[Moin-user] SSPI with https

Fri Feb 20 12:56:34 EST 2009

Hi, 

Sorry, that i am testing moinmoin with different mehtods. you are right that i configured before also my moinmoin with LDAP but i saw some problems that RSS feed is not working and my ACL was giving me some problems and sometimes when i clicked on some links on my wiki pages then suddenly i go logout automatically. I was tested these things on my test machine. but on my real machine untill now running moinmoin with sspi. I thought, it is better to run my apache via ssl, because of security reasons, therefore i configure my apache with ssl.

now i did some troubleshooting as you said.

First i run my moinmoin with http, sspi_authentication and it is running fine.

2nd i run my moinmon with https, sspi_authentication and it is not working and it is giving following message in ssl_request.log.

[20/Feb/2009:18:27:48 +0100] 172.16.11.184 TLSv1 AES128-SHA "GET /supwiki HTTP/1.1" 401

3rd: i run my moinmoin with https, without sspi_authtentication then it shows moinmoin page.Thats mean it is working.

and error.log file giving me following detail when i start apache. 

[Fri Feb 20 18:19:31 2009] [warn] RSA server certificate CommonName (CN) `nv1402' does NOT match server name!?
[Fri Feb 20 18:19:31 2009] [warn] RSA server certificate CommonName (CN) `nv1402' does NOT match server name!?
[Fri Feb 20 18:19:31 2009] [warn] mod_wsgi: Compiled for Python/2.5.
[Fri Feb 20 18:19:31 2009] [warn] mod_wsgi: Runtime using Python/2.5.2.
[Fri Feb 20 18:19:31 2009] [warn] mod_wsgi: Python module path 'C:\\Windows\\system32\\python25.zip;C:\\Python25\\Lib;C:\\Python25\\DLLs;C:\\Python25\\Lib\\lib-tk;;C:\\Program Files\\Apache Software Foundation\\Apache2.2\\bin'.
[Fri Feb 20 18:19:31 2009] [notice] Apache/2.2.8 (Win32) mod_ssl/2.2.8 OpenSSL/0.9.8g mod_wsgi/2.3 Python/2.5.2 mod_auth_sspi/1.0.4 configured -- resuming normal operations
[Fri Feb 20 18:19:31 2009] [notice] Server built: Jan 18 2008 00:37:19
[Fri Feb 20 18:19:31 2009] [notice] Parent: Created child process 4636
[Fri Feb 20 18:19:32 2009] [warn] RSA server certificate CommonName (CN) `nv1402' does NOT match server name!?
[Fri Feb 20 18:19:33 2009] [warn] RSA server certificate CommonName (CN) `nv1402' does NOT match server name!?
[Fri Feb 20 18:19:33 2009] [warn] mod_wsgi: Compiled for Python/2.5.
[Fri Feb 20 18:19:33 2009] [warn] mod_wsgi: Runtime using Python/2.5.2.
[Fri Feb 20 18:19:33 2009] [warn] mod_wsgi: Python module path 'C:\\Windows\\system32\\python25.zip;C:\\Python25\\Lib;C:\\Python25\\DLLs;C:\\Python25\\Lib\\lib-tk;;C:\\Program Files\\Apache Software Foundation\\Apache2.2\\bin'.
[Fri Feb 20 18:19:33 2009] [notice] Child 4636: Child process is running
[Fri Feb 20 18:19:33 2009] [notice] Child 4636: Acquired the start mutex.
[Fri Feb 20 18:19:33 2009] [notice] Child 4636: Starting 64 worker threads.
[Fri Feb 20 18:19:33 2009] [notice] Child 4636: Starting thread to listen on port 443.

These kind of things confusing me really. I hope i will find a way to run moinmoin with ssl and sspi :).

Have a nice weekend, 

we will meet on Monday and really thanks a lot for helping.

Best Regards,

Waqas Ahmad

> Date: Fri, 20 Feb 2009 10:23:08 -0600
> Subject: Re: [Moin-user] SSPI with https
> From: rick.vanderveer at gmail.com
> To: waqas805 at hotmail.com
> CC: moin-user at lists.sourceforge.net
> 
> You're very confusing, Waqas. :-) First, you start out using sspi,
> then switch to LDAP for some unknown reason even though sspi is
> working fine, and now you're back to sspi? huh.
> 
> sspi shouldn't have anything to do with SSL, it's merely an
> authentication mechanism. If it's prompting for username/password, it
> sounds like that portion is working correctly. In other words, once
> it does it's task, it steps out of the way and lets the next step
> occur.
> 
> To troubleshoot, I would suggest disabling sspi authentication
> altogether, and see if moin will display pages at that point. Try to
> figure out at exactly what stage it's breaking. Also, don't forget to
> check your error logs for hints and insight.
> 
> -Rick
> 
> 
> 
> 
> On Fri, Feb 20, 2009 at 10:06 AM, waqas ahmad <waqas805 at hotmail.com> wrote:
> >
> >
> >
> > Hi,
> >
> > my sspi authentication is working fine with http but now i changed to https
> > and sspi authentication is not working. It asks for username and password
> > but then page can not be displayes.
> >
> > should i configure sspi in apache. or it will be remain same.
> >
> > thanks in advance,
> >
> > Regards,
> >
> > Waqas Ahmad
> >
> >
> >
> > ________________________________
> > Invite your mail contacts to join your friends list with Windows Live
> > Spaces. It's easy! Try it!
> > ------------------------------------------------------------------------------
> > Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
> > -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
> > -Strategies to boost innovation and cut costs with open source participation
> > -Receive a $600 discount off the registration fee with the source code: SFAD
> > http://p.sf.net/sfu/XcvMzF8H
> > _______________________________________________
> > Moin-user mailing list
> > Moin-user at lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/moin-user
> >
> >

_________________________________________________________________
Invite your mail contacts to join your friends list with Windows Live Spaces. It's easy!
http://spaces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx&mkt=en-us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/moin-user/attachments/20090220/b35dccad/attachment.html>