Josh, I think I see your problem. The value for SSPIDomain needs to be the AD Domain, not, DNS domain. For example, in my org, our DNS Domain is " clinicalspecialties.com", but, our AD Domain is CLINICALSPECIAL. I'm pretty sure that is your issue.
On Wed, Oct 27, 2010 at 7:26 PM, Gerald Butler < gerald.edward.but...@gmail.com> wrote: > josh, > > OK, I now had time to go back and review my config here is what I have: > > 1. copied "mod_auth_sspi.so" to "apache2/modules" folder > > 2. edited apache2/conf/httpd.conf, added the following line: LoadModule > sspi_auth_module modules/mod_auth_sspi.so (after the LoadModule line for > Auth Basic) > > 3. Then I edited trac/conf/trac.conf to be as follows: > > <Directory "E:\trac"> > Options Indexes MultiViews > AllowOverride None > Order allow,deny > Allow from all > </Directory> > > <Location /trac> > SetHandler mod_python > PythonInterpreter main_interpreter > PythonHandler trac.web.modpython_frontend > PythonOption TracEnvParentDir "E:\trac_projects" > PythonOption TracUriRoot /trac > </Location> > > <LocationMatch /trac/[^/]+/login> > AuthType SSPI > AuthName "Trac project management website @ svn" > SSPIAuth On > SSPIAuthoritative On > SSPIDomain CLINICALSPECIAL > SSPIOfferBasic On > SSPIOmitDomain On > Require valid-user > </LocationMatch> > > <LocationMatch "/trac/[^/]+/login"> > AuthType Basic > AuthName "Trac" > AuthUserFile "E:\trac\trac/conf/htpasswd" > Require valid-user > </LocationMatch> > > > I'm fairly certain that's all I needed to do to get the log-in stuff > working correctly. > > > > On Wed, Oct 27, 2010 at 6:53 PM, Gerald Butler < > gerald.edward.but...@gmail.com> wrote: > >> Another thing, I put the section for SSPI *BEFORE* the section for Basic >> Auth. in my config. I don't know if that has anything to do with it, but, it >> might???? >> >> >> On Wed, Oct 27, 2010 at 6:52 PM, Gerald Butler < >> gerald.edward.but...@gmail.com> wrote: >> >>> No problem. I've only done this once myself and I've been telling you >>> what I did from memory. Also, been responding from my Android phone (not the >>> best thing to type a meaningful response on). >>> >>> I'm pretty sure that your problem is probably the mixing of forward and >>> back slash in the path. Also, did you pay attention to the thing about >>> Domain when logging in? Or you can tell it to "SSPIOmitDomain On"???? >>> >>> >>> On Wed, Oct 27, 2010 at 5:27 PM, CompletelyLost >>> <joshkrei...@gmail.com>wrote: >>> >>>> I downloaded mod_auth_sspi-1.0.4, and copied mod_auth_sspi.so to the >>>> Apache folder, but I didn't "install" anything. >>>> I was able to add the loadmodule line for sspi module to Apache/conf/ >>>> https.conf. >>>> Spaces could be the issue, but that's the default setup, so I would >>>> think that would be acceptable. I'll try different slash combinations, >>>> as well as removing the spaces from the default naming scheme. >>>> >>>> If I neglected to install something, please tell me how to go about >>>> getting that installed. >>>> >>>> Thanks again, and sorry for all of the questions... >>>> >>>> On Oct 27, 5:08 pm, Gerald Butler <gerald.edward.but...@gmail.com> >>>> wrote: >>>> > I think it is because you path for travel env is mix forward and back >>>> slash. >>>> > Or it might be that your oRg has spaces. Or it might not need the >>>> quotes. >>>> > Did you add the loadmodule line for sspi module to >>>> Apache/conf/https.conf? >>>> > Also did you download and install the mod_auth_sspi.so to the Apache >>>> folder >>>> > as directed? >>>> > On Oct 27, 2010 4:15 PM, "CompletelyLost" <joshkrei...@gmail.com> >>>> wrote: >>>> > >>>> > >>>> > >>>> > > That does help, thank you. >>>> > > However, I am not clear on the "httpd.conf in the trac folder" part. >>>> > > Within httpd.conf, the last line reads Include "C:/Program Files/ >>>> > > BitNami Trac Stack/trac/conf/trac.conf" >>>> > > I think you mean to add the "location match" stuff to the end of the >>>> > > trac.conf file, but when I do that, I can no longer browse to the >>>> trac >>>> > > web interface. >>>> > >>>> > > Here's my trac.conf file, if it helps: >>>> > >>>> > > <Directory "C:\Program Files\BitNami Trac Stack"> >>>> > > Options Indexes MultiViews >>>> > > AllowOverride None >>>> > > Order allow,deny >>>> > > Allow from all >>>> > > </Directory> >>>> > >>>> > > <Location /trac> >>>> > > SetHandler mod_python >>>> > > PythonInterpreter main_interpreter >>>> > > PythonHandler trac.web.modpython_frontend >>>> > > PythonOption TracEnvParentDir "C:\Documents and Settings >>>> > > \administrator\BitNami Trac Stack projects" >>>> > > PythonOption TracUriRoot /trac >>>> > > </Location> >>>> > >>>> > > <LocationMatch "/trac/[^/]+/login"> >>>> > > AuthType SSPI >>>> > > AuthName "Trac" >>>> > > SSPIAuth On >>>> > > SSPIAuthoritative On >>>> > > SSPIDomain OurDomain.com >>>> > > SSPIOfferBasic On >>>> > > Require valid-user >>>> > > </LocationMatch> >>>> > >>>> > > On Oct 27, 12:41 pm, Gerald Butler <gerald.edward.but...@gmail.com> >>>> > > wrote: >>>> > >> I said "SSI" for step 3. What I meant was "SSPI" (i.e. >>>> mod_auth_sspi.so). >>>> > I >>>> > >> found the instructions for this part of it here: >>>> > >>>> > >>>> http://trac.edgewall.org/wiki/TracOnWindows/Advanced#AuthenticatingTr. >>>> .. >>>> > >>>> > >>>> > >>>> > >>>> > >>>> > >> Hope that sets you on the right path. Basically, I just copied the >>>> ".so" >>>> > >> into the apprropriate folder under the Apache directory, and >>>> followed the >>>> > >> rest of the instructions. NOTE: when adding the stuff specific to >>>> trac >>>> > the >>>> > >> the "httpd.conf" (not http.conf --- that's a typo methinks), I >>>> found that >>>> > >> there is and include at the bottom of the Apache httpd.conf that >>>> includes >>>> > >> and httpd.conf in the "trac" folder. Put the trac specific stuff >>>> there >>>> > >> (assuming you are using the BitNami Trac). >>>> > >>>> > >> Hope that helps. >>>> > >>>> > >> On Wed, Oct 27, 2010 at 12:24 PM, CompletelyLost < >>>> joshkrei...@gmail.com >>>> > >wrote: >>>> > >>>> > >> > @ Gerald Edward Butler >>>> > >>>> > >> > Thanks again for your help so far. Everything seems to have gone >>>> > >> > pretty smoothly, but I'm having trouble with step number 3. Can >>>> you >>>> > >> > explain what you had to do to get the Active Directory >>>> Authentication >>>> > >> > working? (What add-on(s) to install, which file to edit, etc) >>>> > >>>> > >> > On Oct 26, 5:01 pm, Gerald Edward Butler >>>> > >> > <gerald.edward.but...@gmail.com> wrote: >>>> > >> > > If it is any help, this is how I proceeded: >>>> > >>>> > >> > > 1. I already had VisualSVN with several repositories >>>> installed >>>> > >> > > 2. I installed the BitNami All-in-One Installer for Trac >>>> 0.12 for >>>> > >> > > Windows (this puts everything for Trac, including Apache, SNV >>>> > instance, >>>> > >> > > SQLite, etc all in one installation folder) >>>> > >> > > 3. I then configured Apache to use the SSI authentication >>>> module >>>> > >> > > (for Active Directory Authentication) >>>> > >> > > 4. I added the Repos for SVN that were in my VisualSVN >>>> instance >>>> > >> > > (through the Admin Console) and followed the instructions to do >>>> the >>>> > >> > > "resync" after adding each and also added the post-commit hook >>>> > scripts >>>> > >> > > to the repos in my VisualSVN instances. >>>> > >> > > 5. Bip, Bang, Boom - I'm all set! >>>> > >>>> > >> > > Seems to be working great so far (just completed this this past >>>> > weekend, >>>> > >> > > so, don't have a lot of history with Trac 0.12 to know if I >>>> might not >>>> > >> > > experience issues down the road - but, for now, everything >>>> seems like >>>> > >> > > Gravy!) >>>> > >>>> > >> > > Gerald E Butler >>>> > >> > > gerald.edward.but...@gmail.com >>>> > >>>> > >> > > On Tue, 2010-10-26 at 13:43 -0500, archie morris wrote: >>>> > >> > > > >>>> http://how-to-solutions.com/how-to-install-trac-on-windows.html >>>> > >>>> > >> > > > On Tue, Oct 26, 2010 at 10:03 AM, CompletelyLost >>>> > >> > > > <joshkrei...@gmail.com> wrote: >>>> > >>>> > >> > > > I was assigned the task of installing Trac in a >>>> Windows >>>> > >> > > > environment. I >>>> > >> > > > was told we will need multiple repositories, so as >>>> far as I >>>> > >> > > > can tell, >>>> > >> > > > we will have to install Trac 0.12 or later. I was >>>> also told >>>> > >> > > > that our >>>> > >> > > > development team prefers to use VisualSVN server to >>>> keep >>>> > track >>>> > >> > > > of >>>> > >> > > > changes. Ideally this would run off of IIS 6, and >>>> integrate >>>> > >> > > > with >>>> > >> > > > Active Directory for authentication. I have installed >>>> > Python >>>> > >> > > > 2.7, >>>> > >> > > > VisualSVN Server 2.1.3, Setuptools 0.6, Genshi 0.6, >>>> and >>>> > MySQL >>>> > >> > > > 5.1. >>>> > >>>> > >> > > > I have spent hours searchinghttp://trac.edgewall.org, >>>> but I >>>> > >> > > > haven't >>>> > >> > > > been able to find directions that are detailed enough >>>> for >>>> > this >>>> > >> > > > specific type of install. I am completely lost, and >>>> am >>>> > >> > > > debating >>>> > >> > > > starting over completely. Could someone please dumb >>>> the >>>> > >> > > > install down >>>> > >> > > > for me? >>>> > >>>> > >> > > > Thank you, and I apologize for my stupid question. >>>> > >>>> > >> > > > -- >>>> > >> > > > You received this message because you are subscribed >>>> to the >>>> > >> > > > Google Groups "Trac Users" group. >>>> > >> > > > To post to this group, send email to >>>> > >> > > > trac-us...@googlegroups.com. >>>> > >> > > > To unsubscribe from this group, send email to >>>> trac-users >>>> > >> > > > +unsubscr...@googlegroups.com. >>>> > >> > > > For more options, visit this group at >>>> > >> > > > http://groups.google.com/group/trac-users?hl=en. >>>> > >>>> > >> > > > -- >>>> > >> > > > You received this message because you are subscribed to the >>>> Google >>>> > >> > > > Groups "Trac Users" group. >>>> > >> > > > To post to this group, send email to >>>> trac-us...@googlegroups.com. >>>> > >> > > > To unsubscribe from this group, send email to trac-users >>>> > >> > > > +unsubscr...@googlegroups.com. >>>> > >> > > > For more options, visit this group at >>>> > >> > > >http://groups.google.com/group/trac-users?hl=en. >>>> > >>>> > >> > -- >>>> > >> > You received this message because you are subscribed to the >>>> Google >>>> > Groups >>>> > >> > "Trac Users" group. >>>> > >> > To post to this group, send email to trac-users@googlegroups.com >>>> . >>>> > >> > To unsubscribe from this group, send email to >>>> > >> > trac-users+unsubscr...@googlegroups.com<trac-users%2bunsubscr...@googlegroups.com> >>>> <trac-users%2bunsubscr...@googlegrou ps.com> >>>> > >>>> > <trac-users%2bunsubscr...@googlegrou ps.com>>> > . >>>> > >> > For more options, visit this group at >>>> > >> >http://groups.google.com/group/trac-users?hl=en. >>>> > >>>> > >> -- >>>> > >> Gerald E. Butler >>>> > >> CSI Infusion -http://csi-infusion.comhttp://bffoss.com >>>> > >> gerald.edward.but...@gmail.com >>>> > >>>> > > -- >>>> > > You received this message because you are subscribed to the Google >>>> Groups >>>> > "Trac Users" group. >>>> > > To post to this group, send email to trac-us...@googlegroups.com. >>>> > > To unsubscribe from this group, send email to >>>> > >>>> > trac-users+unsubscr...@googlegroups.com<trac-users%2bunsubscr...@googlegroups.com> >>>> <trac-users%2bunsubscr...@googlegrou ps.com> >>>> > .> For more options, visit this group at >>>> > >>>> > http://groups.google.com/group/trac-users?hl=en. >>>> > >>>> > >>>> > >>>> > >>>> >>>> -- >>>> You received this message because you are subscribed to the Google >>>> Groups "Trac Users" group. >>>> To post to this group, send email to trac-us...@googlegroups.com. >>>> To unsubscribe from this group, send email to >>>> trac-users+unsubscr...@googlegroups.com<trac-users%2bunsubscr...@googlegroups.com> >>>> . >>>> For more options, visit this group at >>>> http://groups.google.com/group/trac-users?hl=en. >>>> >>>> >>> >>> >>> -- >>> Gerald E. Butler >>> >>> CSI Infusion - http://csi-infusion.com >>> http://bffoss.com >>> gerald.edward.but...@gmail.com >>> >> >> >> >> -- >> Gerald E. Butler >> CSI Infusion - http://csi-infusion.com >> http://bffoss.com >> gerald.edward.but...@gmail.com >> > > > > -- > Gerald E. Butler > CSI Infusion - http://csi-infusion.com > http://bffoss.com > gerald.edward.but...@gmail.com > -- Gerald E. Butler CSI Infusion - http://csi-infusion.com http://bffoss.com gerald.edward.but...@gmail.com -- You received this message because you are subscribed to the Google Groups "Trac Users" group. To post to this group, send email to trac-us...@googlegroups.com. To unsubscribe from this group, send email to trac-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/trac-users?hl=en.
