Re: [Trac] error - "LDAP error: Operations error"

2013-10-29 Thread Remy Blank
Stuart Cracraft wrote:
> What does the above error mean in the trac.log file?

Stuart, you have been sending a lot of questions to this mailing list
lately. A number of them made it quite difficult for other participants
to help you.

You could benefit from reading the following page and applying the
advice given there:

  http://www.catb.org/esr/faqs/smart-questions.html

-- Remy



signature.asc
Description: OpenPGP digital signature


[Trac] error - "no policy allowed"

2013-10-29 Thread Stuart Cracraft
What does "No policy alllowed username performing SOME_PRIVILEGE on None" 
in trac.log mean?

-- 
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to trac-users+unsubscr...@googlegroups.com.
To post to this group, send email to trac-users@googlegroups.com.
Visit this group at http://groups.google.com/group/trac-users.
For more options, visit https://groups.google.com/groups/opt_out.


[Trac] error - "LDAP error: Operations error"

2013-10-29 Thread Stuart Cracraft
What does the above error mean in the trac.log file?

-- 
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to trac-users+unsubscr...@googlegroups.com.
To post to this group, send email to trac-users@googlegroups.com.
Visit this group at http://groups.google.com/group/trac-users.
For more options, visit https://groups.google.com/groups/opt_out.


[Trac] Re: group

2013-10-29 Thread Stuart Cracraft
My trac.log looks like this:
 

2013-10-29 09:53:25,866 Trac[env] WARNING: base_url option not set in 
configuration, generated links may be incorrect

2013-10-29 09:53:25,867 Trac[main] DEBUG: Dispatching 

2013-10-29 09:53:25,869 Trac[svn_fs] DEBUG: Subversion bindings imported

2013-10-29 09:53:25,871 Trac[api] INFO: Synchronized 'mtg' repository in 
0.00 seconds

2013-10-29 09:53:25,873 Trac[session] DEBUG: Retrieving session for ID 
u'scracraft'

2013-10-29 09:53:25,875 Trac[api] DEBUG: action controllers for ticket 
workflow: ['ConfigurableTicketWorkflow']

2013-10-29 09:53:25,879 Trac[api] ERROR: LDAP error: Operations error

2013-10-29 09:53:25,881 Trac[api] ERROR: LDAP error: Operations error

2013-10-29 09:53:25,882 Trac[chrome] DEBUG: Prepare chrome data for request

2013-10-29 09:53:25,884 Trac[perm] DEBUG: No policy allowed scracraft 
performing TRAC_ADMIN on None

2013-10-29 09:53:25,884 Trac[perm] DEBUG: No policy allowed scracraft 
performing PERMISSION_GRANT on None

2013-10-29 09:53:25,884 Trac[perm] DEBUG: No policy allowed scracraft 
performing PERMISSION_REVOKE on None

2013-10-29 09:53:25,884 Trac[perm] DEBUG: No policy allowed scracraft 
performing TICKET_ADMIN on None

2013-10-29 09:53:25,884 Trac[perm] DEBUG: No policy allowed scracraft 
performing MILESTONE_VIEW on None

2013-10-29 09:53:25,884 Trac[perm] DEBUG: No policy allowed scracraft 
performing VERSIONCONTROL_ADMIN on None

2013-10-29 09:53:25,885 Trac[perm] DEBUG: No policy allowed scracraft 
performing TICKET_VIEW on None

2013-10-29 09:53:25,885 Trac[perm] DEBUG: No policy allowed scracraft 
performing REPORT_VIEW on None

2013-10-29 09:53:25,885 Trac[perm] DEBUG: No policy allowed scracraft 
performing ROADMAP_VIEW on None

2013-10-29 09:53:25,885 Trac[perm] DEBUG: No policy allowed scracraft 
performing TIMELINE_VIEW on None

2013-10-29 09:53:25,886 Trac[perm] DEBUG: No policy allowed scracraft 
performing BROWSER_VIEW on None

2013-10-29 09:53:25,975 Trac[perm] DEBUG: No policy allowed scracraft 
performing WIKI_ADMIN on 

2013-10-29 09:53:26,035 Trac[perm] DEBUG: No policy allowed scracraft 
performing WIKI_DELETE on 

2013-10-29 09:53:26,036 Trac[perm] DEBUG: No policy allowed scracraft 
performing WIKI_RENAME on 
scracraft is one of the members of a group called abcdef. I want all 
members of
this group to have browser view permission.
 
Anyone?

On Monday, October 28, 2013 5:20:45 PM UTC-7, Stuart Cracraft wrote:

> Hi,
>  
> I am trying to use TRAC in LDAP mode for group authentication.
>  
> This way, I can successively let appropriate groups in to access 
> appropriate code.
>  
> Has anyone done this and willing to share?
>  
> Where do I tell TRAC the list of LDAP groups permitted to access any given 
> repository?
>  
> Thanks ahead,
>  
> Stuart
>  
>  
>  
>

-- 
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to trac-users+unsubscr...@googlegroups.com.
To post to this group, send email to trac-users@googlegroups.com.
Visit this group at http://groups.google.com/group/trac-users.
For more options, visit https://groups.google.com/groups/opt_out.


Re: [Trac] group

2013-10-29 Thread Matthew Caron
When I used LDAP auth for Trac (was actually through Kerberos), I did it 
all in the apache config using standard Apache bits.


http://modauthkerb.sourceforge.net/configure.html

Theoretically, you should be able to limit access by URL, assuming it 
has a concept of groups.


If you're using Trac internal auth, or don't want to hack the apache 
config every time you add a repo, perhaps something with the Account 
Manager Plugin would work:


http://trac-hacks.org/wiki/AccountManagerPlugin

There is an LDAP section which may get you started:

http://trac-hacks.org/wiki/AccountManagerPlugin/AuthStores#LDAP

(But I've not used it, so I believe here is where my suggestions run out).

On 10/28/2013 08:20 PM, Stuart Cracraft wrote:

Hi,
I am trying to use TRAC in LDAP mode for group authentication.
This way, I can successively let appropriate groups in to access
appropriate code.
Has anyone done this and willing to share?
Where do I tell TRAC the list of LDAP groups permitted to access any
given repository?
Thanks ahead,
Stuart

--
You received this message because you are subscribed to the Google
Groups "Trac Users" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to trac-users+unsubscr...@googlegroups.com.
To post to this group, send email to trac-users@googlegroups.com.
Visit this group at http://groups.google.com/group/trac-users.
For more options, visit https://groups.google.com/groups/opt_out.


--
Matthew Caron, Software Build Engineer
Red Lion Controls | www.redlion.net
+1 (518) 877-5173 x138 office

--
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to trac-users+unsubscr...@googlegroups.com.
To post to this group, send email to trac-users@googlegroups.com.
Visit this group at http://groups.google.com/group/trac-users.
For more options, visit https://groups.google.com/groups/opt_out.


[Trac] Re: group

2013-10-29 Thread Stuart Cracraft
Hello?

On Monday, October 28, 2013 5:20:45 PM UTC-7, Stuart Cracraft wrote:

> Hi,
>  
> I am trying to use TRAC in LDAP mode for group authentication.
>  
> This way, I can successively let appropriate groups in to access 
> appropriate code.
>  
> Has anyone done this and willing to share?
>  
> Where do I tell TRAC the list of LDAP groups permitted to access any given 
> repository?
>  
> Thanks ahead,
>  
> Stuart
>  
>  
>  
>

-- 
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to trac-users+unsubscr...@googlegroups.com.
To post to this group, send email to trac-users@googlegroups.com.
Visit this group at http://groups.google.com/group/trac-users.
For more options, visit https://groups.google.com/groups/opt_out.