Andreas Jellinghaus wrote:
> https
..
> last time I checked subversion was a quite complex code using
> several layers like apr, neon, openssl/gnutls/... and I couldn't
> figure out how smart card support could be added.

https is webdav, which is implemented by neon or serf. Apparently
serf will become the default in next subversion, although it is still
not implemented quite correctly with regard to internal subversion
APIs, so sometimes it can fail with fairly nonsensical error
messages. (git svn clone from googlecode in particular tends to fail
with serf but works fine with neon.)


> > This is configurable. Email validation can be required before
> > users are allowed to change content in wiki and tickets. 
> 
> how? haven't seen any plugin or whatever to do that.
> sure, there is some option to validate email address, but it seems
> to do nothing (guess it checks the email field for syntax, not does
> the usual send email and wait for response).
> 
> [components]
> ...
> acct_mgr.web_ui.emailverificationmodule = enabled
> 
> did nothing, I created a new account w/o email and
> could login with that account.

It's not enough on it's own. I have:

[notification]
smtp_enabled = true
smtp_from = t...@...
smtp_server = localhost

[components]
acct_mgr.api = enabled
acct_mgr.htfile.htdigeststore = enabled
acct_mgr.web_ui.accountmodule = enabled
acct_mgr.web_ui.emailverificationmodule = enabled
acct_mgr.web_ui.loginmodule = enabled
acct_mgr.web_ui.registrationmodule = enabled
trac.web.auth.loginmodule = disabled
tracext.git.* = enabled
authopenid.* = enabled

[account-manager]
password_store = HtDigestStore
password_format = htdigest
password_file = passfile
htdigest_realm = Trac

[openid]
sreg_required = true
gmail = false
strip_protocol = true
strip_trailing_slash = true


IIRC smtp_enabled=true is key. There is something about letting Trac
know that it is actually allowed to send stuff to people's email
addresses, before the verification starts to kick in. Also check
permissions within Trac for anything weird. In the libusb Trac there
was an "authenticated" group autocreated on install, which people
belong to only after they have verified their email address using the
current config. Login still works, but not write operations.


//Peter
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to