[Trac] Auth question

[brett.dellegrazie at uk.logicalis.com]

Dear Ranier,

>>> Therefore, users /must/ authenticate. And we do not want to have 
>>> anon access, since customer A must not see the tickets for customer
B.
>> How do you plan to authenticate users from customer A or customer B 
>> if they are not in your LDAP directory?
> 
> Exacly this is my question: Is that possible, and if, how?
> 
> Rainer

Another possible solution is to use separate trac instances for each
client
but use Postgres as a backend so that ticket numbers are unique across
all
clients (and SQL can be used against all tickets).

Use the LDAP Active Directory to authenticate your own users and fall
back
to local htpasswd files for each customer.

This will give you the flexibility you require and still allow separate
wiki's
for each client (if you don't want this, I'm sure they could be combined

easily enough).

I am going to be migrating to this setup shortly.

Best Regards,

Brett

Brett Delle Grazie
Senior Developer
Logicalis Network Solutions Limited 
Technology House, Laud Street,
Croydon, Surrey, CRO 1SX
T:     +44 20 8680 8080
DDI: +44 20 8633 8406
Mob: +44 777 926 4419
F:     +44 20 8633 8645
www.uk.logicalis.com
 
This email communication does not create or vary any contractual
relationship between Logicalis and you. Internet communications are not
secure and accordingly Logicalis does not accept any legal liability for
the contents of this message. The contents of this email are
confidential to the intended recipient at the email address to which it
has been addressed. It may not be disclosed to or used by anyone other
than this addressee, nor may it be copied in any way. If received in
error, please contact Logicalis on the above switchboard number quoting
the name of the sender and the addressee and then delete it from your
system. Please note that neither Logicalis nor the sender accepts any
responsibility for viruses and it is your responsibility to scan the
email and attachments (if any).

-----Original Message-----
From: trac-bounces at lists.edgewall.com
[mailto:trac-bounces at lists.edgewall.com] On Behalf Of Noah Kantrowitz
Sent: 12 July 2006 19:44
To: trac at lists.edgewall.com
Subject: Re: [Trac] Auth question

Look at the SimpleTicket plugin on trac-hacks. You can give
TICKET_CREATE_SIMPLE privs to anonymous, but not any of the other
TICKET_* ones. They will be able to enter tickets (and you can mask out
certain fields if you want). Hope that helps.

--Noah

Rainer Sokoll wrote:
> On Wed, Jul 12, 2006 at 09:36:35AM -0500, Will McCutchen wrote:
> 
>> On 7/12/06, Rainer Sokoll <R.Sokoll at intershop.de> wrote:
> 
>>> Therefore, users /must/ authenticate. And we do not want to have 
>>> anon access, since customer A must not see the tickets for customer
B.
>> How do you plan to authenticate users from customer A or customer B 
>> if they are not in your LDAP directory?
> 
> Exacly this is my question: Is that possible, and if, how?
> 
> Rainer
> _______________________________________________
> Trac mailing list
> Trac at lists.edgewall.com
> http://lists.edgewall.com/mailman/listinfo/trac
> 

_______________________________________________
Trac mailing list
Trac at lists.edgewall.com
http://lists.edgewall.com/mailman/listinfo/trac

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________