Re: Problems with user.py >= v 1.79

Thomas Waldmann <[email protected]>
Newsgroups gmane.comp.web.wiki.moin.devel
Message-ID <[email protected]>
> As of version 1.79 of user.py line 143 was changed from
>    if not self.id:
> to
>    if not self.id and not self.auth_username:
> 
> The log entry of the commiter describes the intended improvement:
> "auth_username must take precedence over cookie"
> 
> I suspect this change to be responsible for a problem that shows up in
> our MoinMoin installation in our Intranet. Every user within that
> Intranet is authenticated by HTTP AUTH.
> 
> If ACLs are turned off, a user *has to* choose his auth_username as Name
> on the UserPreferences page as well. Otherwise he won't be able to
> change his settings afterwards ("Username already exists!", if
> submitting via "save" button).

Maybe simply removing "and not self.auth_username" would help you.

Or rather change it to ... and not (self.auth_username and 
config.httpauth_enabled):

And then put that into your moin_config.py:

httpauth_enabled = 0

> This is not very nice, as the UserPreferences page suggest to use a
> WikiName as username. But it can be circumvented.
> 
> But if ACLs are turned on, a user can't choose a Name such as "thomi",
> since the ACL systems requires a WikiName now.
> 
> Is this a bug or am I missing something?

Well, it is not a bug, it just was not designed to have different http 
auth and wiki auth usernames.

But as this is a quite common scenario, we should extend moin to be able 
to map http_auth names to wiki auth names. I will look into that later 
today.

If it can be done very easy (AND the right way), it will get into next 
release maybe - if not, I will put it onto 1.3 todo.

greetings,

Thomas



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.