On Nov 24, 9:01 am, "Cooke, Mark" <[email protected]> wrote:
> > > I just setup a testserver running Trac (trunk) and everything but
> > > Mylin works fine. The problem is that Mylin seems to be unable to
> > > authenticate properly:
>
> > > - I use SSPI for authentication with my Windows Active Directory
>
> > > - I can connect to Trac's webinterface and do anything (create
> > >   tickets, etc.) because I have TRAC_ADMIN rights
>
> > > - When I use Mylin (through XMLRPC) I only get "authenticated"
> > >   rights
>
> > > - Also, tickets I create through the webinterface are created by
> > >   "kamin" while tickets created through XMLRPC are created by
> "KAMIN".
>
> > > - I cannot give "KAMIN" any rights because all UPPERCASE names are
> > >   reserved for permissions.
>
> > > Does anyone know this problem? What can I do?
>
> > If you're using SSPI (Kerberos) authentication, the username you get
> > is coming from your Active Directory username.
> > Kerberos is case sensitive, so KAMIN is not the same as kamin.
> > Windows does something special to make the username case insensitive
> > in normal use.
>
> > You'll have to go in there and change the your User logon name to
> > lower case.  (Account tab in Active Directory Users and Computers, I
> > think, but you can check the actual ticket using kerbtray.)
>
> > Alternatively, you could try granting permissions using trac-admin
> > instead of the web interface.  I did that and it seemed to work, but
> > eventually I decided not to risk breaking Trac and modified my account
> > in AD.
>
> Check out:http://trac.edgewall.org/wiki/TracModWSGI
>
> If you look at the code snippet at the bottom, there is an example of
> editing the username _between_ apache and trac.  As you are
> authenticating against AD you know your usernames are all
> case-insensitive, so you can just adjust the case of all usernames using
> .lower()
>
> I hope this helps or am I misunderstanding where the problem is?  I know
> nothing about Mylin...
>

Actually, I think you can alternatively try to enable a trac.ini
setting that converts all authnames to lower-case - the docs for this
setting says: "Whether login names should be converted to lower case
(since 0.9).":

[trac]
ignore_auth_case = true

This converts authname using .lower()


:::simon

https://www.coderesort.com
http://www.ohloh.net/accounts/osimons

--

You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en.


Reply via email to