1 Aug 2007 03:39
[Trac-dev] Re: REMOTE_USER change
Stephen A. Cochran Lists <stephen.a.cochran.lists <at> cahir.net>
2007-08-01 01:39:05 GMT
2007-08-01 01:39:05 GMT
On Jul 31, 2007, at 6:42 PM, Graham Dumpleton wrote: > Note that the standard way that Apache authentication modules are > supposed to work is that they set req.user to the authenticated user > id. This is also turned into REMOTE_USER variable in > req.subprocess_env when req.add_common_vars() is called. If > add_common_vars() isn't being called by a mod_python handler you will > thus not have access to REMOTE_USER and would have to use req.user. > > FWIW, you seem to deliberately doing things to break how Apache > normally works. Why can't your other module simply set req.user in the > correct manner to what you want rather than using the request > environment variables. If the module is a C module it is the 'user' > attribute of request_rec structure. If you need whether this is done > to be selectable then add a directive to enable passing full name in > req.user. Do note though that your full names better be unique > otherwise you might have issues in Trac. > > Perhaps provide more explanation of the reasons for wanting to so > this, rather than simply what you want to achieve. It may be the case > that you shouldn't be changing Trac but that the other module should > be changed to do things in a more customisable way inline with how > Apache should be used. Actually our module is setting REMOTE_USER correctly, but to provide backwards compatibility the name being put into that field is missing some important information. Our web authentication system was recently upgraded to support multiple realms of users, for example alumni, pre-admission students, and general community members.(Continue reading)
RSS Feed