Edgewall Software
Modify

Opened 15 years ago

Closed 14 years ago

Last modified 13 years ago

#507 closed enhancement (fixed)

Allow disabling IP address checking for authentication

Reported by: idnar <mithrandi@…> Owned by: Christopher Lenz
Priority: high Milestone: 0.9
Component: general Version: 0.7
Severity: normal Keywords:
Cc: Branch:
Release Notes:
API Changes:

Description

This would make it possible for users behind multi-homed proxy servers to auth properly; currently, if your IP address is variable during a session, you are essentially unable to login properly. Making this an option would allow the additional session security for those that want it, but also allow the added convenience and usability at the cost of a little session security.

Attachments (0)

Change History (6)

comment:1 by daniel, 15 years ago

Milestone: 0.8
Priority: normalhigh

Not a bad idea. The session module is ip-independent as well (it just uses the cookie).

I propose adding a Authentication section to trac.ini, for stuff like this, sessions and similar.

comment:2 by daniel, 15 years ago

Milestone: 0.80.9

comment:3 by utopiste, 15 years ago

Owner: changed from Jonas Borgström to utopiste
Status: newassigned

comment:4 by Christopher Lenz, 14 years ago

Owner: changed from utopiste to Christopher Lenz
Status: assignednew

Taking over.

comment:5 by Christopher Lenz, 14 years ago

Status: newassigned

comment:6 by Christopher Lenz, 14 years ago

Resolution: fixed
Status: assignedclosed

Fixed in [1361].

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain Christopher Lenz.
The resolution will be deleted. Next status will be 'reopened'.

Add Comment


E-mail address and name can be saved in the Preferences .
 
Note: See TracTickets for help on using tickets.