global login in multiproject site

[wanagi@…]

we are using trac in a setup with multiple projects

each project has an url like ​http://trac.domain.tld/projectname/

the problem is that we have to login to each project sepereately. is there any way to realize a global session handling or point trac to use one specified database for the session handling so that when you login once you are logged in in all projects and can keep your settings all over the system.

[Emmanuel Blot]

You can assign the same HTTP realm to all the projects, so that the browser sends the appropriate credentials when the user moves from one project to another. This avoids to login on each project, but you'll have to define the settings (name, email address) for each project.

[anonymous]

i already did this. this is how it looks in my apache config

<LocationMatch "/[[:alnum:]]+/[a-zA-Z0-9\.\-\_]+/login">
   AuthType Basic
   AuthName "trac"
   AuthUserFile /var/trac/auth
   Require valid-user
</LocationMatch>

the problem is that you still need to click login all the time and that you need to define the settings.

is there no way to point all the projects to one projects login perhaps. in this way you would set it up in one projects and this would be something like the master for the other projects.

[wanagi@…]

i came up with a workaround that cycles through all projects and adjusts the database. the problem is that i cannot set more then 50 cookies per domain which is the blocker now.

is there anyway i can patch the trac system so it will check for the same cookie within all projects?

[Christian Boos]

See also #4226, in particular comment 4.

• For the TracMultipleProjects/SingleEnvironment approach, single log for multiple projects will be for free.
• For the TracMultipleProjects/MultipleEnvironments approach (current one), one could think about using a parent/default environment for delegating the session and permission management.

[Noah Kantrowitz]

​TracForge already handles the multi-environment SSO.

[Christian Boos]

Milestone 1.0 deleted

[Remy Blank]

This is implemented in the ​th:SharedCookieAuthPlugin, which makes use of the new [trac] auth_cookie_path option (#8486).