Security
4Encrypt and sign notifications in OTRS via PGP
The Security Toolbox in OTRS allows to decrypt tickets in the backend and to sign and encrypt the notifications. Based on an already running PGP setup in the OTRS installation the following steps are needed: verify that the web server (apache) is running as OTRS user (usually otrs) verify that the .gnupg directory and content […]
Checking IP reputation via Information Floater
One of the features of the OTRS 5s Security Toolbox is the information floater which allows to search for patterns in an article of a ticket. The feature was designed to enrich the content of a ticket without having to add static content to it. The main usage is to give security teams valuable information at […]
Request Handling in security departments
OTRS is used in security departments and companies for long time due to the well documented code and some background in the CERT area. In one of my recent projects the team wanted to simplify some of their processes additional to the main goals of the implemenation project. We decided to start with the authorization […]
Using one time passwords for securing login
Sometimes the basic authentication provided by OTRS via database or LDAP is not enough for securing the access to an application. RFC 4226 describes the generation and usage of one time passwords and two way authentication. To make OTRS using OTP for the login of the agents we need to install mod-authn-otp as apache auth […]