so now the user can’t login.

Am I doing something wrong? Shouldn’t RT strip off everything after the
@? I tried manually updating the Users database so that the @ and all
text after it was stripped from the Name field, and that seems to have
done the trick.

Are there any problems with stripping the @.* from the Name field as far
as WebRT is concerned? Any idea where in the Code I should look to
permanantly strip the @.* from the Name field only?

Thanks for your help!

-Eric

Except… that when I submit a request from another site (same
company, different mail domain), the name of the user sending in the
request is recorded in the Users table as the mail
address. Unfortunately, I can’t authenticate the user by e-mail
address (there are too many possiblities per user), so now the user
can’t login.

I’m having a hard time understanding your question. but perhaps you
want to look at the CanonicalizeAddress in the config file. If that’s
not what you mean, could you re-phrase it?

seph