-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 15.03.2013 13:11, ocagdas wrote:
> Hi,
> 
> Below settings are extracted from my trac.ini file (mail settings under
> notification are modified for obvious reasons). With these, I don't get
> the 'Forgot Password' link either at top right or below login
> credentials on the login screen. Can anyone spot any obvious mistake?
> 
> Please also bare in mind that I want to keep the user registration by
> anonymous users disabled. So, any suggested solution should comply with
> this too.

So this is a question related to using AccountManagerPlugin.

Note of caution: From the 'htpasswd_file' I get, that you're already
using a 0.4 or later version, what is good. But recent development
introduced a sever bug to acct_mgr-0.4.2, so I urge you to use 0.4.3, if
you happen to use 0.4.2 yet.

> [account-manager]
> account_changes_notify_addresses =
> allow_delete_account = false
> force_passwd_change = true
> htpasswd_file = /var/tracprojects/.htpasswd
> htpasswd_hash_type = md5
> password_store = HtPasswdStore
> persistent_sessions = false
> reset_password = true
> verify_email = true
> 
> [components]
> acct_mgr.admin.accountmanageradminpanel = enabled
> acct_mgr.api.* = enabled

> acct_mgr.db.sessionstore = disabled
Ok, but just
acct_mgr.db.* = disabled
will do too.

> acct_mgr.guard = enabled
> acct_mgr.htfile.htdigeststore = disabled
> acct_mgr.htfile.htpasswdstore = enabled
> acct_mgr.http.* = disabled
> acct_mgr.notification.* = enabled
> acct_mgr.notification.accountchangelistener = enabled

> acct_mgr.pwhash.* = disabled
Bad. Recent password reset procedure (outlined in [1]) uses a subclass
of SessionStore, ResetPwStore, that must be enabled, and the hash method
configured for SessionStore too (see minimal working configuration
example in configuration cookbook wiki page [2]).

> #acct_mgr.register.* = disabled
> #acct_mgr.register.RegistrationModule = enabled
> acct_mgr.register.EmailVerificationModule = enabled
> acct_mgr.svnserve.svnservepasswordstore = disabled

> acct_mgr.web_ui.* = enabled
This obsoletes all three following enable lines.

> acct_mgr.web_ui.accountmodule = enabled
> acct_mgr.web_ui.loginmodule = enabled

Missed that:
acct_mgr.web_ui.resetpwstore = enabled
as should be clear form previous comment, but no problem, because the
'*' will enable it anyway.

> #acct_mgr.web_ui.registrationmodule = disabled 
Obsolete, will never come back, delete it.

> acct_mgr.web_ui.resetpwstore = enabled

> cct_mgr.admin.* = enabled
Cruft, delete it.

> trac.web.auth.loginmodule = disabled
> 
> [notification]
> admit_domains =
> always_notify_owner = true
> always_notify_reporter = true
> always_notify_updater = true
> ambiguous_char_width = single
> email_sender = SmtpEmailSender
> ignore_domains =
> mime_encoding = base64
> sendmail_path = sendmail
> smtp_always_bcc =
> smtp_always_cc =
> smtp_default_domain =
> smtp_enabled = true
> smtp_from = my_trac_mail
> smtp_from_name = ""
> smtp_password = pwdabc
> smtp_port = 587
> smtp_replyto = noreply_my_trac_mail
> smtp_server = smtp.localhost
> smtp_subject_prefix = __default__
> smtp_user = gsomanager
> ticket_subject_template = $prefix #$ticket.id: $summary
> use_public_cc = false
> use_short_addr = false
> use_tls = true

Try with changed setting according to aforementioned comments.

Essentially it may all boil down to missing the following line:

acct_mgr.pwhash.htdigesthashmethod = enabled

If you still see issues, post a DEBUG log of the Trac environment load,
please. Some common pitfalls for not getting password reset to work are
actually logged on start-up.

Steffen Hoffmann


[1]
http://trac-hacks.org/wiki/AccountManagerPlugin/Modules#Lostpasswordprocedure
[2]
http://trac-hacks.org/wiki/CookBook/AccountManagerPluginConfiguration#PasswordReset
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAlFLYxgACgkQ31DJeiZFuHfRAQCbB7B5tNeTc8BAEeo4WvWDUqQy
s/IAn1u1QPMnC1mWd51JmANWBLscVQI5
=Yx8W
-----END PGP SIGNATURE-----

-- 
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/trac-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to