On Wed, Apr 25, 2007 at 07:29:08AM -0400, Noah Kantrowitz wrote:
> Rainer Sokoll wrote:

> > I want to use a form based login instead of HTTP authentication (in
> > fact, I want to have the logout button working)
> > >From what I've learend, this should be possible with AccountManager.
> > All my users are stored in an LDAP directory (MS-ADS, in my case). LDAP
> > authentication works fine from apache. But I cannot bind as an anonymous
> > user, I have to apply a real username/pw combination.
> > In apache:
> >     AuthLDAPBindDN foo
> >     AuthLDAPBindPassword bar
> > Does that mean that I cannot use AccountManager in my environment?
> >
> >   
> You can still use it. Just instead of having the authentication stuff in
> <Location /login>, put it in <Location /httpauth> or something. Then
> point the HttpAuthStore at this new URL.

Even if I have the whole environment protected, not just /login?
I have:
NameVirtualHost x.x.x.x:443
<VirtualHost x.x.x.x:443>
  [SSL stuff]
  <Directory /srv/www/it/htdocs/helpdesk>
    AuthType Basic
    AuthLDAPEnabled on
    AuthLDAPAuthoritative on
    AuthLDAPBindDN "DOMAIN\\auser"
    AuthLDAPBindPassword apassword
    AuthLDAPUrl ldap://x.x.x.x:389/DC=[...]
    AuthName "Access to Helpdesk"
    require valid-user
    SetHandler mod_python
    PythonHandler trac.web.modpython_frontend
    PythonOption TracEnv /srv/www/it/htdocs/helpdesk
    PythonOption TracUriRoot /helpdesk
    SetEnv PYTHON_EGG_CACHE /tmp
  </Directory>
</VirtualHost>

Rainer

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to