Changes between Version 11 and Version 12 of CookBook/AccountManagerPluginConfiguration
- Timestamp:
- Dec 6, 2012, 2:00:36 AM (11 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
CookBook/AccountManagerPluginConfiguration
v11 v12 6 6 We'll collect some useful configuration examples here to give hints on proper use of available options. 7 7 8 '''Hint:''' Option names are written in !CamelCase style notation, but will get (re-)written all-lowercase, if added/updated via the Trac admin web-UI. Anyway, case doesn't really matter here. 9 8 10 == Basic configuration/Kickstart == 11 !AccountManagerPlugin replaces the traditional Trac login feature with a webform, because [wiki:AccountManagerPlugin/Modules#LoginModule LoginModule] is enabled in all examples below. No additional action is required since acct_mgr-0.4, but older plugin versions required to disable the obsoleted Trac core component explicitly: 12 {{{ 13 #!cfg 14 [components] 15 trac.web.auth.loginmodule = disabled 16 }}} 17 9 18 === !HtPasswdStore === 10 19 {{{ 20 #!cfg 11 21 [components] 12 22 acct_mgr.admin.* = enabled … … 23 33 acct_mgr.svnserve.svnservepasswordstore = disabled 24 34 acct_mgr.web_ui.* = enabled 25 trac.web.auth.loginmodule = disabled26 35 27 36 [account-manager] … … 42 51 === !HtDigestStore === 43 52 {{{ 53 #!cfg 44 54 [components] 45 55 acct_mgr.admin.* = enabled … … 56 66 acct_mgr.svnserve.svnservepasswordstore = disabled 57 67 acct_mgr.web_ui.* = enabled 58 trac.web.auth.loginmodule = disabled59 68 60 69 [account-manager] … … 75 84 === !SessionStore === 76 85 {{{ 86 #!cfg 77 87 [components] 78 88 acct_mgr.admin.* = enabled … … 89 99 acct_mgr.svnserve.svnservepasswordstore = disabled 90 100 acct_mgr.web_ui.* = enabled 91 trac.web.auth.loginmodule = disabled92 101 93 102 [account-manager] … … 108 117 Create the first user through browser-based registration enabled by following additional lines in `components` section of `trac.ini`: 109 118 {{{ 119 #!cfg 110 120 [components] 111 121 acct_mgr.register.* = enabled … … 114 124 Don't add another `components` section, just the configuration line with 'enabled' into an existing `components` section. After user creation you may choose to disable registration by uncommenting the [AccountManagerPlugin#RegistrationModule RegistrationModule] setting above or changing it to: 115 125 {{{ 126 #!cfg 116 127 [components] 117 128 ;need this for first user … … 138 149 === Persistent Sessions === 139 150 {{{ 151 #!cfg 140 152 [account-manager] 141 153 persistent_sessions = true … … 149 161 To address the demand for authentication information sharing between some/all of the Trac environments in such a setup a login synchronization process has been introduced for acct_mgr-0.4. It relies on a non-default value for the path of `trac_auth` and `trac_auth_session` cookies. Otherwise the cookie wouldn't be recognized as related to different Trac environments by the web browser client: 150 162 {{{ 163 #!cfg 151 164 [trac] 152 165 auth_cookie_path = /var/www/trac … … 161 174 162 175 {{{ 176 #!cfg 163 177 [components] 164 178 acct_mgr.guard.accountguard = enabled … … 166 180 167 181 {{{ 182 #!cfg 168 183 [account-manager] 169 184 login_attempt_max_count = 0 … … 175 190 ==== Hard Lock-up ==== 176 191 {{{ 192 #!cfg 177 193 [account-manager] 178 194 login_attempt_max_count = 5 … … 185 201 ==== Fixed login delay ==== 186 202 {{{ 203 #!cfg 187 204 [account-manager] 188 205 login_attempt_max_count = 3 … … 196 213 ==== Modestly progressing login delay ==== 197 214 {{{ 215 #!cfg 198 216 [account-manager] 199 217 login_attempt_max_count = 2 … … 228 246 ==== Aggressively progressing, but limited login delay ==== 229 247 {{{ 248 #!cfg 230 249 [account-manager] 231 250 login_attempt_max_count = 4