Changes between Version 7 and Version 8 of TracOnWindows/Advanced

Timestamp:

Nov 3, 2007, 5:53:13 AM (17 years ago)

Author:

etienne.pub@…

Comment:

Added information on how to authenticate users in a Windows environment

TracOnWindows/Advanced

@@ -49 +49 @@
 
 It is also possible to install [wiki:"TracOnWindowsIis6" Trac with IIS 6], though your mileage may vary.
+
+== Authenticating Trac users against MS Windows domain controller ==
+
+Running Trac in Apache, you can let your users login using their existing Windows username/password using `mod_sspi`. (If you use Subversion as a repository and access it through Apache, you can also do the same with Subversion). Download this module [http://sourceforge.net/projects/mod-auth-sspi here], place it in the Apache modules directory, and add the following line to your `httpd.conf`, with all the `LoadModule` instructions:
+{{{
+LoadModule sspi_auth_module modules/mod_auth_sspi.so
+}}}
+
+Then add the following to the end of `http.conf`, modified according to your settings:
+
+{{{
+<LocationMatch /MyTracRootURL/[^/]+/login>
+        AuthType SSPI
+        AuthName "Trac project management website @ MyLocalMachine"
+        SSPIAuth On
+        SSPIAuthoritative On
+        SSPIDomain MyLocalDomain
+        SSPIOfferBasic On
+        Require valid-user
+</LocationMatch>
+}}}
+
+Then, if you change permissions in Trac using `trac-admin.exe`, remember to declare the user `bob` as `MyLocalDomain\bob`. (The same remarks applies for Subversion)