Mod_sspi only seems to run on windows, AFAIK.  Is there an equivalent module 
that runs on linux?  We've been using mod_kerb and had to resort to hacking 
trac source in order to get this behaviour.

Russ
Sent wirelessly via BlackBerry from T-Mobile.  

-----Original Message-----
From: "Norbert Unterberg" <[EMAIL PROTECTED]>
Date: Mon, 6 Nov 2006 22:30:37 
To:[email protected]
Subject: [Trac] Re: NT domain problem


2006/10/31, Widerberg Marcus <[EMAIL PROTECTED]>:

> Ie: I use mod_sspi and trac gets either just username (with
> SSPIOmitDomain On) or DOMAIN\USERNAME (with SSPIOmitDomain Off).

Why are you using uppercase user names? User name match is case
sensitive in Trac.
User name case seems to be a main problem on windows systems with
SSPI. It works in out setup with the following configuration:


> === 1: Permissions for trac project:
>
> User               Action
> -----------------------------
> SEWIDERBERGM       TRAC_ADMIN
> TP1\\SEWIDERBERGM  TRAC_ADMIN

Use user names in lower case only, without the domain part if you can
afford it (i.e. if you do not have users from different domains).  The
double backslash \\ is an error, anyway.

> === 2: httpd.conf:
>
>   SSPIAuth On
>   SSPIAuthoritative On
>   SSPIOfferBasic On
>   SSPIDomain TP1
>   SSPIOmitDomain Off
>   SSPIBasicPreferred On

Use version 1.0.3 of mod_auth_sspi:
http://www.gknw.net/development/apache/httpd-2.0/win32/modules/mod_auth_sspi-1.0.3-2.0.54.zip

and add these lines:
   SSPIOmitDomin on
   SSPIUsernameCase lower

Then it should work.

Norbert


--~--~---------~--~----~------------~-------~--~----~
 You received this message because you are subscribed to the Google Groups 
"Trac Users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to