WinXP HtDigestStore disables AccountModule because the password store does not support writing

[Andreas]

When switching to htdigest authentication mode webui disables AccountModule and RegistrationModule. Login does no longer work.

Windows XP SP3 Apache/2.2.17 (Win32) Python 2.7.1 trac 0.12.2 tracaccountmanager 0.2.1dev-r4679 0.3dev-r9929 trachttpauth 1.1 tracloginrequiredplugin 0.1.0 tracmercurial 0.12.0.26

[Andreas]

• Windows XP SP3
• Apache/2.2.17 (Win32)
• Python 2.7.1
• trac 0.12.2
• tracaccountmanager 0.2.1dev-r4679
• trachttpauth 1.1
• tracloginrequiredplugin 0.1.0
• tracmercurial 0.12.0.26

[Steffen Hoffmann]

What actions do you expect? If I understand correctly from the trac.log snippet in #8660, you've got a read-only htdigest password file, right? At least this is just a local installation and configuration problem.

You still want to use it that way? Do you feel the action taken by AcctMgr is just too harsh, or anything else? And last but not least, as you're using Trac 0.12: Why don't you try a more recent revision of this plugin? :-)

[Andreas]

I have upgraded to "tracaccountmanager 0.3dev-r9929".

What actions do I expect?

1. login fails with a "Invalid username or password". I have created the password file with

   htdigest -c htdigest trac baloan
   

Login works fine with htpasswd.

2. htdigest is read-write so I was wondering whether updating the password is not supported by tracaccountmanager with htdigest?

   D:\Home\web\trac>attrib htdigest
   A          D:\Home\web\trac\htdigest
   

[Steffen Hoffmann]

I don't use AcctMgr with htdigest right now, but still don't know, why it shouldn't work.

Currently you can't use two or more files on parallel, whether it might might be htpasswd, htdigest or a mix of them. This might lead to confusion, even unintended misconfiguration, so please double-check, what is you effective configuration.

LoginRequiredPlugin is another candidate for disturbance, as it states clearly on the wiki page. Redirection issues have been fixed for AcctMgr lately, dunno, how that suites to LoginRequiredPlugin.

You mentioned "webui disables AccountModule and RegistrationModule" initially. Can you proof such behavior, i.e. by DEBUG log of a Trac environment reload?

[Steffen Hoffmann]

Ping. :-)

Any more comments? Issue resolved?

[Steffen Hoffmann]

This could even be related to #4677 in your case. Please make sure you don't have conflicting configuration - there can be only one of HtDigestStore and HtPasswdStore working.

Unless you use the latest code from trunk. If you do, please read the commit message of changeset [10396] really careful. Would be great to get test feedback for this new code here.

[Steffen Hoffmann]

After such a long time without feedback it might be reasonable to assume, that the issue has been resolved meanwhile, right? If so, tell us as well, please.

However I'll let the next release happen before I finally close this ticket.

[anonymous]

Not fixed. Using tracd on Debian, so perhaps that's a conflict between the trac.ini parameters and the command-line --auth option and its parameters. As for the proof, well the name of the report is pretty much the line of the log (found this report by googling the corresponding log line).

2012-09-27 21:57:56,102 Trac[web_ui] WARNING: AccountModule is disabled because the password store does not support writing. 2012-09-27 21:57:56,103 Trac[web_ui] WARNING: RegistrationModule is disabled because the password store does not support writing.

I tried without authentication info in trac.ini, without --auth on the command line (that disabled authentication as expected), with the same info on the command line and in trac.ini, with a distinct (but similar) copy of the password file in each, and a few other even dumber things (same or different realms etc). Nothing worked. I think I'll just conclude that tracd is not compatible with the Registration or Account modules, install a minimalist web server such as boa an let it deal with the passwords. That would be consistent with the need to manually hash the passwords for tracd command-line options...

[Steffen Hoffmann]

Did you try acct_mgr-0.3 or better: latest development code of acct_mgr-0.4dev aka trunk yet?

But I suspect there's no issue with AcctMgr at all. You want to use tracd with HTTP Basic Auth, but manage the htdigest file with AcctMgr, right? Make sure, that tracd process is running with a suitable UID, so you have r/w access to that file. You didn't talk about that by now. It seems that you continue to fail with that in your configuration - nothing that AcctMgr could be blamed for. If you're sure, that you'll be able to write to the file from tracd, post your [account-manager] configuration here, please.

Login is yet a different topic. For tracd with HTTP Basic Auth you need to follow ​t:wiki:TracStandalone#UsingAuthentication. Make sure to not enable AcctMgr's login form.

Btw, what is HttpAuthPlugin (you listed trachttpauth) meant to be fore? It's not needed for normal login as mentioned in the wiki docs, and I think you have more, than you need, or you don't know exactly what to do, so you risk interfering plugin actions. Try to build you setup step-by-step. Activating multiple plugins while having issues is a bad idea - just sort out each one on it's own, ok?