On Wednesday, January 20, 2016 at 6:51:18 AM UTC-8, deadf00d wrote:
>
> Dear Ryan,
>
> thanks for your quick and detailed reply.
>
> I think I understand the problem and it seems that your analysis regarding
> REMOTE_USER and HTTP_REMOTE_USER is right. Yet, I do not understand how to
> fix this.
> The TracModWSGI approach seems promising, but as I run tracd, I do not know
> where to add the ''environ['REMOTE_USER'] = environ['HTTP_REMOTE_USER']"
> line.
>
> I can't do it in remote-user-auth.py as far as I can see, because there I
> have no access to
> 'environ', right?
>
> My setup is as follows:
>
> Tracd started with "tracd -d -p 8080 --protocol=http -s
> /usr/local/trac/myproject".
>
> Nginx conf:
>
> ldap_server myldapserver {
> url "ldaps://ldap.mydomain.com:636/...";
> binddn "...";
> binddn_passwd "...";
> connect_timeout 5s;
> bind_timeout 5s;
> request_timeout 5s;
> satisfy any;
> }
>
> server {
> listen 80;
> server_name trac.mydomain.com;
>
> location / {
> proxy_pass http://trac.mydomain.com:8080;
> }
>
> location /login {
> proxy_pass http://trac.mydomain.com:8080;
> auth_ldap "Please enter your credentials for issue tracker";
> auth_ldap_servers myldapserver;
> proxy_set_header REMOTE_USER $remote_user;
> }
> }
>
> Any further help will be much appreciated.
>
Did you try using the directive "proxy_pass_header Authorization;"? I'm not
sure what the function is, but it is used in the authorization example on
the TracNginxRecipe page.
--
You received this message because you are subscribed to the Google Groups "Trac
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/trac-users.
For more options, visit https://groups.google.com/d/optout.