Hello,
I want my users to be able to access https://wiki.com unauthenticated
and optionally login through https://wiki.com/_login using apache
authentication and REMOTE_USER variable. I have put this in apache config:
<LocationMatch "/.*/_login">
    AuthType Basic
    AuthName "auth"
    AuthExternal auth-db
    AuthBasicProvider external
    Require valid-user
</LocationMatch>

However this doesn't work because apache does not provide REMOTE_USER
variable outside _login. If I comment out this code in request function
in MoinMoin/auth/__init__.py, it works:

# always revalidate auth
if user_obj and user_obj.auth_method == self.name:
    user_obj = None

Can you provide option always_revalidate_auth, so I can setup that in
farmconfig? I guess it might cause some security issues but I use
similar mechanism in trac.
I'm using moinmoin 1.9.3-1ubuntu2 on ubuntu 12.04.

Regards,
-Stefan

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Moin-user mailing list
Moin-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/moin-user

Reply via email to