Emmanuel Blot wrote: >> The idea here is to use form based login if auth >> is not provided by apache or whatever server. > > How will you separate both cases: > 1. "I just want the login/logout feature to work" (I don't care > about HTTP authentication stuff) > 2. "I screwed up my Apache installation and HTTP authentication does > not work" > ?
Why bother separating them? We can document the fact that if you see form based auth and your intention was to use apache auth, then you have one of two cases: a) you didn't setup apache auth b) you apache auth is screwed up. I don't see the benefit in try to distinguish between them. First, it's nigh-impossible. Second, those that actually want to use apache auth, are also most likely those that can configure it properly. I may be open to an option in trac.ini where one can explicitly state what they want. I could then produce a logout page of "Please close your browser to completely log out" if people want to use apache auth. > I'm not sure what's in the box, but whatever the final implementation > I hope there will not be a default form-based authentication that pops > up if Apache-based HTTP authentication has been actually requested. Apache auth will actually override form based auth (unless I adapt an explicit flag as noted above). My reasoning is that most people want form based auth. If one actually goes through the pain and anguish of configuring apache auth, then they should get it. > This choice could be made at environment creation time, with special > care so that already installed environments do not get form-based > enabled when the upgrade to 0.12 occurs. I really don't like this option. If people already have apache auth configured, then they won't see any difference. It should be transparent to them. -John --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Trac Development" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/trac-dev?hl=en -~----------~----~----~----~------~----~------~--~---
