HP Altris eXpress Helpdesk Solution 5.6 SP1 manual Credential, WorkerMode=workerwinUserguestuser

Chapter 5: Configuration Entry Points

The value “no” means that database configuration is not possible through this console. Helpdesk will display an error instead of displaying the Helpdesk configuration page.

The value “yes” means that the databaseConfigCmd attribute must be present.

The value “no” means the error display command must be named in the denyCmd attribute.

•databaseConfigCmd

The value of this attribute must match the value of an id attribute of a <command> element defined in same web.config file. It should always refer to the ConfigureHelpdesk templated command. This attribute is only necessary when allowDatabaseConfig is set to “yes.”

•denyCmd

The value of this attribute must match the value of an id attribute of a <command> element defined in same web.config file. Typically this command should refer to the Deny module. It is required when allow DatabaseConfig is set to “no.”

•sessionTimeout

The value of this attribute must be an integer greater than 0: “20” for example. This attribute is

useful for consoles that do not have a keepalive mechanism to keep their IIS sessions alive: the user and winuser consoles use this attribute by default. The default session timeout is configured in the main web.config file and is initially set to 4 minutes.

<credential>

This element defines how workers and users are authenticated by Helpdesk after being authenticated or not by IIS and NTLM security. There is one required attribute: workerMode, and several other attributes that may or may not be required depending on the value of workerMode.

The five entry points/web.config files that ship with Helpdesk demonstrate all useful combinations of attributes.

workerMode=”worker””winUser””guest””user”

•“worker”

This mode requires users of the consoles defined in this entry point to be enrolled as workers in Helpdesk. The NT ID provided by the browser is used to identify the worker. Workers typically have access to the full functionality of Helpdesk except for administrative functions.

Other required attributes: allowSelfEnrollment, selfEnrollmentCmd, denyCmd.

•“winUser”

This mode requires users of the consoles defined in this entry point to be defined as contacts in Helpdesk. An NT ID provided by the browser through IIS Integrated Windows Authentication is required to identify the contact. Consoles defined using this mode usually have only limited Helpdesk abilities: to create new work items and to review and updates work items previously created by them. This mode is appropriate for end-users in an intranet environment where Integrated Window Authentication is available. Workers can use consoles with this credential also because workers are contacts with valid NT IDs. However, they will not be able to access full worker functionality.

Other required attributes: allowSelfEnrollment, selfEnrollmentCmd, denyCmd.

•“guest”

This mode is for completely anonymous access to Helpdesk to create new work items, for example, at a public walk-up kiosk. No authentication takes place and no contact information is created about the end-user using the console. Any information collected by commands in a “guest” mode console is typically inserted into the work item comment field to be interpreted by a worker.

There are no other required attributes.

•“user”

Altiris Helpdesk Solution User Guide 41