Hello everyone, and thankyou for all replies.
Here are some clarifications: Like I said, it WORKS "fine" if I use
OmitDomain ON.
But THAT is the problem: I want the domain, in this case. So the PROBLEM
is:
I cant get trac to match when the domain is included.
I got some useful stuff I will try, and get back. But I do have some
questions.
Norbert Unterberg wrote:
> 2006/10/31, Widerberg Marcus <[EMAIL PROTECTED]>:
>
>> Ie: I use mod_sspi and trac gets either just username (with
>> SSPIOmitDomain On) or DOMAIN\USERNAME (with SSPIOmitDomain Off).
>
> Why are you using uppercase user names? User name match is case
> sensitive in Trac.
Precisely.
> User name case seems to be a main problem on windows systems with
> SSPI. It works in out setup with the following configuration:
Well, Windows users are not used to case sensitivity. Some like
lowercase, some uppercase.
When you use *nix apps, you either state a convention or try and make
the *nix app be case-insensitive as well.
>> === 1: Permissions for trac project:
>>
>> User Action
>> -----------------------------
>> SEWIDERBERGM TRAC_ADMIN
>> TP1\\SEWIDERBERGM TRAC_ADMIN
>
> Use user names in lower case only, without the domain part if you can
> afford it (i.e. if you do not have users from different domains).
> The double backslash \\ is an error, anyway.
You are correct, as you can see from my clarification above, I do have
users from different domains.
So here it seems a simple answer may lie: If the double backslash is the
problem, how do I enter a user name with a single backslash?
I simply used (don't have python in my system path):
c:\python24\python.exe c:\python24\scripts\trac-admin
C:\projects\trac\my-project permission add TP1\SEWIDERBERGM TRAC_ADMIN
This creates the entry with the doubleslash above.
So if that is an issue, how do I do it to get a single backslash?
>> === 2: httpd.conf:
>>
>> SSPIAuth On
>> SSPIAuthoritative On
>> SSPIOfferBasic On
>> SSPIDomain TP1
>> SSPIOmitDomain Off
>> SSPIBasicPreferred On
>
> Use version 1.0.3 of mod_auth_sspi:
>
http://www.gknw.net/development/apache/httpd-2.0/win32/modules/mod_auth_
sspi-1.0.3-2.0.54.zip
>
> and add these lines:
> SSPIOmitDomin on
> SSPIUsernameCase lower
This is an improvement, I was not aware of the SSPIUsernameCase lower
option - sloppy of me.
Thankyou for this, and your reply!
Best regards,
/mawi
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Trac Users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at
http://groups.google.com/group/trac-users?hl=en
-~----------~----~----~----~------~----~------~--~---
