Why do you not configure login in apache?

[jerico.dev@…]

I configured SSL client authentication like this:

​http://trac.edgewall.org/wiki/TracClientCertificates

What's the advantage of a plugin when there is a configurable solution?

[Giel van Schijndel]

Replying to jerico.dev@gmail.com:

I configured SSL client authentication like this:

​http://trac.edgewall.org/wiki/TracClientCertificates

What's the advantage of a plugin when there is a configurable solution?

Actually what TracClientCertificates describes is only part of this plugin. SslAuthenticationPlugin will use the e-mail address found in the client certificate for authenticating, while at the same time using the certificate's common name (usually the person's name) for display purposes. Most of the time the e-mail address is the only truly unique thing about the client certificate, thus you'll need to use that for authentication.

Thus this plugin basically makes it possible to use a different display name than the login/user name.

[jerico.dev@…]

Thus this plugin basically makes it possible to use a different display name than the login/user name.

Ok that makes sense to me! :-) Thanks for the explanation.