= Force HTTP authentication from within Trac = == Description == Allows you to protect certain paths with HTTP authentication. The AccountManagerPlugin is used to check passwords. Primarily this is meant to be used with the XmlRpcPlugin so it will work while using !AccountManager's form-based logins. == Bugs/Feature Requests == Existing bugs and feature requests for HttpAuthPlugin are [report:9?COMPONENT=HttpAuthPlugin here]. If you have any issues, create a [http://trac-hacks.org/newticket?component=HttpAuthPlugin&owner=coderanger new ticket]. == Download == Download the zipped source from [download:httpauthplugin here]. == Source == You can check out HttpAuthPlugin from [http://trac-hacks.org/svn/httpauthplugin here] using Subversion, or [source:httpauthplugin browse the source] with Trac. The version in ''0.10'' is also working with ''0.11.2.1'' release, at least with mod_python. == Example == To enable: {{{ [components] httpauth.* = enabled }}} To add additional paths: {{{ [httpauth] paths = /xmlrpc, /login/xmlrpc }}} To add additional formats, like rss use this: {{{ [httpauth] formats = rss }}} == Troubleshooting == === Authentication issues while using Trac with mod_wsgi === ==== Symptom ==== HTTP authentication just does not want to work. The Authorization header is passed with the HTTP request, but it seems to be lost on the way. If you set the `loglevel` to `INFO`, then you will get this entry in your `trac.log`: {{{ Trac[filter] INFO: HTTPAuthFilter: No/bad authentication data given, returing 403 }}} It is already in Ticket #1169. I've quoted it here, since the solution is hard to find otherwise. ==== Cause ==== If you're using `mod_wsgi`, authorization information is stripped before passing to the WSGI application. === Solution === Turn `WSGIPassAuthorization On` in your `Apache` configuration for it to work. See also [http://code.google.com/p/modwsgi/wiki/ConfigurationDirectives ConfigurationDirectives] == Recent Changes == [[ChangeLog(httpauthplugin, 3)]] == Author/Contributors == '''Author:''' [wiki:coderanger] [[BR]] '''Contributors:'''