<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2653.12">
<TITLE>RE: [rt-users] Can't find in docs: how users check ticket status?</TITLE>
</HEAD>
<BODY>
<BR>
<P><FONT SIZE=2>I'm using RT strictly as an internal application, on my intranet. My site is not publicly accessible, and I don't have a problem with my users looking at any ticket. If all autocreated users are by default "Non-Privileged", then isn't RT still secure? I'm not allowing them to change tickets, just view them.</FONT></P>
<P><FONT SIZE=2>It might be nice to have something in RT_SiteConfig, to allow/not allow "default" autocreated passwords and be able to set that password.</FONT></P>
<P><FONT SIZE=2>In the meantime, I'll try and locate the thread about random passwords (any ideas about the month?).</FONT>
</P>
<P><FONT SIZE=2>-Mike M.</FONT>
</P>
<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: Ruslan U. Zakirov [<A HREF="mailto:cubic@acronis.ru">mailto:cubic@acronis.ru</A>] </FONT>
<BR><FONT SIZE=2>Sent: Monday, January 05, 2004 11:54 AM</FONT>
<BR><FONT SIZE=2>To: Maloney, Michael</FONT>
<BR><FONT SIZE=2>Cc: rt-users@lists.bestpractical.com</FONT>
<BR><FONT SIZE=2>Subject: Re: [rt-users] Can't find in docs: how users check ticket status?</FONT>
</P>
<BR>
<P><FONT SIZE=2>Maloney, Michael wrote:</FONT>
<BR><FONT SIZE=2>> Same problem here. When a new autocreated user gets added to the</FONT>
<BR><FONT SIZE=2>> database, their password is set to "*NO PASSWORD*", however, the "STAFF" </FONT>
<BR><FONT SIZE=2>> user passwords have been hashed (MD5???) and are scrambled. So I think </FONT>
<BR><FONT SIZE=2>> the problem is that the autocreated passwords are in the database in </FONT>
<BR><FONT SIZE=2>> clear text, but should be hashed. I don't care if an autocreated user's </FONT>
<BR><FONT SIZE=2>> password is set to "password" or whatever, just as long as I don't have </FONT>
<BR><FONT SIZE=2>> to do any manual steps to correct the password.</FONT>
<BR><FONT SIZE=2>As I've understood you want specify password for autocreated users. I don't know way to do it. It's just wrong and insecure. There was threads on the list about generating random passwords for new </FONT></P>
<P><FONT SIZE=2>users, you have to read them.</FONT>
<BR> <FONT SIZE=2>Good luck. Ruslan.</FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> -----Original Message-----</FONT>
<BR><FONT SIZE=2>> From: Michael Marziani [<A HREF="mailto:marziani@oasis.com">mailto:marziani@oasis.com</A>]</FONT>
<BR><FONT SIZE=2>> Sent: Monday, January 05, 2004 11:30 AM</FONT>
<BR><FONT SIZE=2>> To: rt-users@lists.bestpractical.com</FONT>
<BR><FONT SIZE=2>> Subject: RE: [rt-users] Can't find in docs: how users check ticket </FONT>
<BR><FONT SIZE=2>> status?</FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> Ok, I am attempting to log into the self-service as an unprivileged</FONT>
<BR><FONT SIZE=2>> (autocreated) user, but it will not allow this without a password. Is</FONT>
<BR><FONT SIZE=2>> there a default password set up for autocreated users? Thanks!</FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> -Michael</FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> ----------------------------------------------------------------------</FONT>
<BR><FONT SIZE=2>> --</FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> _______________________________________________</FONT>
<BR><FONT SIZE=2>> rt-users mailing list</FONT>
<BR><FONT SIZE=2>> rt-users@lists.bestpractical.com </FONT>
<BR><FONT SIZE=2>> <A HREF="http://lists.bestpractical.com/mailman/listinfo/rt-users" TARGET="_blank">http://lists.bestpractical.com/mailman/listinfo/rt-users</A></FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> Have you read the FAQ? The RT FAQ Manager lives at </FONT>
<BR><FONT SIZE=2>> <A HREF="http://fsck.com/rtfm" TARGET="_blank">http://fsck.com/rtfm</A></FONT>
</P>
<BR>
</BODY>
</HTML>