[EMAIL PROTECTED] kirjoitti: > Currently, I'm working through the painful process of configuring > Authentication via MS Active Directory, but I have a question about > Trac logins in general. > > Is there anyway to automatically log someone into a project provided > they are allowed to see it in the first place?
So far I only know few ways: IE/FF with SSPI. Works but has few caveats regarding Trac... Custom client (browser) or plugin for client that can pass authentication request to Trac and plugin to complement this feature. External auto-form fill tools. > Now, I realize they can save this information in the browser of their > choice and they will be automatically logged in while the username/ > password combo remains valid. However, we require that users change > their windows/network passwords every 30 days. This would mean they > would be prompted to re-enter their credentials the next time they > went into Trac. That would annoy me. Sounds (like in other post) that your password change policy is due bad security policy in general. Good reading for that <http://www.cerias.purdue.edu/weblogs/spaf/general/post-30/> > Is there anyway to have Trac work in the following manner: > > * Go to your Trac project site That's simple, point your favourite pbrowser. > * Be authenticated via Apache/LDAP Also simple as that. > * If you are authorized to see the project, you are logged in > No need to pop up and ask for a password. Well... Um... That's a hard part. What you need is automated authentication since for Trac authentication means that you're logged in (valid user for Trac). Authorization in trac means that are you really allowed to do something.... So you might be authenticated but not authorized to do anything. So what you can use almost OOTB and works natively with IE and AFAIK pretty new Firefox should do is SSPI. Few googling and you're good to go. I think there is even doc for Trac... -- Jani Tiainen --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Trac Users" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/trac-users?hl=en -~----------~----~----~----~------~----~------~--~---
