I have these settings to fix the groups problem.
<Location />
# authentication
AuthName "MyDomain"
AuthType SSPI
SSPIAuth On
SSPIAuthoritative On
SSPIDomain MyDomain
SSPIOfferBasic On
SSPIBasicPreferred On
SSPIOmitDomain On
SSPIUsernameCase On
AuthGroupFile "C:/Program Files/Apache
Group/Apache2/conf/groups.conf"
</Location>
I was getting the error on the groups until I added AuthGroupFile. Now
I have to manage that groups file, but I would prefer to be using the
domain groups set up on the Windows server. Perhaps SSPI could be
patched. Where is the SSPI website, anyway?
Brennan Stehling
http://brennan.offwhite.net/blog/
Emmanuel Blot wrote:
> If you get some spare time, I think it would be great to update the
> wiki doc about this SSPI specific issues, as many users are facing
> problems w/ SSPI. Maybe a dedicated page to SSPI would be even better.
>
> Cheers,
> Manu
>
> On 11/7/06, Widerberg Marcus <[EMAIL PROTECTED]> wrote:
> >
> > Hello again,
> >
> > I actually found the problem I had now, and solved all my issues.
> >
> > When entering the permissions through the commandline I get two
> > backslashes.
> >
> > When I enter the trac-admin console app, and do add permission there, I
> > do not - it works correctly then.
> >
> > So the tips are:
> >
> > (1) Use
> > >> SSPIOmitDomin on
> > >> SSPIUsernameCase lower
> >
> > (2) Set all permissions to lowercase (since we are now using the option
> > above, duh).
> >
> > (3) And add all permissions via the trac-admin console, not by invoking
> > it as a command, ie NOT:
> >
> > c:\python24\python.exe c:\python24\scripts\trac-admin
> > C:\projects\trac\my-project permission add domain\username TRAC_ADMIN
> >
> > But rather:
> >
> > c:\python24\python.exe c:\python24\scripts\trac-admin
> > C:\projects\trac\my-project
> >
> > And then: permission add [...]
> >
> > Thanks for the help!
> >
> > /marcus
> >
> >
> >
> > Widerberg Marcus wrote:
> > > Hello everyone, and thankyou for all replies.
> > >
> > > Here are some clarifications: Like I said, it WORKS "fine" if I use
> > > OmitDomain ON.
> > >
> > > But THAT is the problem: I want the domain, in this case. So the
> > > PROBLEM
> > > is:
> > >
> > > I cant get trac to match when the domain is included.
> > >
> > >
> > > I got some useful stuff I will try, and get back. But I do have some
> > > questions.
> > >
> > >
> > > Norbert Unterberg wrote:
> > >> 2006/10/31, Widerberg Marcus <[EMAIL PROTECTED]>:
> > >>
> > >>> Ie: I use mod_sspi and trac gets either just username (with
> > >>> SSPIOmitDomain On) or DOMAIN\USERNAME (with SSPIOmitDomain Off).
> > >>
> > >> Why are you using uppercase user names? User name match is case
> > >> sensitive in Trac.
> > >
> > > Precisely.
> > >
> > >> User name case seems to be a main problem on windows systems with
> > >> SSPI. It works in out setup with the following configuration:
> > >
> > > Well, Windows users are not used to case sensitivity. Some like
> > > lowercase, some uppercase.
> > >
> > > When you use *nix apps, you either state a convention or try and make
> > > the *nix app be case-insensitive as well.
> > >
> > >>> === 1: Permissions for trac project:
> > >>>
> > >>> User Action
> > >>> -----------------------------
> > >>> SEWIDERBERGM TRAC_ADMIN
> > >>> TP1\\SEWIDERBERGM TRAC_ADMIN
> > >>
> > >> Use user names in lower case only, without the domain part if you can
> > >> afford it (i.e. if you do not have users from different domains).
> > >> The double backslash \\ is an error, anyway.
> > >
> > > You are correct, as you can see from my clarification above, I do
> > > have users from different domains.
> > >
> > > So here it seems a simple answer may lie: If the double backslash is
> > > the problem, how do I enter a user name with a single backslash?
> > >
> > > I simply used (don't have python in my system path):
> > >
> > > c:\python24\python.exe c:\python24\scripts\trac-admin
> > > C:\projects\trac\my-project permission add TP1\SEWIDERBERGM
> > > TRAC_ADMIN
> > >
> > > This creates the entry with the doubleslash above.
> > >
> > > So if that is an issue, how do I do it to get a single backslash?
> > >
> > >>> === 2: httpd.conf:
> > >>>
> > >>> SSPIAuth On
> > >>> SSPIAuthoritative On
> > >>> SSPIOfferBasic On
> > >>> SSPIDomain TP1
> > >>> SSPIOmitDomain Off
> > >>> SSPIBasicPreferred On
> > >>
> > >> Use version 1.0.3 of mod_auth_sspi:
> > >>
> > >
> > http://www.gknw.net/development/apache/httpd-2.0/win32/modules/mod_auth_
> > > sspi-1.0.3-2.0.54.zip
> > >>
> > >> and add these lines:
> > >> SSPIOmitDomin on
> > >> SSPIUsernameCase lower
> > >
> > > This is an improvement, I was not aware of the SSPIUsernameCase lower
> > > option - sloppy of me.
> > >
> > > Thankyou for this, and your reply!
> > >
> > >
> > > Best regards,
> > >
> > > /mawi
> > >
> > >
> >
> > >
> >
>
>
> --
> Manu
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Trac Users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at
http://groups.google.com/group/trac-users?hl=en
-~----------~----~----~----~------~----~------~--~---
