OK, I'm going to make one last stab at this before I drop account manager and just go with container managed ldap login (which is working.) But it sure would be nice to tie in the html login page and related plugins to ldap.
Right now, any fictitious login/password pair is accepted using the account manager html login with the following trac/apache2/ldap setup: [account-manager] authentication_url = http://my.example.org/trac/myproject password_store = HttpAuthStore [components] webadmin.* = enabled acct_mgr.admin.accountmanageradminpage = enabled acct_mgr.api.accountmanager = enabled acct_mgr.web_ui.accountmodule = disabled acct_mgr.web_ui.registrationmodule = disabled trac.web.auth.LoginModule = disabled acct_mgr.web_ui.LoginModule = enabled acct_mgr.http.httpauthstore = enabled my trac.conf: <Location /trac/myproject> SetHandler mod_python PythonHandler trac.web.modpython_frontend PythonOption TracEnv /var/www/trac-projects/myproject PythonOption TracUriRoot /trac/myproject </Location> The HttpAuthStore section in the account manager documentation specifically states you need a <Directory /...> block to relate back to the trac.ini "authentication_url = http://hostname/path"; in the [account-manager] section. This is my httpd.conf Directory block (not located in a virtual host): <Directory "/var/www/trac-projects/myproject"> AuthBasicProvider ldap AuthType Basic AuthzLDAPAuthoritative off AuthName "GIS Server" AuthLDAPURL ldap://myldapstuff:389/dc=ldapstuff?sAMAccountName?sub?(objectClass=*) NONE AuthLDAPBindDN "ldapuser" AuthLDAPBindPassword ldappassword Require valid-user </Directory> So, 1. Has anyone actually done this; tied account manager html login to a ldap store, and if so 2. Can anyone fix the blocks above to make them work? I'm all out of ideas and I'm starting to wonder if what I'm doing is even possible. - Joe --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Trac Users" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/trac-users?hl=en -~----------~----~----~----~------~----~------~--~---
