Hi all,

My goal is to allow anonymous access without any authentication
prompt, while at the same time authenticate users from LDAP. I managed
to get this working so easily I got suspicious. Could somebody verify
that I have not missed anything crucial here...

I'm using the following software on Debian Lenny (stable):

Trac 0.11.1-2.1
Apache2 2.2.9-10+l
Libapache2-mod-python 3.3.1-7

I'm using apache2+mod_authnz_ldap to authenticate against LDAP.
Everything _seems_ to work ok with this Apache2 configuration:

# /etc/apache2/conf.d/trac

<Location /projectname>
   SetHandler mod_python
   PythonInterpreter main_interpreter
   PythonHandler trac.web.modpython_frontend
   PythonOption TracEnv /var/lib/projects/projectname
   PythonOption TracEnvParentDir /var/lib/projects
   PythonOption PYTHON_EGG_CACHE /var/lib/projects/egg-cache
</Location>

<Location /projectname/login>
   AuthType Basic
   AuthName "Login to Trac"
   AuthBasicProvider ldap
   Order Allow,Deny
   Allow from All
   AuthLDAPBindDN "cn=proxy, dc=company, dc=com"
   AuthLDAPBindPassword password
   AuthLDAPURL "ldap://ldapserver:389/ou=Accounts,dc=company,dc=com?
uid"
   AuthzLDAPAuthoritative on
   Require valid-user
</Location>

Anonymous access seems to work ok (no authentication prompts). When I
click on "Login" in Trac webui a BASIC authentication prompt shows up
and I can log in. Even "logout" button works.

Is this really supposed to be this easy :)?

Best regards,

Samuli

-- 
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en.

Reply via email to