It looks like you were right about the AD Domain name being my main issue. As soon as I changed that I was able to load the page and authenticate. Thank you so much for taking the time to explain where I went wrong.
On Oct 27, 7:28 pm, Gerald Butler <gerald.edward.but...@gmail.com> wrote: > Josh, > > I think I see your problem. The value for SSPIDomain needs to be the AD > Domain, not, DNS domain. For example, in my org, our DNS Domain is " > clinicalspecialties.com", but, our AD Domain is CLINICALSPECIAL. I'm pretty > sure that is your issue. > > On Wed, Oct 27, 2010 at 7:26 PM, Gerald Butler < > > > > gerald.edward.but...@gmail.com> wrote: > > josh, > > > OK, I now had time to go back and review my config here is what I have: > > > 1. copied "mod_auth_sspi.so" to "apache2/modules" folder > > > 2. edited apache2/conf/httpd.conf, added the following line: LoadModule > > sspi_auth_module modules/mod_auth_sspi.so (after the LoadModule line for > > Auth Basic) > > > 3. Then I edited trac/conf/trac.conf to be as follows: > > > <Directory "E:\trac"> > > Options Indexes MultiViews > > AllowOverride None > > Order allow,deny > > Allow from all > > </Directory> > > > <Location /trac> > > SetHandler mod_python > > PythonInterpreter main_interpreter > > PythonHandler trac.web.modpython_frontend > > PythonOption TracEnvParentDir "E:\trac_projects" > > PythonOption TracUriRoot /trac > > </Location> > > > <LocationMatch /trac/[^/]+/login> > > AuthType SSPI > > AuthName "Trac project management website @ svn" > > SSPIAuth On > > SSPIAuthoritative On > > SSPIDomain CLINICALSPECIAL > > SSPIOfferBasic On > > SSPIOmitDomain On > > Require valid-user > > </LocationMatch> > > > <LocationMatch "/trac/[^/]+/login"> > > AuthType Basic > > AuthName "Trac" > > AuthUserFile "E:\trac\trac/conf/htpasswd" > > Require valid-user > > </LocationMatch> > > > I'm fairly certain that's all I needed to do to get the log-in stuff > > working correctly. > > > On Wed, Oct 27, 2010 at 6:53 PM, Gerald Butler < > > gerald.edward.but...@gmail.com> wrote: > > >> Another thing, I put the section for SSPI *BEFORE* the section for Basic > >> Auth. in my config. I don't know if that has anything to do with it, but, > >> it > >> might???? > > >> On Wed, Oct 27, 2010 at 6:52 PM, Gerald Butler < > >> gerald.edward.but...@gmail.com> wrote: > > >>> No problem. I've only done this once myself and I've been telling you > >>> what I did from memory. Also, been responding from my Android phone (not > >>> the > >>> best thing to type a meaningful response on). > > >>> I'm pretty sure that your problem is probably the mixing of forward and > >>> back slash in the path. Also, did you pay attention to the thing about > >>> Domain when logging in? Or you can tell it to "SSPIOmitDomain On"???? > > >>> On Wed, Oct 27, 2010 at 5:27 PM, CompletelyLost > >>> <joshkrei...@gmail.com>wrote: > > >>>> I downloaded mod_auth_sspi-1.0.4, and copied mod_auth_sspi.so to the > >>>> Apache folder, but I didn't "install" anything. > >>>> I was able to add the loadmodule line for sspi module to Apache/conf/ > >>>> https.conf. > >>>> Spaces could be the issue, but that's the default setup, so I would > >>>> think that would be acceptable. I'll try different slash combinations, > >>>> as well as removing the spaces from the default naming scheme. > > >>>> If I neglected to install something, please tell me how to go about > >>>> getting that installed. > > >>>> Thanks again, and sorry for all of the questions... > > >>>> On Oct 27, 5:08 pm, Gerald Butler <gerald.edward.but...@gmail.com> > >>>> wrote: > >>>> > I think it is because you path for travel env is mix forward and back > >>>> slash. > >>>> > Or it might be that your oRg has spaces. Or it might not need the > >>>> quotes. > >>>> > Did you add the loadmodule line for sspi module to > >>>> Apache/conf/https.conf? > >>>> > Also did you download and install the mod_auth_sspi.so to the Apache > >>>> folder > >>>> > as directed? > >>>> > On Oct 27, 2010 4:15 PM, "CompletelyLost" <joshkrei...@gmail.com> > >>>> wrote: > > >>>> > > That does help, thank you. > >>>> > > However, I am not clear on the "httpd.conf in the trac folder" part. > >>>> > > Within httpd.conf, the last line reads Include "C:/Program Files/ > >>>> > > BitNami Trac Stack/trac/conf/trac.conf" > >>>> > > I think you mean to add the "location match" stuff to the end of the > >>>> > > trac.conf file, but when I do that, I can no longer browse to the > >>>> trac > >>>> > > web interface. > > >>>> > > Here's my trac.conf file, if it helps: > > >>>> > > <Directory "C:\Program Files\BitNami Trac Stack"> > >>>> > > Options Indexes MultiViews > >>>> > > AllowOverride None > >>>> > > Order allow,deny > >>>> > > Allow from all > >>>> > > </Directory> > > >>>> > > <Location /trac> > >>>> > > SetHandler mod_python > >>>> > > PythonInterpreter main_interpreter > >>>> > > PythonHandler trac.web.modpython_frontend > >>>> > > PythonOption TracEnvParentDir "C:\Documents and Settings > >>>> > > \administrator\BitNami Trac Stack projects" > >>>> > > PythonOption TracUriRoot /trac > >>>> > > </Location> > > >>>> > > <LocationMatch "/trac/[^/]+/login"> > >>>> > > AuthType SSPI > >>>> > > AuthName "Trac" > >>>> > > SSPIAuth On > >>>> > > SSPIAuthoritative On > >>>> > > SSPIDomain OurDomain.com > >>>> > > SSPIOfferBasic On > >>>> > > Require valid-user > >>>> > > </LocationMatch> > > >>>> > > On Oct 27, 12:41 pm, Gerald Butler <gerald.edward.but...@gmail.com> > >>>> > > wrote: > >>>> > >> I said "SSI" for step 3. What I meant was "SSPI" (i.e. > >>>> mod_auth_sspi.so). > >>>> > I > >>>> > >> found the instructions for this part of it here: > > >>>>http://trac.edgewall.org/wiki/TracOnWindows/Advanced#AuthenticatingTr. > >>>> .. > > >>>> > >> Hope that sets you on the right path. Basically, I just copied the > >>>> ".so" > >>>> > >> into the apprropriate folder under the Apache directory, and > >>>> followed the > >>>> > >> rest of the instructions. NOTE: when adding the stuff specific to > >>>> trac > >>>> > the > >>>> > >> the "httpd.conf" (not http.conf --- that's a typo methinks), I > >>>> found that > >>>> > >> there is and include at the bottom of the Apache httpd.conf that > >>>> includes > >>>> > >> and httpd.conf in the "trac" folder. Put the trac specific stuff > >>>> there > >>>> > >> (assuming you are using the BitNami Trac). > > >>>> > >> Hope that helps. > > >>>> > >> On Wed, Oct 27, 2010 at 12:24 PM, CompletelyLost < > >>>> joshkrei...@gmail.com > >>>> > >wrote: > > >>>> > >> > @ Gerald Edward Butler > > >>>> > >> > Thanks again for your help so far. Everything seems to have gone > >>>> > >> > pretty smoothly, but I'm having trouble with step number 3. Can > >>>> you > >>>> > >> > explain what you had to do to get the Active Directory > >>>> Authentication > >>>> > >> > working? (What add-on(s) to install, which file to edit, etc) > > >>>> > >> > On Oct 26, 5:01 pm, Gerald Edward Butler > >>>> > >> > <gerald.edward.but...@gmail.com> wrote: > >>>> > >> > > If it is any help, this is how I proceeded: > > >>>> > >> > > 1. I already had VisualSVN with several repositories > >>>> installed > >>>> > >> > > 2. I installed the BitNami All-in-One Installer for Trac > >>>> 0.12 for > >>>> > >> > > Windows (this puts everything for Trac, including Apache, SNV > >>>> > instance, > >>>> > >> > > SQLite, etc all in one installation folder) > >>>> > >> > > 3. I then configured Apache to use the SSI authentication > >>>> module > >>>> > >> > > (for Active Directory Authentication) > >>>> > >> > > 4. I added the Repos for SVN that were in my VisualSVN > >>>> instance > >>>> > >> > > (through the Admin Console) and followed the instructions to do > >>>> the > >>>> > >> > > "resync" after adding each and also added the post-commit hook > >>>> > scripts > >>>> > >> > > to the repos in my VisualSVN instances. > >>>> > >> > > 5. Bip, Bang, Boom - I'm all set! > > >>>> > >> > > Seems to be working great so far (just completed this this past > >>>> > weekend, > >>>> > >> > > so, don't have a lot of history with Trac 0.12 to know if I > >>>> might not > >>>> > >> > > experience issues down the road - but, for now, everything > >>>> seems like > >>>> > >> > > Gravy!) > > >>>> > >> > > Gerald E Butler > >>>> > >> > > gerald.edward.but...@gmail.com > > >>>> > >> > > On Tue, 2010-10-26 at 13:43 -0500, archie morris wrote: > > >>>>http://how-to-solutions.com/how-to-install-trac-on-windows.html > > >>>> > >> > > > On Tue, Oct 26, 2010 at 10:03 AM, CompletelyLost > >>>> > >> > > > <joshkrei...@gmail.com> wrote: > > >>>> > >> > > > I was assigned the task of installing Trac in a > >>>> Windows > >>>> > >> > > > environment. I > >>>> > >> > > > was told we will need multiple repositories, so as > >>>> far as I > >>>> > >> > > > can tell, > >>>> > >> > > > we will have to install Trac 0.12 or later. I was > >>>> also told > >>>> > >> > > > that our > >>>> > >> > > > development team prefers to use VisualSVN server to > >>>> keep > >>>> > track > >>>> > >> > > > of > >>>> > >> > > > changes. Ideally this would run off of IIS 6, and > >>>> integrate > >>>> > >> > > > with > >>>> > >> > > > Active Directory for authentication. I have installed > >>>> > Python > >>>> > >> > > > 2.7, > >>>> > >> > > > VisualSVN Server 2.1.3, Setuptools 0.6, Genshi 0.6, > >>>> and > >>>> > MySQL > >>>> > >> > > > 5.1. > > >>>> > >> > > > I have spent hours searchinghttp://trac.edgewall.org, > >>>> but I > >>>> > >> > > > haven't > >>>> > >> > > > been able to find directions that are detailed enough > >>>> for > >>>> > this > >>>> > >> > > > specific type of install. I am completely lost, and > >>>> am > >>>> > >> > > > debating > >>>> > >> > > > starting over completely. Could someone please dumb > >>>> the > >>>> > >> > > > install down > >>>> > >> > > > for me? > > >>>> > >> > > > Thank you, and I apologize for my stupid question. > > >>>> > >> > > > -- > >>>> > >> > > > You received this message because you are subscribed > >>>> to the > >>>> > >> > > > Google Groups "Trac Users" group. > >>>> > >> > > > To post to this group, send email to > >>>> > >> > > > trac-us...@googlegroups.com. > >>>> > >> > > > To unsubscribe from this group, send > > ... > > read more » -- You received this message because you are subscribed to the Google Groups "Trac Users" group. To post to this group, send email to trac-us...@googlegroups.com. To unsubscribe from this group, send email to trac-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/trac-users?hl=en.
