[ moin-Patches-736885 ] Identify users using client certificates

Patches item #736885, was opened at 2003-05-13 09:45
Message generated for change (Comment added) made by thomaswaldmann
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=308482&aid=736885&group_id=8482

Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Martin v. Löwis (loewis)
>Assigned to: Thomas Waldmann (thomaswaldmann)
Summary: Identify users using client certificates

Initial Comment:
This patch allows to identifiy Moin users using SSL
client certificates. Specifically, it uses the common
name and the email address from the cerificate's
subject's distinguished name. Cookies and Moin user ids
are still used, and finding users works like this

1. If there is a cookie, use that

2. If there is no cookie, iterate over all users, and
try to find one with the same email address or where
the X.509 common name is the same as the Moin user name.

3. If no user is found, but either the email address or
the common name is set, create a new user.

This patch works only with Apache mod_ssl, as it relies
on the environment variables SSL_CLIENT_S_DN* being set.

----------------------------------------------------------------------

>Comment By: Thomas Waldmann (thomaswaldmann)
Date: 2004-09-25 04:13

Message:
Logged In: YES 
user_id=100649

Martin, I don't think any of the devels uses client
certificates, so we could not test it.

Would you test it if we include your patch into 1.2.x (and
later, into 1.3)?

I would make the necessary changes to adapt it to the
current version (like using request object).


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=308482&aid=736885&group_id=8482


-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php