Never Mind -- was Re: [rt-users] privilege corruption problem

Bob Goldstein bobg at uic.edu
Fri Dec 10 12:26:15 EST 2004


  Sorry to have bothered people.  The issue has to do
  with a particular RT account (and possible email parsing)
  rather than with generic privs like I thought.
  So I'm still debugging, but my analysis is now very different.

     bobg

>
>I have several RT instances, all running the same code
>(with possible minor tweaks), but with separate configs
>and databases.
>
>Everything is fine.  But last night I added a new email
>address and queue to one instance.  Somehow I am unable
>now to create a new ticket by email in any queue in
>that instance.  I get:
>No permission to create tickets in the queue 'oaradmit'
>
>If I give createTicket privs to an individual
>account, no problem. But if I give global createTicket privs to
>"everyone", even if I make global "everyone" a superuser, no dice. It
>just seems that the global "everyone" privs are ignored.
>
>Because the code is the same for the other instances
>in which this works just fine, I assume there is something
>screwed up in the database.  But I'm not quite sure what
>to look for.  If anyone can send me a tiny clue, I'd
>sure appreciate it.   I've tried comparing the raw data
>in the ACL table with other RT instances that work,
>but they seem fine to my eye.  Maybe there is some cacheing
>issue?  I've restarted apache, no help.
>
>   bobg
>
>The particulars:  RT 3.2.0, RH 7.3, apache 1.3.33, fastcgi, mysql 4.0.17
>
>Perl v5.8.3 under linux 
>  Apache::Session v1.54;
>  Apache::Session::Generate::MD5 v2.1;
>  Apache::Session::Lock::MySQL v1.00;
>  Apache::Session::MySQL v1.01;
>  Apache::Session::Serialize::Storable v1.00;
>  Apache::Session::Store::DBI v1.01;
>  Apache::Session::Store::MySQL v1.03;
>  AutoLoader v5.60;
>  base v2.04;
>  Benchmark v1.052;
>  bytes v1.01;
>  Cache::Simple::TimedExpiry v0.21;
>  Carp v1.01;
>  CGI v3.01;
>  CGI::Cookie v1.24;
>  CGI::Fast v1.05;
>  CGI::Util v1.4;
>  Class::Container v0.11;
>  Class::Data::Inheritable v0.02;
>  Class::ReturnValue v0.52;
>  constant v1.04;
>  Cwd v2.12;
>  Data::Dumper v2.121;
>  Date::Format v2.22;
>  Date::Parse v2.27;
>  DBD::mysql v2.9003;
>  DBI v1.45;
>  DBIx::SearchBuilder v1.12_01;
>  Devel::StackTrace v1.11;
>  Devel::StackTraceFrame v0.6;
>  Digest::base v1.00;
>  Digest::MD5 v2.33;
>  DynaLoader v1.04;
>  Encode v1.99;
>  Encode::Alias v1.38;
>  Encode::Config v1.07;
>  Encode::Encoding v1.33;
>  Encode::Guess v1.09;
>  Encode::Unicode v1.40;
>  Errno v1.09;
>  Exception::Class v1.19;
>  Exception::Class::Base v1.2;
>  Exporter v5.57;
>  Exporter::Heavy v5.57;
>  FCGI v0.67;
>  Fcntl v1.05;
>  fields v2.03;
>  File::Basename v2.72;
>  File::Glob v1.02;
>  File::Path v1.06;
>  File::Spec v0.87;
>  File::Spec::Unix v1.5;
>  File::Temp v0.14;
>  FileHandle v2.01;
>  HTML::Entities v1.27;
>  HTML::Mason v1.26;
>  HTML::Mason::CGIHandler v1.00;
>  HTML::Mason::Exception v1.1;
>  HTML::Mason::Exception::Abort v1.1;
>  HTML::Mason::Exception::Compilation v1.1;
>  HTML::Mason::Exception::Compilation::IncompatibleCompiler v1.1;
>  HTML::Mason::Exception::Compiler v1.1;
>  HTML::Mason::Exception::Decline v1.1;
>  HTML::Mason::Exception::Params v1.1;
>  HTML::Mason::Exception::Syntax v1.1;
>  HTML::Mason::Exception::System v1.1;
>  HTML::Mason::Exception::TopLevelNotFound v1.1;
>  HTML::Mason::Exception::VirtualMethod v1.1;
>  HTML::Mason::Exceptions v1.43;
>  HTML::Parser v3.35;
>  HTML::Scrubber v0.08;
>  I18N::LangTags v0.29;
>  integer v1.00;
>  IO v1.21;
>  IO::File v1.10;
>  IO::Handle v1.23;
>  IO::InnerFile v2.102 ;
>  IO::Lines v2.103 ;
>  IO::Scalar v2.105 ;
>  IO::ScalarArray v2.103 ;
>  IO::Seekable v1.09;
>  IO::Wrap v2.102 ;
>  IO::WrapTie v2.102 ;
>  IPC::Open2 v1.01;
>  IPC::Open3 v1.0105;
>  lib v0.5565;
>  List::Util v1.13;
>  locale v1.00;
>  Locale::Maketext v1.06;
>  Locale::Maketext::Fuzzy v0.02;
>  Locale::Maketext::Lexicon v0.34;
>  Locale::Maketext::Lexicon::Gettext v0.11;
>  Log::Dispatch v2.08;
>  Log::Dispatch::Base v1.09;
>  Log::Dispatch::Output v1.26;
>  Log::Dispatch::Screen v1.17;
>  Log::Dispatch::Syslog v1.18;
>  Mail::Address v1.64;
>  Mail::Field v1.64;
>  Mail::Field::AddrList v1.64;
>  Mail::Field::Date v1.64;
>  Mail::Header v1.64;
>  Mail::Internet v1.64;
>  MIME::Base64 v3.05;
>  MIME::Body v5.415;
>  MIME::Decoder v5.415;
>  MIME::Decoder::Binary v5.415;
>  MIME::Decoder::NBit v5.415;
>  MIME::Entity v5.415;
>  MIME::Field::ContDisp v5.415;
>  MIME::Field::ConTraEnc v5.415;
>  MIME::Field::ContType v5.415;
>  MIME::Field::ParamVal v5.415;
>  MIME::Head v5.415;
>  MIME::Parser v5.415;
>  MIME::QuotedPrint v3.03;
>  MIME::Tools v5.415;
>  MIME::Words v5.415;
>  Module::Versions::Report v1.02;
>  overload v1.01;
>  Params::Validate v0.74;
>  POSIX v1.07;
>  re v0.04;
>  Regexp::Common v2.113;
>  Regexp::Common::delimited v1;
>  RT v3.2.0;
>  RT::Interface::Email v1.02;
>  Scalar::Util v1.13;
>  SelectSaver v1.00;
>  Socket v1.76;
>  Storable v2.09;
>  strict v1.03;
>  Symbol v1.05;
>  Sys::Hostname v1.11;
>  Sys::Syslog v0.04;
>  Text::Autoformat v1.12;
>  Text::Quoted v1.3;
>  Text::Reform v1.11;
>  Text::Tabs v98.112801;
>  Text::Template v1.44;
>  Text::Wrapper v1.000;
>  Time::HiRes v1.52;
>  Time::JulianDay v99.061501;
>  Time::Local v1.07;
>  Time::ParseDate v100.010301;
>  Time::Timezone v99.062401;
>  Time::Zone v2.22;
>  Tree::Simple v1.05;
>  utf8 v1.02;
>  vars v1.01;
>  warnings v1.03;
>  warnings::register v1.00;
>  XSLoader v0.02;
>
>
>
>RT Variables
>RT::AmbiguousDayInPast  1
>RT::BasePath    /usr/local/rt/3.2.0
>RT::CORE_CONFIG_FILE    /usr/local/rt/3.2.0/etc/RT_Config.pm
>RT::CanonicalizeEmailAddressMatch       (tigger|icarus|mailserv)\.(cc\.)?uic\.
>edu$
>RT::CanonicalizeEmailAddressReplace     uic.edu
>RT::CanonicalizeOnCreate        1
>RT::CommentAddress      uicadmit-comment at helpdesk.uic.edu
>RT::CorrespondAddress   uicadmit at helpdesk.uic.edu
>RT::DatabaseHost        rt-mysql.cc.uic.edu
>RT::DatabaseName        rt_oar
>RT::DatabasePassword    Password not printed
>RT::DatabasePort        3306
>RT::DatabaseRTHost      helpdesk.uic.edu
>RT::DatabaseType        mysql
>RT::DatabaseUser        rt_user_oar
>RT::DefaultSearchResultFormat   '<B><A HREF="/oar/Ticket/Display.html?id=__id_
>_">__id__</a></B>/TITLE:#', '<B><A HREF="/oar/Ticket/Display.html?id=__id__">_
>_Subject__</a></B>/TITLE:Subject', Status, QueueName, OwnerName, Priority, '__
>NEWLINE__', '', '<small>__Requestors__</small>', '<small>__LastUpdatedBy__</sm
>all>', '<small>__ToldRelative__</small>', '<small>__LastUpdatedRelative__</sma
>ll>', '<small>__TimeLeft__</small>'
>RT::EmailOutputEncoding         utf-8
>RT::EtcPath     /usr/local/rt/3.2.0/etc
>RT::FriendlyFromLineFormat      "%s via RT" <%s>
>RT::FriendlyToLineFormat        "%s of rt-oar.cc.uic.edu Ticket #%s":;
>RT::LocalEtcPath        /usr/local/rt/oar/local/etc
>RT::LocalLexiconPath    /usr/local/rt/oar/local/po
>RT::LocalPath   /usr/local/rt/oar/local
>RT::LogDir      /var/log/rt/oar
>RT::LogToFileNamed      oar.rt.log
>RT::LogToScreen         error
>RT::LogToSyslog         debug
>RT::LogoURL     https://helpdesk.uic.edu/oar/NoAuth/images/rt.jpg
>RT::LoopsToRTOwner      1
>RT::MailCommand         sendmailpipe
>RT::MasonComponentRoot  /usr/local/rt/3.2.0/share/html
>RT::MasonDataDir        /usr/local/rt/oar/var/mason_data
>RT::MasonLocalComponentRoot     /usr/local/rt/oar/local/html
>RT::MasonSessionDir     /usr/local/rt/oar/var/session_data
>RT::MaxAttachmentSize   10000000
>RT::MaxInlineBody       13456
>RT::MessageBoxWidth     72
>RT::MessageBoxWrap      HARD
>RT::MinimumPasswordLength       Password not printed
>RT::MyRequestsLength    10
>RT::MyTicketsLength     10
>RT::Organization        cc.uic.edu
>RT::OwnerEmail  kshalla at uic.edu
>RT::ParseNewMessageForTicketCcs         1
>RT::RTAddressRegexp     (\@helpdesk[^.]*\.uic\.edu)|(\@LISTSERV\.UIC\.EDU)|(\@
>helpdesk\.uillinois\.edu)|(eclerk\@helpdesk\.admin\.uillinois\.edu)
>RT::SITE_CONFIG_FILE    /usr/local/rt/oar/etc/RT_SiteConfig.pm
>RT::SendmailArguments   -oi -t
>RT::SendmailPath        /var/qmail/bin/sendmail
>RT::Timezone    US/Central
>RT::VERSION     3.2.0
>RT::VarPath     /usr/local/rt/3.2.0/var
>RT::WebBaseURL  https://helpdesk.uic.edu
>RT::WebExternalAuth     1
>RT::WebExternalAuto     1
>RT::WebFallbackToInternalAuth   1
>RT::WebImagesURL        https://helpdesk.uic.edu/oar/NoAuth/images/
>RT::WebPath     /oar
>RT::WebURL      https://helpdesk.uic.edu/oar/
>RT::rtname      rt-oar.cc.uic.edu
>Perl configuration
>
>Summary of my perl5 (revision 5.0 version 8 subversion 3) configuration:
>  Platform:
>    osname=linux, osvers=2.4.18-27.7.xsmp, archname=i686-linux
>    uname='linux development-3.priv.cc.uic.edu 2.4.18-27.7.xsmp #1 smp fri mar
> 14 05:52:30 est 2003 i686 unknown '
>    config_args=''
>    hint=recommended, useposix=true, d_sigaction=define
>    usethreads=undef use5005threads=undef useithreads=undef usemultiplicity=un
>def
>    useperlio=define d_sfio=undef uselargefiles=define usesocks=undef
>    use64bitint=undef use64bitall=undef uselongdouble=undef
>    usemymalloc=n, bincompat5005=undef
>  Compiler:
>    cc='cc', ccflags ='-fno-strict-aliasing -I/usr/local/include -D_LARGEFILE_
>SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm',
>    optimize='-O2',
>    cppflags='-fno-strict-aliasing -I/usr/local/include -I/usr/include/gdbm'
>    ccversion='', gccversion='2.96 20000731 (Red Hat Linux 7.3 2.96-110)', gcc
>osandvers=''
>    intsize=4, longsize=4, ptrsize=4, doublesize=8, byteorder=1234
>    d_longlong=define, longlongsize=8, d_longdbl=define, longdblsize=12
>    ivtype='long', ivsize=4, nvtype='double', nvsize=8, Off_t='off_t', lseeksi
>ze=8
>    alignbytes=4, prototype=define
>  Linker and Libraries:
>    ld='cc', ldflags =' -L/usr/local/lib'
>    libpth=/usr/local/lib /lib /usr/lib
>    libs=-lnsl -lndbm -lgdbm -ldl -lm -lcrypt -lutil -lc
>    perllibs=-lnsl -ldl -lm -lcrypt -lutil -lc
>    libc=/lib/libc-2.2.5.so, so=so, useshrplib=false, libperl=libperl.a
>    gnulibc_version='2.2.5'
>  Dynamic Linking:
>    dlsrc=dl_dlopen.xs, dlext=so, d_dlsymun=undef, ccdlflags='-rdynamic'
>    cccdlflags='-fpic', lddlflags='-shared -L/usr/local/lib'
>_______________________________________________
>http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
>
>Be sure to check out the RT wiki at http://wiki.bestpractical.com
>



More information about the rt-users mailing list