[rt-users] Auto Login Link in autoreply with password

[Kevin Falcone]

On Tue, Aug 31, 2010 at 01:19:32AM +1000, Codatel Lists wrote:
> I think its because the $pass value is only generated if the auto password generation script finds that the email from a new user.
> 
> If the email is not from a new user then the script is not activated and therefore the $pass data is not there

RT's User class explicitly flags the password unreadable, so I suspect
you'll have trouble getting at it without an overlay to allow reading

-kevin

> On 31/08/2010, at 1:07 AM, Kevin Falcone wrote:
> 
> > On Mon, Aug 30, 2010 at 02:51:48PM +1000, Codatel Lists wrote:
> >>   &pass= is part of the link to be displayed {{$Transaction->CreatorObj->__Value} is the
> >>   variable data which the system should fetch
> >>   On 30/08/2010, at 7:38 AM, Brumm, Torsten / Kuehne + Nagel / Ham MI-ID wrote:
> > 
> > I suspect Torsten meant that you already have the decoded password
> > stored in $pass (you're printing it in the email you send) so just use
> > it in the link too
> > 
> > -kevin
> > 
> >>     Why not use: $pass instead of:&pass={$Transaction->CreatorObj->__Value
> >> 
> >>     Torsten
> >> 
> >>   ----------------------------------------------------------------------------------------------
> >> 
> >>     Von: [1]rt-users-bounces at lists.bestpractical.com
> >>     <[2]rt-users-bounces at lists.bestpractical.com>
> >>     An: [3]rt-users at lists.bestpractical.com <[4]rt-users at lists.bestpractical.com>
> >>     Gesendet: Sun Aug 29 23:01:02 2010
> >>     Betreff: [rt-users] Auto Login Link in autoreply with password
> >>     I am trying to setup my autoreply so that it has a direct link for the requestor to click
> >>     and he can be logged straight into the RT.
> >>     I am new to the eco system and have been playing around with it over the past few days.
> >>     Ive hit a roadblock and am hoping someone can help me out.
> >>     I have inserted the following into the autoreply template
> >>     {$RT::WebURL}SelfService/Display.html?id={$Ticket->id()}&user={$Transaction->CreatorObj->Name}&pass={$Transaction->CreatorObj->__Value('Password')}
> >>     It almost works perfectly except for the fact that the password actually goes out encrypted
> >>     and is pretty useless.
> >>     this is the link that the requestor gets back
> >>     [5]http://rt.mydomain.com.au/ticket/SelfService/Display.html?id=138&user=requestor@email.com&pass=091128365216c001205810ed3po175fb
> >>     Below is my entire template.
> >>     Can someone please let me know how I am able to send a clickable link with every autoreply
> >>     that will take the requestor straight to the ticket on the web.
> >>     Subject: AutoReply: {$Ticket->Subject}
> >>     Greetings,
> >>     This message has been automatically generated in response to the
> >>     creation of a helpdesk call:
> >>             "{$Ticket->Subject()}",
> >>     a summary of which appears below.
> >>     There is no need to reply to this message right now. Your ticket has been
> >>      assigned an ID of [{$rtname} #{$Ticket->id()}]. Please include this string
> >>     in the subject line of all future correspondence about this issue.
> >>     {
> >>     *RT::User::GenerateRandomNextChar = \&RT::User::_GenerateRandomNextChar;
> >>     if (($Transaction->CreatorObj->id != $RT::Nobody->id) &&
> >>         (!$Transaction->CreatorObj->Privileged) &&
> >>         ($Transaction->CreatorObj->__Value('Password') eq '*NO-PASSWORD*')
> >>         ) {
> >>             my $user = RT::User->new($RT::SystemUser);
> >>             $user->Load($Transaction->CreatorObj->Id);
> >>             my ($stat, $pass) = $user->SetRandomPassword();
> >>             if (!$stat) {
> >>                     $OUT .=
> >>     "An internal error has occurred. RT was not able to set a password for you.
> >>     Please contact your local RT administrator for assistance.";
> >>             }
> >>     $OUT .= "
> >>     You can check the current status and history of your requests at:
> >>             ".$RT::WebURL."
> >>     When prompted, enter the following username and password:
> >>             Username: ".$user->Name."
> >>             Password: ".$pass."
> >>     ";
> >>     }
> >>     }
> >>     {$RT::WebURL}SelfService/Display.html?id={$Ticket->id()}&user={$Transaction->CreatorObj->Name}&pass={$Transaction->CreatorObj->__Value('Password')}
> >>                             Thank you.
> >>                             {$Ticket->QueueObj->CorrespondAddress()}
> >>     -------------------------------------------------------------------------
> >>     {$Transaction->Content()}
> >> 
> >>     K*hne + Nagel (AG & Co.) KG, Gesch*ftsleitung: Hans-Georg Brinkmann (Vors.), Dirk Blesius,
> >>     Reiner Heiken, Bruno Mang, Alfred Manke, Christian Marnett*, Mark Reinhardt, Jens Wollesen,
> >>     Klaus J*ger (stellv.), Sitz: Bremen, Registergericht: Bremen, HRA 21928, USt-IdNr.: DE
> >>     812773878, Pers*nlich haftende Gesellschaft: K*hne & Nagel A.G., Sitz: Contern/Luxemburg,
> >>     Gesch*ftsf*hrender Verwaltungsrat: Klaus-Michael K*hne
> >> 
> >> References
> >> 
> >>   Visible links
> >>   1. mailto:rt-users-bounces at lists.bestpractical.com
> >>   2. mailto:rt-users-bounces at lists.bestpractical.com
> >>   3. mailto:rt-users at lists.bestpractical.com
> >>   4. mailto:rt-users at lists.bestpractical.com
> >>   5. http://rt.mydoman.com/ticket/SelfService/Display.html?id=138&user=requestor@email.com&pass=091128365216c001205810ed3po175fb
> > 
> >> 
> >> RT Training in Washington DC, USA on Oct 25 & 26 2010
> >> Last one this year -- Learn how to get the most out of RT!
> > 
> > <ATT00001>
> > RT Training in Washington DC, USA on Oct 25 & 26 2010
> > Last one this year -- Learn how to get the most out of RT!
> 
> 
> RT Training in Washington DC, USA on Oct 25 & 26 2010
> Last one this year -- Learn how to get the most out of RT!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20100830/e4951f03/attachment.sig>