If you get some spare time, I think it would be great to update the wiki doc about this SSPI specific issues, as many users are facing problems w/ SSPI. Maybe a dedicated page to SSPI would be even better.
Cheers, Manu On 11/7/06, Widerberg Marcus <[EMAIL PROTECTED]> wrote: > > Hello again, > > I actually found the problem I had now, and solved all my issues. > > When entering the permissions through the commandline I get two > backslashes. > > When I enter the trac-admin console app, and do add permission there, I > do not - it works correctly then. > > So the tips are: > > (1) Use > >> SSPIOmitDomin on > >> SSPIUsernameCase lower > > (2) Set all permissions to lowercase (since we are now using the option > above, duh). > > (3) And add all permissions via the trac-admin console, not by invoking > it as a command, ie NOT: > > c:\python24\python.exe c:\python24\scripts\trac-admin > C:\projects\trac\my-project permission add domain\username TRAC_ADMIN > > But rather: > > c:\python24\python.exe c:\python24\scripts\trac-admin > C:\projects\trac\my-project > > And then: permission add [...] > > Thanks for the help! > > /marcus > > > > Widerberg Marcus wrote: > > Hello everyone, and thankyou for all replies. > > > > Here are some clarifications: Like I said, it WORKS "fine" if I use > > OmitDomain ON. > > > > But THAT is the problem: I want the domain, in this case. So the > > PROBLEM > > is: > > > > I cant get trac to match when the domain is included. > > > > > > I got some useful stuff I will try, and get back. But I do have some > > questions. > > > > > > Norbert Unterberg wrote: > >> 2006/10/31, Widerberg Marcus <[EMAIL PROTECTED]>: > >> > >>> Ie: I use mod_sspi and trac gets either just username (with > >>> SSPIOmitDomain On) or DOMAIN\USERNAME (with SSPIOmitDomain Off). > >> > >> Why are you using uppercase user names? User name match is case > >> sensitive in Trac. > > > > Precisely. > > > >> User name case seems to be a main problem on windows systems with > >> SSPI. It works in out setup with the following configuration: > > > > Well, Windows users are not used to case sensitivity. Some like > > lowercase, some uppercase. > > > > When you use *nix apps, you either state a convention or try and make > > the *nix app be case-insensitive as well. > > > >>> === 1: Permissions for trac project: > >>> > >>> User Action > >>> ----------------------------- > >>> SEWIDERBERGM TRAC_ADMIN > >>> TP1\\SEWIDERBERGM TRAC_ADMIN > >> > >> Use user names in lower case only, without the domain part if you can > >> afford it (i.e. if you do not have users from different domains). > >> The double backslash \\ is an error, anyway. > > > > You are correct, as you can see from my clarification above, I do > > have users from different domains. > > > > So here it seems a simple answer may lie: If the double backslash is > > the problem, how do I enter a user name with a single backslash? > > > > I simply used (don't have python in my system path): > > > > c:\python24\python.exe c:\python24\scripts\trac-admin > > C:\projects\trac\my-project permission add TP1\SEWIDERBERGM > > TRAC_ADMIN > > > > This creates the entry with the doubleslash above. > > > > So if that is an issue, how do I do it to get a single backslash? > > > >>> === 2: httpd.conf: > >>> > >>> SSPIAuth On > >>> SSPIAuthoritative On > >>> SSPIOfferBasic On > >>> SSPIDomain TP1 > >>> SSPIOmitDomain Off > >>> SSPIBasicPreferred On > >> > >> Use version 1.0.3 of mod_auth_sspi: > >> > > > http://www.gknw.net/development/apache/httpd-2.0/win32/modules/mod_auth_ > > sspi-1.0.3-2.0.54.zip > >> > >> and add these lines: > >> SSPIOmitDomin on > >> SSPIUsernameCase lower > > > > This is an improvement, I was not aware of the SSPIUsernameCase lower > > option - sloppy of me. > > > > Thankyou for this, and your reply! > > > > > > Best regards, > > > > /mawi > > > > > > > > -- Manu --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Trac Users" group. To post to this group, send email to trac-users@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/trac-users?hl=en -~----------~----~----~----~------~----~------~--~---
