On 4/7/09 2:10 PM, Erik Bray wrote:
> On Tue, Apr 7, 2009 at 4:33 PM, Noah Kantrowitz<[email protected]>  wrote:
>>
>>
>>> -----Original Message-----
>>> From: [email protected] [mailto:[email protected]] On
>>> Behalf Of Remy Blank
>>> Sent: Tuesday, April 07, 2009 1:25 PM
>>> To: [email protected]
>>> Subject: [Trac-dev] Re: making form-based auth the default?
>>>
>>> John Hampton wrote:
>>>> I'd like to hear the opinion of others on this point.  SessionStore
>>> or
>>>> htpasswd file as the default password store for new environments
>>> I have no strong preference for either one, but I also think that using
>>> the same authentication store for Trac and other systems is the
>>> exception rather than the norm. And most other systems I have used
>>> (admittedly not many) store user credentials in their database.
>>>
>>> So +0 for SessionStore from me.
>> I would buy that if not for the primary exception of Trac on Apache +
>> mod_dav_svn. And that's a pretty common case.
>
> I'm +0 for htpasswd for this very reason.  Personally I prefer to use
> a DB-based password store for my Trac servers, and to support SVN auth
> I wrote a simple mod_python auth handler that connects to said
> database.  Works for me, but not for everyone.  I suppose one could
> contribute an Apache module in C for using Trac auth, but I doubt
> anyone wants to support that.  Otherwise, I'm not sure of a way other
> than htpasswd that would be widely supported.

I haven't followed the entire thread closely...

I also have a mod_python handler for a similar reason.  I've never cared 
much for htpasswd use (and it wont work for my use case anyway), but it 
seems to me that different sessionstore implementations should be able 
to be backed by either database or flat file (e.g. htpasswd).  Those 
that want to go the route of having an apache handler use the session 
store could do that.

Shane


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Trac 
Development" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/trac-dev?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to