I'm now running "trac-admin <instance> session delete $uid" for all 3000+ sessions I see in the output of "trac-admin <instance> session list authenticated"
Will it have the desired effect? On Monday, January 30, 2023 at 4:54:39 PM UTC Dima Pasechnik wrote: > In our installation of trac 1.2, the only way I can disable a user login > is by > removing them manually from the file pointed at by htdigest_file= > in trac.ini's [account-manager] section. > (somehow, web admin interface does not do this :-( ) > > However, the user is still able to modify trac contents, as long as they > didn't log out in the browser (even after a reboot of the trac server). > So they still hold some kind of login/access token. > > Question: how does one log out all the users from the server side? > (i.e., expire their access tokens) ? > > ------------------ > > We need this to make the trac server read-only. > > Thanks, > Dima > > > > > > -- You received this message because you are subscribed to the Google Groups "Trac Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/trac-users/9a52c77d-3a62-40c2-986c-52b80c48f975n%40googlegroups.com.
