Trac Google Apps Authentication Plugin

Description

This plugin allows a Trac site to authenticate users against a hosted Google Apps domain. It requires and uses the AccountManagerPlugin.

Key features:

• Allows users to log in to Trac with their Google Apps username and password.
• Allows restriction of userbase for Trac instance based on membership in Google Apps group.
• Assigns Trac groups to users based on their Google Apps groups.
• Allows basic user info listing via Trac Account Manager.
• Pre-populates Trac database with email of every user so that email notifications can be sent to users who have never logged in to Trac, and so the ticket "Assign To" drop-down is fully populated when using the config [ticket] setting restrict_owner = true. Simply view the Admin user listing page to populate the database.
• Encrypts stored Google Apps password to protect against casual observers on filesystem and via web, but this is not nearly as secure as using OpenID.

Note: Google's suite of cloud-hosted apps is formerly known as Google Apps and rebranded as G Suite.

Bugs/Feature Requests

Existing bugs and feature requests for GoogleAppsAuthPlugin are here.

If you have any issues, create a new ticket.

Download

This plugin can be found ​here.

Source

This plugin can be found ​here.

Installation

After checkout or download, run the following command to install this plugin:

easy_install TracGoogleAppsAuthPlugin

Configuration

Your trac.ini could look as follows to use this plugin:

[account-manager]
password_store = GoogleAppsPasswordStore

[components]
acct_mgr.api.accountmanager = enabled
acct_mgr.web_ui.loginmodule = enabled
createtank.trac.googleauth.googleauthplugin.googleappspasswordstore = enabled
trac.web.auth.loginmodule = disabled

[google_apps]
domain = mydomainname.com
group_access = trac_users
admin_username = sysadmin
admin_secret = TOP_S3CRET

Author/Contributors

Author: riggs
Maintainer: David A. Riggs
Contributors: