Administrating the Technical Support Page

osTicket Page Maintenance Notes



General osTicket Server Administration Notes

Server Layout
osTicket is currently running via Apache located at /var/www/html/ with the database located in a docker container running MariaDB called "osticket_db".
The apache config file is located at /etc/apache2/sites-available/000-default.conf deriving from the base apache config. While configuring the site, I attempted to assign the site location to somewhere other than /var/www/html, but I am not very skilled with Apache and couldn't get it working properly.
osTicket Administration Tasks



Creating a New Agent User

Introduction
User management using an external backend (we use Keycloak at the time of writing) works differently in osTicket compared to other common OIDC-implemented applications.
While common OIDC implementations used role-based authentication to determine a user's access level which automatically assigns permissions depending on their role, the osTicket OpenID plugin requires the administrator to add the user manually.
However, a manually created user in this application can still be linked to a user in Keycloak. Users are identified by osTicket from OIDC via email. Therefore, if Keycloak happens to be down, then an agent can still log in using their email and a separate password set specifically for osTicket.
How to Create an Agent User
Obtaining Prior Information
In order to create a support agent, you will need:
The user's email used in Keycloak
The user's username (optional, but keeps things consistent)
Navigate to the User Creation Page
In order to create a user, you must have the account permission to do so.
First, navigate to the osTicket Admin Page. This can be done by:
Navigate to https://support.fireantllcaz.net/scp and log into your account.
Click on Admin Panel at the top-right of the page. If you see Agent Panel instead, then you do not have permission to view the admin panel.
Click on the Agents tab.
Click on Add New Agent.
Creating a User
Filling out the form should be pretty straightforward.
Fill out the user's first and last name.
Enter the email address obtained from Keycloak.
Fill out the user's username.
Set the Authenticaion Backend to Fireant LLC.
Fill out additional entries as necessary.
Switch to the Access tab and select the Primary Department for the user. If unsure, assign the user to Support with All Access.
Switch to the Permissions tab and choose the permissions you would like to assign the user with.
Click Create.
Once that's done, make sure the user is able to log in at https://support.fireantllcaz.net/scp.