who are you Get Outlook for Android<https://aka.ms/AAb9ysg> ________________________________ From: trac-users@googlegroups.com <trac-users@googlegroups.com> on behalf of Michael LiVolsi <mikelivo...@gmail.com> Sent: Thursday, March 9, 2023 9:33:03 PM To: Trac Users <trac-users@googlegroups.com> Subject: Re: [Trac] Trac 1.4.3 with Apache2.4 on Ubuntu 22.04 - Problems
Oh for the love of Pete... obey_remote_user_header (try googling that term and you get 0 returns) It was set on an old install. Yeah.. that worked. On Thursday, March 9, 2023 at 6:19:37 PM UTC-5 Michael LiVolsi wrote: Swing and a miss.. Strike 1 I re-wrote this apache conf.. I took LDAP OUT of the equation. I'm authenticating.. but... TRACD hasn't got a clue of which user was authenticated... so it becomes anonymous. <VirtualHost *:443> ServerAdmin mlivolsi@xxxxx ServerName trac2.xxxx ServerAlias trac2.xxxx DocumentRoot /var/trac/sites/traffic/htdocs <Directory /var/trac/sites/traffic/htdocs> <IfModule mod_authz_core.c> Options FollowSymLinks AllowOverride Limit Options FileInfo DirectoryIndex index.html Require all granted </IfModule> </Directory> <Location /traffic> ProxyPass http://127.0.0.1:3000/traffic ProxyPassReverse http://127.0.0.1:3000/traffic AuthType Basic AuthBasicProvider file AuthName "Enter your e-mail address and password." AuthUserFile /var/trac/sites/traffic/htdocs/.htpasswd Require valid-user Satisfy All </Location> ProxyPreserveHost on ErrorLog ${APACHE_LOG_DIR}/error.log CustomLog ${APACHE_LOG_DIR}/access.log combined SSLEngine on SSLCertificateFile /etc/ssl/certs/STAR_mla_org.crt SSLCertificateKeyFile /etc/ssl/private/app/server_2020.key SSLCertificateChainFile /etc/ssl/certs/CA_bundle.crt </VirtualHost> On Wednesday, March 8, 2023 at 1:55:49 AM UTC-5 Tony Brian Albers (XTOAL) wrote: Good morning Mike, See if this helps, it's taken from one of our setups(we're running trac via WSGI though): <Location "/"> 38 AuthLDAPBindDN "CN=CommonName,OU=ServiceAccounts,OU=Unit,DC=Base,DC=Place" 39 AuthLDAPBindPassword "whatever" 40 # search user 41 AuthLDAPURL "ldap://ip.ip.ip.ip/OU=ServiceAccounts,DC=Base,DC=Place?sAMAccountName?sub?(objectClass=*)" 42 AuthLDAPBindAuthoritative on 43 AuthType Basic 44 AuthBasicProvider file ldap 45 AuthName "Enter TRAC password" 46 AuthUserFile /opt/trac/htpasswd 47 Require valid-user 48 WSGIApplicationGroup %{GLOBAL} 49 </Location> HTH /tony -- Tony Albers - SCSA, SCNA, EMCIE, EMCBA, RHCSA Transition Manager - FIT/TMS Delivery Team - Signalling Integrations Banedanmark, Signalling Systems Carsten Niebuhrs Gade 43, 1577 Copenhagen V ________________________________________ From: trac-...@googlegroups.com <trac-...@googlegroups.com> on behalf of Michael LiVolsi <mikel...@gmail.com> Sent: 07 March 2023 23:02 To: Trac Users Subject: [Trac] Trac 1.4.3 with Apache2.4 on Ubuntu 22.04 - Problems CAUTION: This email originated from outside the organization. Glad I found this group. Gist of the Problem: I can authenticate against LDAP and .htpasswd, but the user is still being set to "anonymous". Does authentication Work ? Yes. I know .htpasswd and ldap are working is that when I enter an invalid password, I get re-prompted. Site Location My location for everything is "/var/trac/sites/traffic" How it's all configured: * Apache as the web server with tracd running. * LDAP and .htpasswd as the authentication vehicles. * Postgresql as the database back-end I start the trac daemon like this from unix account : "admin" /usr/local/bin/tracd --daemonize --pidfile=/var/trac/tracd.pid --port=3000 --hostname=localhost --base-path=/traffic -s /var/trac/sites/traffic I've attached my apache configuration. I've attached my trac.ini configuration. I've attached the apache mods that are enabled. and finally, all the modules installed: Package Version --------------------------- -------- Genshi 0.7.7 html5lib 1.1 Jinja2 2.11.3 MarkupSafe 1.1.1 nose 1.3.7 pip 20.3.4 postgres 4.0 psycopg2-binary 2.8.6 psycopg2-pool 1.1 pyasn1 0.4.8 pyasn1-modules 0.2.8 python-dateutil 2.8.2 pytz 2022.7.1 setuptools 44.1.1 six 1.16.0 svn 1.0.1 Trac 1.4.3 TracAutocompleteUsersPlugin 0.4.7 TracSimpleTicket 5.0 TracTags 0.12.1 webencodings 0.5.1 wheel 0.37.1 I'll owe someone a beer (or coffee) is I can get this going. Thanks for any help. - Mike - -- You received this message because you are subscribed to the Google Groups "Trac Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to trac-users+...@googlegroups.com<mailto:trac-users+...@googlegroups.com>. To view this discussion on the web visit https://groups.google.com/d/msgid/trac-users/80ac720d-e5ea-4630-b8b0-d83a8a26505cn%40googlegroups.com<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgroups.google.com%2Fd%2Fmsgid%2Ftrac-users%2F80ac720d-e5ea-4630-b8b0-d83a8a26505cn%2540googlegroups.com%3Futm_medium%3Demail%26utm_source%3Dfooter&data=05%7C01%7Cxtoal%40bane.dk%7C57eda163003d47b474cb08db1f5b0cce%7C2e91ef123cbc456a8637b8d139d5d3a7%7C0%7C0%7C638138248144299912%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=pqd2MVNuzubd6XUOh8t%2Fd4wNidl%2BKIlCwF%2BrJ1mdP5I%3D&reserved=0>. -- You received this message because you are subscribed to the Google Groups "Trac Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to trac-users+unsubscr...@googlegroups.com<mailto:trac-users+unsubscr...@googlegroups.com>. To view this discussion on the web visit https://groups.google.com/d/msgid/trac-users/6c1a573b-25a9-4533-992c-770174fa3b8fn%40googlegroups.com<https://groups.google.com/d/msgid/trac-users/6c1a573b-25a9-4533-992c-770174fa3b8fn%40googlegroups.com?utm_medium=email&utm_source=footer>. -- You received this message because you are subscribed to the Google Groups "Trac Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to trac-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/trac-users/DM8PR13MB5127812CAEC69119F9F6AF36FBBA9%40DM8PR13MB5127.namprd13.prod.outlook.com.