[Moin-user] Authentication

[Rick Vanderveer]

Hey Waqas,How this works is that, before Apache even begins to process any
python (Moin) requests, it first must pass the authentication rule.  Once
the user enters his domain\username & password, Apache then passes that to
the SSPI module, which knows how to talk to a Windows Domain Controller.
 The module has a single purpose of saying "yes" or "no" on whether this
user is valid or not, and passes this back to Apache. If yes, then Apache
processes the next step (in this case, python). If no, then it redirects to
it's 401 error page (remember, you can also create a nice looking 401 error
page, which gives your server a finishing touch).

Yes, the SSPI module is easily able to handle multiple domains, as long as
the Domain Controllers are all talking to each other.  So, if a user from
Office-A can log onto a computer in Office-B, then you will have no problem
with your Apache-Moin installation. (this is the exact configuration for my
set-up, and it works perfectly!).

Hope this helps!

-Rick




On Thu, Nov 27, 2008 at 10:15 AM, waqas ahmad <waqas805 at hotmail.com> wrote:

>
>
>  Hi,
>
> I am using apache2.2.8 with my moinmoin1.7.2. i am using sspi module for
> authentication.
> I configured my apache with following commands.
>
> <IfModule !mod_auth_sspi.c>
>     LoadModule sspi_auth_module modules/mod_auth_sspi.so
> </IfModule>
> # Configuration for mod_auth_sspi
> <IfModule mod_auth_sspi.c>
>     <Location /supwiki>
>         AuthName "A Protected TestWiki"
>         AuthType SSPI
>         SSPIAuth On
>         SSPIAuthoritative On
>         SSPIOfferBasic On
>         SSPIBasicPreferred Off
>         require valid-user
>
>  SSPIOmitDomain On
>     </Location>
> </IfModule>
> # End of mod_auth_sspi.
>
> and i also configured wikiconfig.py as described in moinmoin document.
> every thing is running fine. internet explorer ask me also username and
> password.
>
>
> I want to ask that how authentication is working via apache. I am not
> understanding the process that how apache is looking my domain.that i am
> right domain user.Actually i want to ask how this process is working. how it
> is authenticating? what is the backgraound of this process?
>
> and please tell me also that, the different domain users can also access
> moinmoin via vpn, if yes then how?
>
> I shall be really thankful to you for replying.
>
> Best Regards,
>
> Waqas Ahmad
>
>
> ------------------------------
> Get news, entertainment and everything you care about at Live.com. Check
> it out! <http://www.live.com/getstarted.aspx>
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's
> challenge
> Build the coolest Linux based applications with Moblin SDK & win great
> prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Moin-user mailing list
> Moin-user at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/moin-user
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/moin-user/attachments/20081127/4bbb2c9f/attachment.html>