[Moin-user] Question of auto create user profile via SSL client certification authentication

jwhuang jwhuang at twgrid.org
Wed Nov 4 11:00:26 EST 2009


Hi Reimar,

The version of my wiki is 1.8.4.

BR,
Jhen-Wei**

On Wed, Nov 4, 2009 at 4:54 PM, R.Bauer <rb.proj at gmail.com> wrote:

> Hi
> just before going in details. Do you have installed on your site
> moin-1.9rc1?
>
> Because the help page you refer too is for moin-1.9.
>
> cheers
> Reimar
>
>
>
> jwhuang schrieb:
> > Dear All,
> >
> > I met some problems with Moin configuration about SSL authentication.
> > I have self-signed certificates for my wiki server and users.
> > Now I would like to use certificates to do authentication. Here is my
> > reference: http://moinmo.in/HelpOnAuthentication
> > As the section "SSL client certification authentication" said, I can use
> > "autocreate" parameter to create user profile automatically once users
> pass
> > SSL check.
> > But it does not work in my wiki server. Could you help me to check my
> > configuration if something wrong? Thanks a lot.
> >
> > Add two lines at wikiconfig.py:
> >     from MoinMoin.auth.sslclientcert import SSLClientCertAuth
> >     auth = [SSLClientCertAuth(autocreate=['True'])]
> >
> > At http.conf, I did the following configuration:
> >     Alias /moin_static184/ "/var/www/mywiki/htdocs/"
> >     WSGIScriptAlias /mywiki /var/www/mywiki/moin.wsgi
> >     WSGIDaemonProcess mywiki user=apache group=apache processes=5
> threads=10
> > maximum-requests=1000 umask=0007
> >     WSGIProcessGroup mywiki
> >     WSGIPassAuthorization On
> >
> >     <Location /mywiki>
> >         SetHandler python-program
> >         # Add the path of your wiki directory
> >         PythonPath "['/var/www/mywiki',
> > '/usr/local/lib/python2.4/site-packages'] + sys.path"
> >         PythonHandler MoinMoin.request.request_modpython::Request.run
> >         SSLVerifyClient require
> >         SSLUserName SSL_CLIENT_S_DN
> >         SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)/ \
> >                  and %{SSL_CLIENT_S_DN_OU} in {"GRID"})
> >     </Location>
> >
> > I can access my wiki page with security http and see my DN shown in the
> > ssl_sccess.log. But the user profile can not be created automatically.
> > Any idea about this? Thanks a lot.
> >
> > All the Best.
> > Jhen-Wei Huang
> >
> >
> >
> > ------------------------------------------------------------------------
> >
> >
> ------------------------------------------------------------------------------
> > Come build with us! The BlackBerry(R) Developer Conference in SF, CA
> > is the only developer event you need to attend this year. Jumpstart your
> > developing skills, take BlackBerry mobile applications to market and stay
> > ahead of the curve. Join us from November 9 - 12, 2009. Register now!
> > http://p.sf.net/sfu/devconference
> >
> >
> > ------------------------------------------------------------------------
> >
> > _______________________________________________
> > Moin-user mailing list
> > Moin-user at lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/moin-user
>
>
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus
> on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Moin-user mailing list
> Moin-user at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/moin-user
>



-- 
OPS Team, ASGC
Tel:  +886-2-2789-8311
Fax: +886-2-2783-7653
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/moin-user/attachments/20091104/ad08059f/attachment.html>


More information about the Moin-user mailing list