Changes between Version 31 and Version 32 of TracModWSGI

Timestamp:

Feb 27, 2011, 5:45:08 PM (13 years ago)

Author:

Christian Boos

Comment:

refreshing the section about Basic and Digest authentication, adding some details found in trunk/doc/install/apacheauth.rst

TracModWSGI

@@ -85 +85 @@
 
 == Configuring Authentication
+
+We describe in the the following sections different methods for setting up authentication.
+
+See also [http://httpd.apache.org/docs/2.2/howto/auth.html Authentication, Authorization and Access Control] in the Apache guide.
 
 === Using Basic Authentication ===
@@ -128 +132 @@
 }}}
 
+See also the [http://httpd.apache.org/docs/2.2/mod/mod_auth_basic.html mod_auth_basic] documentation.
+
 === Using Digest Authentication ===
 
-For better security, it is recommended that you either enable SSL or at least use the “digest” authentication scheme instead of “Basic”. Please read the [http://httpd.apache.org/docs/2.0/ Apache HTTPD documentation] to find out more. For example, on a Debian 4.0r1 (etch) system the relevant section  in apache configuration can look like this:
+For better security, it is recommended that you either enable SSL or at least use the “digest” authentication scheme instead of “Basic”. 
+
+You'll have to create your `.htpasswd` file with the `htdigest` command instead of `htpasswd`, as follows:
+{{{
+# htdigest /somewhere/trac.htpasswd trac admin
+}}}
+
+The "trac" parameter above is the "realm", and will have to be reused in the Apache configuration in the !AuthName directive:
+
 {{{
 <Location "/trac/login">
-    LoadModule auth_digest_module /usr/lib/apache2/modules/mod_auth_digest.so
+
     AuthType Digest
     AuthName "trac"
@@ -141 +155 @@
 </Location>
 }}}
-and you'll have to create your .htpasswd file with htdigest instead of htpasswd as follows:
-{{{
-# htdigest /somewhere/trac.htpasswd trac admin
-}}}
-where the "trac" parameter above is the same as !AuthName above  ("Realm" in apache-docs). 
-
-
-Creating password files and configuring authentication works similar to the examples given in the generic instructions for [wiki:TracInstall#ConfiguringAuthentication configuring authentication]:
-{{{
-#!xml
-<Location /projects/myproject/login>
-  AuthType Basic
-  AuthName "myproject"
-  AuthUserFile /var/trac/myproject/.htpasswd
-  Require valid-user
-</Location>
-}}}
+
+For multiple environments, you can use the same `LocationMatch` as described with the previous method.
+
+Don't forget to activate the mod_auth_diget. For example, on a Debian 4.0r1 (etch) system:
+{{{
+    LoadModule auth_digest_module /usr/lib/apache2/modules/mod_auth_digest.so
+}}}
+
+
+See also the [http://httpd.apache.org/docs/2.2/mod/mod_auth_digest.html mod_auth_digest] documentation.
 
 === Using LDAP Authentication