Hi, 

 

Sorry, that i am testing moinmoin with different mehtods. you are right that i 
configured before also my moinmoin with LDAP but i saw some problems that RSS 
feed is not working and my ACL was giving me some problems and sometimes when i 
clicked on some links on my wiki pages then suddenly i go logout automatically. 
I was tested these things on my test machine. but on my real machine untill now 
running moinmoin with sspi. I thought, it is better to run my apache via ssl, 
because of security reasons, therefore i configure my apache with ssl.

 

now i did some troubleshooting as you said.

 

First i run my moinmoin with http, sspi_authentication and it is running fine.

 

2nd i run my moinmon with https, sspi_authentication and it is not working and 
it is giving following message in ssl_request.log.


[20/Feb/2009:18:27:48 +0100] 172.16.11.184 TLSv1 AES128-SHA "GET /supwiki 
HTTP/1.1" 401


3rd: i run my moinmoin with https, without sspi_authtentication then it shows 
moinmoin page.Thats mean it is working.

and error.log file giving me following detail when i start apache. 

 

[Fri Feb 20 18:19:31 2009] [warn] RSA server certificate CommonName (CN) 
`nv1402' does NOT match server name!?
[Fri Feb 20 18:19:31 2009] [warn] RSA server certificate CommonName (CN) 
`nv1402' does NOT match server name!?
[Fri Feb 20 18:19:31 2009] [warn] mod_wsgi: Compiled for Python/2.5.
[Fri Feb 20 18:19:31 2009] [warn] mod_wsgi: Runtime using Python/2.5.2.
[Fri Feb 20 18:19:31 2009] [warn] mod_wsgi: Python module path 
'C:\\Windows\\system32\\python25.zip;C:\\Python25\\Lib;C:\\Python25\\DLLs;C:\\Python25\\Lib\\lib-tk;;C:\\Program
 Files\\Apache Software Foundation\\Apache2.2\\bin'.
[Fri Feb 20 18:19:31 2009] [notice] Apache/2.2.8 (Win32) mod_ssl/2.2.8 
OpenSSL/0.9.8g mod_wsgi/2.3 Python/2.5.2 mod_auth_sspi/1.0.4 configured -- 
resuming normal operations
[Fri Feb 20 18:19:31 2009] [notice] Server built: Jan 18 2008 00:37:19
[Fri Feb 20 18:19:31 2009] [notice] Parent: Created child process 4636
[Fri Feb 20 18:19:32 2009] [warn] RSA server certificate CommonName (CN) 
`nv1402' does NOT match server name!?
[Fri Feb 20 18:19:33 2009] [warn] RSA server certificate CommonName (CN) 
`nv1402' does NOT match server name!?
[Fri Feb 20 18:19:33 2009] [warn] mod_wsgi: Compiled for Python/2.5.
[Fri Feb 20 18:19:33 2009] [warn] mod_wsgi: Runtime using Python/2.5.2.
[Fri Feb 20 18:19:33 2009] [warn] mod_wsgi: Python module path 
'C:\\Windows\\system32\\python25.zip;C:\\Python25\\Lib;C:\\Python25\\DLLs;C:\\Python25\\Lib\\lib-tk;;C:\\Program
 Files\\Apache Software Foundation\\Apache2.2\\bin'.
[Fri Feb 20 18:19:33 2009] [notice] Child 4636: Child process is running
[Fri Feb 20 18:19:33 2009] [notice] Child 4636: Acquired the start mutex.
[Fri Feb 20 18:19:33 2009] [notice] Child 4636: Starting 64 worker threads.
[Fri Feb 20 18:19:33 2009] [notice] Child 4636: Starting thread to listen on 
port 443.

 



These kind of things confusing me really. I hope i will find a way to run 
moinmoin with ssl and sspi :).

 

 

Have a nice weekend, 

 

we will meet on Monday and really thanks a lot for helping.

 

Best Regards,

 

Waqas Ahmad

 

 

 


> Date: Fri, 20 Feb 2009 10:23:08 -0600
> Subject: Re: [Moin-user] SSPI with https
> From: rick.vanderv...@gmail.com
> To: waqas...@hotmail.com
> CC: moin-user@lists.sourceforge.net
> 
> You're very confusing, Waqas. :-) First, you start out using sspi,
> then switch to LDAP for some unknown reason even though sspi is
> working fine, and now you're back to sspi? huh.
> 
> sspi shouldn't have anything to do with SSL, it's merely an
> authentication mechanism. If it's prompting for username/password, it
> sounds like that portion is working correctly. In other words, once
> it does it's task, it steps out of the way and lets the next step
> occur.
> 
> To troubleshoot, I would suggest disabling sspi authentication
> altogether, and see if moin will display pages at that point. Try to
> figure out at exactly what stage it's breaking. Also, don't forget to
> check your error logs for hints and insight.
> 
> -Rick
> 
> 
> 
> 
> On Fri, Feb 20, 2009 at 10:06 AM, waqas ahmad <waqas...@hotmail.com> wrote:
> >
> >
> >
> > Hi,
> >
> > my sspi authentication is working fine with http but now i changed to https
> > and sspi authentication is not working. It asks for username and password
> > but then page can not be displayes.
> >
> > should i configure sspi in apache. or it will be remain same.
> >
> > thanks in advance,
> >
> > Regards,
> >
> > Waqas Ahmad
> >
> >
> >
> > ________________________________
> > Invite your mail contacts to join your friends list with Windows Live
> > Spaces. It's easy! Try it!
> > ------------------------------------------------------------------------------
> > Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
> > -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
> > -Strategies to boost innovation and cut costs with open source participation
> > -Receive a $600 discount off the registration fee with the source code: SFAD
> > http://p.sf.net/sfu/XcvMzF8H
> > _______________________________________________
> > Moin-user mailing list
> > Moin-user@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/moin-user
> >
> >

_________________________________________________________________
Invite your mail contacts to join your friends list with Windows Live Spaces. 
It's easy!
http://spaces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx&mkt=en-us
------------------------------------------------------------------------------
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H
_______________________________________________
Moin-user mailing list
Moin-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/moin-user

Reply via email to