Hello again, I actually found the problem I had now, and solved all my issues.
When entering the permissions through the commandline I get two backslashes. When I enter the trac-admin console app, and do add permission there, I do not - it works correctly then. So the tips are: (1) Use >> SSPIOmitDomin on >> SSPIUsernameCase lower (2) Set all permissions to lowercase (since we are now using the option above, duh). (3) And add all permissions via the trac-admin console, not by invoking it as a command, ie NOT: c:\python24\python.exe c:\python24\scripts\trac-admin C:\projects\trac\my-project permission add domain\username TRAC_ADMIN But rather: c:\python24\python.exe c:\python24\scripts\trac-admin C:\projects\trac\my-project And then: permission add [...] Thanks for the help! /marcus Widerberg Marcus wrote: > Hello everyone, and thankyou for all replies. > > Here are some clarifications: Like I said, it WORKS "fine" if I use > OmitDomain ON. > > But THAT is the problem: I want the domain, in this case. So the > PROBLEM > is: > > I cant get trac to match when the domain is included. > > > I got some useful stuff I will try, and get back. But I do have some > questions. > > > Norbert Unterberg wrote: >> 2006/10/31, Widerberg Marcus <[EMAIL PROTECTED]>: >> >>> Ie: I use mod_sspi and trac gets either just username (with >>> SSPIOmitDomain On) or DOMAIN\USERNAME (with SSPIOmitDomain Off). >> >> Why are you using uppercase user names? User name match is case >> sensitive in Trac. > > Precisely. > >> User name case seems to be a main problem on windows systems with >> SSPI. It works in out setup with the following configuration: > > Well, Windows users are not used to case sensitivity. Some like > lowercase, some uppercase. > > When you use *nix apps, you either state a convention or try and make > the *nix app be case-insensitive as well. > >>> === 1: Permissions for trac project: >>> >>> User Action >>> ----------------------------- >>> SEWIDERBERGM TRAC_ADMIN >>> TP1\\SEWIDERBERGM TRAC_ADMIN >> >> Use user names in lower case only, without the domain part if you can >> afford it (i.e. if you do not have users from different domains). >> The double backslash \\ is an error, anyway. > > You are correct, as you can see from my clarification above, I do > have users from different domains. > > So here it seems a simple answer may lie: If the double backslash is > the problem, how do I enter a user name with a single backslash? > > I simply used (don't have python in my system path): > > c:\python24\python.exe c:\python24\scripts\trac-admin > C:\projects\trac\my-project permission add TP1\SEWIDERBERGM > TRAC_ADMIN > > This creates the entry with the doubleslash above. > > So if that is an issue, how do I do it to get a single backslash? > >>> === 2: httpd.conf: >>> >>> SSPIAuth On >>> SSPIAuthoritative On >>> SSPIOfferBasic On >>> SSPIDomain TP1 >>> SSPIOmitDomain Off >>> SSPIBasicPreferred On >> >> Use version 1.0.3 of mod_auth_sspi: >> > http://www.gknw.net/development/apache/httpd-2.0/win32/modules/mod_auth_ > sspi-1.0.3-2.0.54.zip >> >> and add these lines: >> SSPIOmitDomin on >> SSPIUsernameCase lower > > This is an improvement, I was not aware of the SSPIUsernameCase lower > option - sloppy of me. > > Thankyou for this, and your reply! > > > Best regards, > > /mawi > > --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Trac Users" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/trac-users?hl=en -~----------~----~----~----~------~----~------~--~---
