id,summary,reporter,owner,description,type,status,priority,milestone,component,version,severity,resolution,keywords,cc,branch,changelog,apichanges,internalchanges 2228,Proper user authentication,greenash@…,Jonas Borgström,"* Environment: standalone Tracd from 0.9b2 and firefox 1.0.6 for Linux I am unable to figure out what strange metaphor Trac uses for user management, but it's definitely not something a normal human being would anticipate. Inside my LAN I log in, log out, go to another computer and click the Login link; low and behold -- I am magically logged in again with the same user I have just logged out of. The browser never asks for a password. My session settings (e-mail) are not retrieved, of course. I have no idea how anyone could program that *on purpose*, let alone by accident. Why not provide a normal, friendly and boring Register New Account / Login / Settings / Logout set of pages ? The user data would be stored in the Trac environment for each project. This is what most users would expect. But no, that would not be confusing enough, right? Your unique ""session-centric"" user management is certainly superior in that respect. As it is, I am unable to use the software in my project. And it's too bad, because overall Trac looks like a very nice webapp which is being developed at a good pace.",defect,closed,normal,,general,0.9b2,major,duplicate,,,,,,