Hello all,
I've configured multiple ldap backend for my customers.
Now I have to assign each customer to its group so that can divide each customer in a dedicated queue.
Let me know if you can assign each user to a customer group based on the backend used for login.
Searching on Internet I found a person who says to use the filters acl, but I did not understand how
Seems you're on the right path. If you're using multiple backends, you should be appending an index number to each entry, and CustomerGroupAlways group...
It appears you're there. Do you want to show your Config.pm?
OTRS 6.0.x (private/testing/public) on Linux with MySQL database.
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so. Need help?Before you ask
Here my section of Conifg.pm where I configure the customer login.
If you can explain me the sintax to enable different CustomerGroupAlwaysGroup for this two backend you would be grateful!
This was a mistake on my part. Users/Agents can be assigned groups from backends, but customers are handled differently/collectively in config.pm
This doesn't mean you can't assign manually. It just means it's not (as far as I can tell) chooseable from backend for customers.
But you might consider CustomerID as a factor in your ACLs.
OTRS 6.0.x (private/testing/public) on Linux with MySQL database.
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so. Need help?Before you ask
Where "internal" is the queue reserved for account of domain flag.local.
Where "CN=Person,CN=Schema,CN=Configuration,DC=flag,DC=local" is the value of the attribute of active directory "objectCategory", the only one attribute that I found that is always the same for all users of domain flag.local
and with [ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var' ], modifed in [ 'UserCustomerID', 'CustomerID', 'objectCategory', 0, 1, 'var' ],
Please help me to configure an ACL properly to do so!
The CustomerID is
[ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var' ],
the email address of the user.
OTRS 6.0.x (private/testing/public) on Linux with MySQL database.
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so. Need help?Before you ask
Hi Crythias,
first of all I'm sorry for the elapsed time of my answer.
I see it now, but I did not understand it.
How can I apply an ACL to all users of domain flag.local so that the only available queue is internal?
On the other side I have to apply an ACL to all users of domain flag.ext so that the only available queue is external.
OTRS 6.0.x (private/testing/public) on Linux with MySQL database.
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so. Need help?Before you ask
Nothing to do.
Perhaps it doesn't work without using regular expression. I have used a static email address like "CustomerID => ['g.bacci@flag.local',]," without success.
I still can see all queues of my system.
I think that OTRS is not loading ACL in Config.pm.
This is my acl statement in Config.pm
The problem is that all the queues that the customer can see are likely to be available. The correct way to do this is to make customers members of the group the queue belongs to that they want to see.
Now, on the one hand, *I* (and I'm just a nobody) don't consider it to be practical to have queues relating to customers. Queues should be related to what *AGENTS* will handle what *KIND* of tickets.
Example: You go to a movie theater and you queue for tickets or popcorn. The agents selling popcorn or tickets don't *care* who's in the queue. But they'll report on who presents a CustomerID/credit card/login in their queue. The customers, however, would be well-placed to know that they're in line to buy tickets or to buy popcorn, so they choose the queue that applies to what they need. They already know who they are. They assume that you'll know it, too, once they provide identification. But they've already provided identification: They've logged in.
Back to your situation, if you're going to assign a customer to a queue based upon their CustomerID, perhaps you should take that out of the equation. It's possible to set something like this:
<input type="hidden" name="Dest">
<script type="text/javascript">
var CustomerID = $QData{"CustomerID"};
var atloc = CustomerID.substring(0,CustomerID.lastIndexOf('@')+1;
var domain = CustomerID.substring(atloc.length,CustomerID.length+1);
var Dest = document.getElementsByName("Dest").item(0);
switch(domain)
{
case flag.local:
Dest.value = "Intern";
break;
default:
Dest.value = "Main";
}
</script>
Or use Generic Agent to try and move it.
Or PossibleNot in ACL for all queues the customer shouldn't see.
Or use CustomerGroups and assign flag.local to a Group and get all the other queues off "users" because everybody are "users", and assign membership that way.
See the problems to resolve this?
OTRS 6.0.x (private/testing/public) on Linux with MySQL database.
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so. Need help?Before you ask