Emmanuel Blot wrote:
>>  The idea here is to use form based login if auth
>> is not provided by apache or whatever server.
> 
> How will you separate both cases:
>   1. "I just want the login/logout feature to work" (I don't care
> about HTTP authentication stuff)
>   2. "I screwed up my Apache installation and HTTP authentication does
> not work"
> ?

Why bother separating them?  We can document the fact that if you see
form based auth and your intention was to use apache auth, then you have
one of two cases: a) you didn't setup apache auth b) you apache auth is
screwed up.

I don't see the benefit in try to distinguish between them.  First, it's
nigh-impossible.  Second, those that actually want to use apache auth,
are also most likely those that can configure it properly.  I may be
open to an option in trac.ini where one can explicitly state what they
want.  I could then produce a logout page of "Please close your browser
to completely log out" if people want to use apache auth.

> I'm not sure what's in the box, but whatever the final implementation
> I hope there will not be a default form-based authentication that pops
> up if Apache-based HTTP authentication has been actually requested.

Apache auth will actually override form based auth (unless I adapt an
explicit flag as noted above).  My reasoning is that most people want
form based auth.  If one actually goes through the pain and anguish of
configuring apache auth, then they should get it.

> This choice could be made at environment creation time, with special
> care so that already installed environments do not get form-based
> enabled when the upgrade to 0.12 occurs.

I really don't like this option.  If people already have apache auth
configured, then they won't see any difference.  It should be
transparent to them.

-John

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Trac 
Development" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/trac-dev?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to