Changes between Version 5 and Version 6 of TracAuthenticationIntroduction

Timestamp:

Apr 18, 2010, 12:44:31 PM (14 years ago)

Author:

kilbyc@…

Comment:

Added some more detail to Digest Authentication. Added WSGI authentication passthrough info.

TracAuthenticationIntroduction

@@ -37 +37 @@
 This method of authentication allows unauthenticated users to see and to make (limited) changes to the Trac system.  Authenticated users have a bit more access.  To login you click on the ''Login'' entry on the top menubar; after authentication you are given a cookie which is used for authorization and access control.
 
+=== Basic Authentication ===
 To do this you need to control access to the {{{login}}} name under the Trac system, so for the example above you would change the configuration to:-
 {{{
@@ -51 +52 @@
 }}}
 
-''Note that optional login requires cookies.''
+=== Digest Authentication ===
+
+To setup digest authentication follow the instructions to create the digest password file. http://httpd.apache.org/docs/2.1/programs/htdigest.html. For the '''realm''' set in htdigest you must put a matching AuthName. 
+
+For example:
+ htdigest -c /path/to/.htdigest TracRealmName UserName
+
+{{{
+ ...WSGI config if using WSGI
+ <Location /trac>
+   ...mod_python config if using mod_python
+   AuthType Digest
+   AuthName "TracRealmName"
+   AuthDigestDomain /trac
+   AuthDigestProvider file
+   AuthUserFile /path/to/.htdigest 
+   Require valid-user
+ </Location>
+}}}
+Don't forget, if you are using Digest with WSGI you must enable authentication passthrough with: 
+{{{
+  WSGIPassAuthorization On
+  WSGIScriptAlias /trac /path/to/trac/config.wsgi 
+}}}
+
+''Note that optional login requires cookies, and that the chosen authentication schema be active in Apache. (Basic is by default in most installations, digest usually requires changes to http.conf)''
+
 
 == Issues ==