Allow disabling IP address checking for authentication

[idnar <mithrandi@…>]

This would make it possible for users behind multi-homed proxy servers to auth properly; currently, if your IP address is variable during a session, you are essentially unable to login properly. Making this an option would allow the additional session security for those that want it, but also allow the added convenience and usability at the cost of a little session security.

[daniel]

Not a bad idea. The session module is ip-independent as well (it just uses the cookie).

I propose adding a Authentication section to trac.ini, for stuff like this, sessions and similar.

[cmlenz]

Taking over.

[cmlenz]

Fixed in [1361].