[Trac] Permission issues with Windows Usernames on Linux

Mon, 22 May 2006 09:50:23 -0700

Hi,
 
Our windows users are able to log into our trac system (0.9.5) by using the following format:
DOMAIN\username
 
e.g. in my case:
MYDOMAIN\brett.dellegrazie
 
The authentication via Apache2 is working correctly as I can log in via trac and commit
changes via a subversion client. However when I am logged in as a user with
TRAC_ADMIN access (specified in the permissions database as MYDOMAIN\brett.dellegrazie),
trying to view a changeset fails with the following messages in trac.log:
 
12:24:29 Trac[session] DEBUG: Promoting anonymous session None to authenticated
session for user MYDOMAIN\brett.dellegrazie
12:24:29 Trac[svn_fs] DEBUG: Opening subversion file-system at /srv/svn/bdg with
 scope /
12:24:29 Trac[main] ERROR: Insufficient permissions to access changeset 462
Traceback (most recent call last):
  File "/usr/lib/python2.4/site-packages/trac/web/modpython_frontend.py", line 2
06, in handler
    dispatch_request(mpr.path_info, mpr, env)
  File "/usr/lib/python2.4/site-packages/trac/web/main.py", line 139, in dispatc
h_request
    dispatcher.dispatch(req)
  File "/usr/lib/python2.4/site-packages/trac/web/main.py", line 107, in dispatc
h
    resp = chosen_handler.process_request(req)
  File "/usr/lib/python2.4/site-packages/trac/versioncontrol/web_ui/changeset.py
", line 68, in process_request
    authzperm.assert_permission_for_changeset(rev)
  File "/usr/lib/python2.4/site-packages/trac/versioncontrol/api.py", line 243,
in assert_permission_for_changeset
    raise PermissionDenied, \
PermissionDenied: Insufficient permissions to access changeset 462
12:24:29 Trac[svn_fs] DEBUG: Closing subversion file-system at /srv/svn/bdg
I have set up trac to utilise the same svndiraccess file as Subversion.  The versions of software
are as follows:
Trac 0.9.5
Apache 2.2 (authentication used is a mod_authn_pam).
Samba 3.0.22 (provides windows authentication through a PAM module).
Subversion (1.3.0) 
 
svndiraccess file: (shared between trac and subversion)
[/]
*=r
 
[bdg:/]
rw=MYDOMAIN\brett.dellegrazie
 
I think this might be an authz problem within trac rather than subversion.
 
Any ideas?
 
Thanks,
 
Best Regards,
 
Brett

Brett Delle Grazie

Senior Developer

Logicalis Network Solutions Limited

Technology House, Laud Street,

Croydon, Surrey, CRO 1SX

T:     +44 20 8680 8080

DDI: +44 20 8633 8406

Mob: +44 777 926 4419

F:     +44 20 8633 8645

www.uk.logicalis.com

 

This email communication does not create or vary any contractual relationship between Logicalis and you. Internet communications are not secure and accordingly Logicalis does not accept any legal liability for the contents of this message. The contents of this email are confidential to the intended recipient at the email address to which it has been addressed. It may not be disclosed to or used by anyone other than this addressee, nor may it be copied in any way. If received in error, please contact Logicalis on the above switchboard number quoting the name of the sender and the addressee and then delete it from your system. Please note that neither Logicalis nor the sender accepts any responsibility for viruses and it is your responsibility to scan the email and attachments (if any).

 
_______________________________________________
Trac mailing list
[email protected]
http://lists.edgewall.com/mailman/listinfo/trac

Reply via email to