Changes between Version 21 and Version 22 of AccountManagerPlugin/AuthStores

Timestamp:

Jan 9, 2012, 6:38:35 PM (12 years ago)

Author:

Dennis McRitchie <dmcr@…>

Comment:

--

AccountManagerPlugin/AuthStores

@@ -82 +82 @@
 Used to delegate authentication to the web server.  This allows access to be restricted based on LDAP, a password file, etc, or some combination of them.
 
+Note: If you are using the WSGI Apache interpreter instead of mod_python (pretty much required if using RHEL6), it is difficult to get !HttpAuthStore to work with versions prior to acct_mgr-0.4. Upgrading is recommended.
+
 Note: This password store does not support listing/adding/removing users or changing passwords.
 
@@ -91 +93 @@
 [account-manager]
 ; configure the plugin to use a page that is secured with http authentication
-authentication_url = http://hostname/trac/authFile
+authentication_url = /authFile
 password_store = HttpAuthStore
 }}}
+Note: Only absolute URLs are supported in acct_mgr-0.3.
 
 This will generally be matched with an Apache config like:
 {{{
-<Location /trac/authFile>
+<Location /authFile>
    …HTTP authentication configuration…
    Require valid-user
@@ -106 +109 @@
 [account-manager]
 ; configure the plugin to use a page that is secured with http authentication
-authentication_url = http://hostname/trac/project1/authFile
+authentication_url = /project1/authFile
 password_store = HttpAuthStore
 }}}
+Note: Only absolute URLs are supported in acct_mgr-0.3.
 
 This could then be matched with an Apache config like:
 {{{
-<LocationMatch ^/trac/[^/]+/authFile$>
+<LocationMatch ^/[^/]+/authFile$>
    …HTTP authentication configuration…
    Require valid-user
 </Location>
 }}}
-Note that '''authFile''' must exist, and be a file (not directory) that can be accessed via ''authentication_url''.
-
-'''IMPORTANT:''' Be sure to test your configuration by attempting a login with a valid user and '''invalid''' password to ensure that your Apache <Location> or <!LocationMatch> section is getting executed. If it is not, you will be able to log in with an invalid password.
+Note that, new with acct_mgr-0.4, '''authFile''' no longer needs to actually exist, nor be a file (not directory) that can be accessed via ''authentication_url''.
+
+'''IMPORTANT:''' Be sure to test your configuration by attempting a login with a valid user, and both a valid and '''invalid''' password to ensure that your Apache <Location> or <!LocationMatch> section is getting executed. If it is not, you will be able to log in with an invalid password.
+
+Note: If you are having trouble getting !HttpAuthStore to work, enable DEBUG-level logging, and check for HttpAuthStore messages in your project's Trac log file.
 
 == !SessionStore ==