UseRtCrontool - Revision history

Admin: 6 revisions imported

2016-04-06T20:39:39Z

6 revisions imported

← Older revision		Revision as of 16:39, 6 April 2016
(No difference)

81.200.198.20: /* ser Configuration */

2014-09-26T08:42:15Z

ser Configuration

← Older revision		Revision as of 04:42, 26 September 2014
Line 55:		Line 55:
	----		----

	== ~~ser~~ Configuration ==		== User Configuration ==

	<code>rt-crontool</code> should ideally be run by a special unprivileged operating system user who has also been entered in RT as a privileged user with global [= [[ModifyTicket]] ] and [= [[ShowTicket]] ] rights. If you have created an operating system user named <code> rtcrontool</code>, for instance, then create an RT user with <code> Username</code> and <code> Unix login</code> set to <code> rtcrontool</code>, check <code> Let this user be granted rights</code>, and assign a password. Then under Configuration/Global/User rights, add the two rights to the user you just created. This user should have read access to the RT files such as [[RT Config\|RT_Config]].pm and [[RT SiteConfig\|RT_SiteConfig]].pm. If, for example, the <code> rt</code> group has read access to all the installed RT files, you should assign your created user to that group (under [[UNIXen]]).		<code>rt-crontool</code> should ideally be run by a special unprivileged operating system user who has also been entered in RT as a privileged user with global [= [[ModifyTicket]] ] and [= [[ShowTicket]] ] rights. If you have created an operating system user named <code> rtcrontool</code>, for instance, then create an RT user with <code> Username</code> and <code> Unix login</code> set to <code> rtcrontool</code>, check <code> Let this user be granted rights</code>, and assign a password. Then under Configuration/Global/User rights, add the two rights to the user you just created. This user should have read access to the RT files such as [[RT Config\|RT_Config]].pm and [[RT SiteConfig\|RT_SiteConfig]].pm. If, for example, the <code> rt</code> group has read access to all the installed RT files, you should assign your created user to that group (under [[UNIXen]]).

81.200.198.20: /* User Configuration */

2014-09-26T08:41:41Z

User Configuration

← Older revision		Revision as of 04:41, 26 September 2014
Line 55:		Line 55:
	----		----

	== ~~User~~ Configuration ==		== ser Configuration ==

	<code>rt-crontool</code> should ideally be run by a special unprivileged operating system user who has also been entered in RT as a privileged user with global [= [[ModifyTicket]] ] and [= [[ShowTicket]] ] rights. If you have created an operating system user named <code> rtcrontool</code>, for instance, then create an RT user with <code> Username</code> and <code> Unix login</code> set to <code> rtcrontool</code>, check <code> Let this user be granted rights</code>, and assign a password. Then under Configuration/Global/User rights, add the two rights to the user you just created. This user should have read access to the RT files such as [[RT Config\|RT_Config]].pm and [[RT SiteConfig\|RT_SiteConfig]].pm. If, for example, the <code> rt</code> group has read access to all the installed RT files, you should assign your created user to that group (under [[UNIXen]]).		<code>rt-crontool</code> should ideally be run by a special unprivileged operating system user who has also been entered in RT as a privileged user with global [= [[ModifyTicket]] ] and [= [[ShowTicket]] ] rights. If you have created an operating system user named <code> rtcrontool</code>, for instance, then create an RT user with <code> Username</code> and <code> Unix login</code> set to <code> rtcrontool</code>, check <code> Let this user be granted rights</code>, and assign a password. Then under Configuration/Global/User rights, add the two rights to the user you just created. This user should have read access to the RT files such as [[RT Config\|RT_Config]].pm and [[RT SiteConfig\|RT_SiteConfig]].pm. If, for example, the <code> rt</code> group has read access to all the installed RT files, you should assign your created user to that group (under [[UNIXen]]).

124.169.174.70: Link to proper docs

2013-07-17T01:54:25Z

Link to proper docs

New page

rt-crontool allows you to run cron jobs to do such things as escalating priority of tickets. It allows you to search for a set of tickets and to take specific action based on a specified condition.

rt-crontool lives in rt_install_dir/bin. [http://bestpractical.com/docs/rt/latest/rt-crontool.html The official, maintained documentation for rt-crontool is in the main RT documentation.]

== Syntax ==

For usage run: rt-crontool --help

<code>./rt-crontool is a tool to act on tickets from an external scheduling tool, such as cron. </code>

<code>It takes several arguments: </code>

--search - Specify the search module you want to use
--search-arg - An argument to pass to --search
--condition - Specify the condition module you want to use
--condition-arg - An argument to pass to --condition
--action - Specify the action module you want to use
--action-arg - An argument to pass to --action
--template - Specify name or id of template(s) you want to use
--transaction - Specify if you want to use either 'first', 'last' or all' transactions
--transaction-type - Specify the comma separated list of transactions' types you want to use
--log - Adjust LogToScreen config option
--verbose - Output status updates to STDOUT

<code>Security: </code>

<code>This tool allows the user to run arbitrary perl modules from within RT. If this tool were setgid, a hostile local user could use this tool to gain administrative access to RT. It is incredibly important that nonprivileged users not be allowed to run this tool. It is suggested that you create a non-privileged unix user with the correct group membership and RT access to run this tool (see User Configuration below). </code>

<code>Example: </code>

<code>The following command will find all active tickets in the queue 'general' and set their priority to 99 if they haven't been touched in 4 hours: </code>

bin/rt-crontool \
--search RT::Search::ActiveTicketsInQueue --search-arg general \
--condition RT::Condition::UntouchedInHours --condition-arg 4 \
--action RT::Action::SetPriority --action-arg 99 \
--verbose

<code>Escalate tickets </code>

bin/rt-crontool \
--search RT::Search::ActiveTicketsInQueue --search-arg general \
--action RT::Action::EscalatePriority

----

Location of search/condition/action modules: rt_install_dir/lib/RT/Search, Condition, Action.

(Example plugin Condition: [[[TicketIDMatches]].pm [[TicketIDMatches]]])

Read the modules (or perl docs) to see what each module does.

You may wish to wrap rt-crontool in a small script rather than call it directly from cron. e.g. to setup input parameters.

----

== User Configuration ==

<code>rt-crontool</code> should ideally be run by a special unprivileged operating system user who has also been entered in RT as a privileged user with global [= [[ModifyTicket]] ] and [= [[ShowTicket]] ] rights. If you have created an operating system user named <code> rtcrontool</code>, for instance, then create an RT user with <code> Username</code> and <code> Unix login</code> set to <code> rtcrontool</code>, check <code> Let this user be granted rights</code>, and assign a password. Then under Configuration/Global/User rights, add the two rights to the user you just created. This user should have read access to the RT files such as [[RT Config|RT_Config]].pm and [[RT SiteConfig|RT_SiteConfig]].pm. If, for example, the <code> rt</code> group has read access to all the installed RT files, you should assign your created user to that group (under [[UNIXen]]).

== Troubleshooting ==

If you run into "/No RT user found. Please consult your RT administrator./", then you're not running <code> rt-crontool</code> under the identity of an appropriate user (see previous). Somebody indicates that you can run the tool as root (uid 0), but that didn't work properly for me when using <code> rt-crontool</code> to do priority escalation.

If you keep on seeing the help over and over, keep in mind that <code> rt-crontool</code> requires both <code> Search</code> and <code> Action</code> items.

== See Also ==

* [[ConfigureEscalation]]
* [[TimedNotifications]]
* [[UntouchedInHours]]
* [[AnotherConfigurationEscalationExample]]