| [00:34:41] |
* |
ralreegorganon has quit IRC |
| [00:35:45] |
* |
ralreegorganon has joined #trac |
| [00:42:00] |
* |
prologic has joined #trac |
| [00:53:34] |
* |
mooch has joined #trac |
| [00:53:37] |
<mooch> |
yo |
| [00:53:49] |
<coderanger> |
hi |
| [00:54:14] |
<mooch> |
can anyone check if this is still valid? |
| [00:54:15] |
<mooch> |
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=343598 |
| [00:54:35] |
<mooch> |
i dont have any trac installation at hand.. |
| [00:54:59] |
<coderanger> |
Whoever filed that with you guys should be smacked .... |
| [00:55:29] |
<mooch> |
coderanger: is mot true, right? |
| [00:55:39] |
<coderanger> |
Double checking to be sure |
| [00:55:56] |
<mooch> |
_ADMIN includes _VIEW, right? |
| [00:57:38] |
<coderanger> |
Not in all cases |
| [00:57:55] |
<coderanger> |
MILESTONE_ADMIN = MILESTONE_* |
| [00:58:10] |
<coderanger> |
But ROADMAP_ADMIN == MILESTONE_ADMIN |
| [00:58:26] |
<coderanger> |
so ROADMAP_ADMIN doesn't include ROADMAP_VIEW |
| [00:58:41] |
<mooch> |
should it? |
| [00:59:02] |
<coderanger> |
No, ROADMAP_ADMIN is deprecated (and the docs say so) |
| [00:59:17] |
<coderanger> |
its just the old name for what is now MILESTONE_ADMIN |
| [00:59:24] |
<mooch> |
READMAP_VIEW is deprecated? |
| [00:59:36] |
<mooch> |
too* ? |
| [00:59:44] |
<coderanger> |
No |
| [01:00:51] |
<coderanger> |
It just has no corresponding _ADMIN |
| [01:00:56] |
<mooch> |
ah, ok |
| [01:01:01] |
<mooch> |
i will report it.. |
| [01:01:13] |
<coderanger> |
Seeing as its the only ROADMAP perm, that wouldnt make sense |
| [01:01:34] |
<coderanger> |
For the future people shouldn't file bugs to you guys ... |
| [01:03:11] |
<mooch> |
coderanger: why not? |
| [01:03:31] |
<mooch> |
we proxy the bugs in case they are not a trac problem... |
| [01:03:49] |
<mooch> |
is the prefered way in debian, as far as i can tell.. |
| [01:04:14] |
<coderanger> |
Because its going to be slower |
| [01:04:28] |
<coderanger> |
That mug was filed 8 months ago |
| [01:04:46] |
<mooch> |
but the guy has been using the code for a long time without problems ;) |
| [01:05:12] |
<mooch> |
coderanger: i believe he was contacted already, 'cept that i am now going through the list of bugs to close them |
| [01:05:29] |
<coderanger> |
0.9.2 is also known to be insecure and should not be used or distributed ... :P |
| [01:06:20] |
<mooch> |
coderanger: it is not |
| [01:06:45] |
<mooch> |
coderanger: we have been packaging and getting the trac packages to unstable fairly quickly |
| [01:06:50] |
<coderanger> |
I know |
| [01:07:05] |
<mooch> |
coderanger: and i believe the guy is not running 0.9.2 |
| [01:07:12] |
<coderanger> |
I would just close anything filed against <0.9.3 as "unsupported" |
| [01:07:13] |
<mooch> |
but one of the most recent releases |
| [01:08:29] |
<coderanger> |
Its filed as 0.9.2-1 |
| [01:09:32] |
<coderanger> |
Anywho, it is indeed incorrect |
| [01:11:52] |
<mooch> |
coderanger: it is filled when 0.9.2-1 was the version he had installed ;) |
| [01:42:06] |
* |
_idostyle has joined #trac |
| [01:43:42] |
* |
Plouf has quit IRC |
| [01:59:00] |
* |
idostyle has quit IRC |
| [01:59:09] |
* |
_idostyle is now known as idostyle |
| [02:06:23] |
* |
Jack9 has joined #trac |
| [02:06:51] |
<Jack9> |
how do I alter the "new ticket" component list? |
| [02:07:06] |
<coderanger> |
trac-admin or WebAdmin |
| [02:08:58] |
<Jack9> |
coderanger: can you be a bit more specific? I dont know where to look in the docs |
| [02:09:06] |
<coderanger> |
@webadmin |
| [02:09:06] |
<evil_twin> |
coderanger: "webadmin" is http://projects.edgewall.com/trac/wiki/WebAdmin |
| [02:11:16] |
<Jack9> |
so you can only change certain data through webadmin, or there's just no documentation in a default install, either way |
| [02:11:42] |
<coderanger> |
WebAdmin is a plugin |
| [02:12:04] |
<coderanger> |
It is not part of the standard distribution |
| [02:12:19] |
<Jack9> |
coderanger: so how do you alter the component list without it? |
| [02:12:35] |
<coderanger> |
The docs for trac-admin are here http://trac.edgewall.org/wiki/TracAdmin |
| [02:13:10] |
<Jack9> |
coderanger: which doesnt cover much |
| [02:13:31] |
<coderanger> |
help ticket |
| [02:13:44] |
<coderanger> |
Its all built in to the interactive system |
| [02:13:55] |
<Jack9> |
coderanger: i c |
| [02:16:18] |
<coderanger> |
I would highly recommend installed WebAdmin anyway though |
| [02:16:21] |
<coderanger> |
Its very useful |
| [02:26:26] |
* |
KrisWood has quit IRC |
| [02:27:22] |
* |
KrisWood has joined #trac |
| [02:29:54] |
<Jack9> |
coderanger: and very hard to install. setup.py gives me from setuptools import setup, find_packages |
| [02:29:54] |
<Jack9> |
ImportError: No module named setuptools |
| [02:30:04] |
* |
KrisWood has left #trac |
| [02:30:07] |
<coderanger> |
Did you install setuptools? |
| [02:30:10] |
<coderanger> |
@plugins |
| [02:30:10] |
<evil_twin> |
coderanger: "plugins" is http://projects.edgewall.com/trac/wiki/TracPlugins |
| [02:30:28] |
<coderanger> |
setuptools > 0.6 is required for plugins ;-) |
| [02:30:51] |
<Jack9> |
of course... |
| [02:33:29] |
* |
tuxipuxi has joined #trac |
| [03:04:57] |
* |
MasterC has joined #trac |
| [03:05:04] |
* |
boude has joined #trac |
| [03:17:23] |
* |
MasterC has quit IRC |
| [03:41:05] |
* |
Semhirage has quit IRC |
| [03:41:35] |
* |
Semhirage has joined #trac |
| [04:24:17] |
* |
maxb has joined #trac |
| [04:48:57] |
* |
flox is now known as flox|away |
| [06:33:38] |
* |
maxb has quit IRC |
| [06:49:11] |
* |
s0undt3ch has joined #trac |
| [07:10:03] |
* |
prologic has quit IRC |
| [07:13:08] |
<tuxipuxi> |
can i configure trac/enscript to use c++ highlighting for c#? |
| [07:18:24] |
* |
maxb has joined #trac |
| [07:29:17] |
* |
prologic has joined #trac |
| [07:36:59] |
* |
jacobat has quit IRC |
| [08:14:17] |
* |
prologic__ has joined #trac |
| [08:14:37] |
* |
prologic has quit IRC |
| [08:23:31] |
<coderanger> |
tuxipuxi: mime_map will probably do it |
| [08:24:38] |
<tuxipuxi> |
coderanger: to be found where? |
| [08:25:31] |
<coderanger> |
I don't think its documented yet |
| [08:25:42] |
<coderanger> |
new feature in trunk |
| [08:25:58] |
<tuxipuxi> |
damn trunk, it's time for a new release |
| [08:26:01] |
<tuxipuxi> |
and it must happen soo |
| [08:26:02] |
<tuxipuxi> |
n |
| [08:26:44] |
<coderanger> |
Have you tried setting the mime type explicitly? |
| [08:26:52] |
<coderanger> |
That should work under 0.9 |
| [08:26:58] |
<tuxipuxi> |
hm, where? |
| [08:27:41] |
<coderanger> |
svn help pset |
| [08:27:57] |
<tuxipuxi> |
ah, haven't tried yet. food is ready, thanks coderanger :) |
| [08:30:06] |
* |
imajes_ has joined #trac |
| [08:40:23] |
* |
prologic__ has quit IRC |
| [08:40:36] |
* |
prologic has joined #trac |
| [08:46:57] |
* |
imajes_ has quit IRC |
| [08:50:06] |
* |
tharvey has joined #trac |
| [09:06:34] |
* |
Riccc has joined #trac |
| [09:19:39] |
* |
Inc has left #trac |
| [09:21:45] |
<Jack9> |
easy_install TracWebAdmin-0.1.1dev_r2765-py2.3.egg ... No local packages or download links found for TracWebAdmin-0.1.1dev-r2765-py2.3.egg |
| [09:21:46] |
<Jack9> |
error: Could not find suitable distribution for Requirement.parse('TracWebAdmin-0.1.1dev-r2765-py2.3.egg') |
| [09:22:21] |
<Jack9> |
did i not install easy_install correctly? |
| [09:23:55] |
* |
boude has quit IRC |
| [09:39:58] |
<coderanger> |
Did you download the egg file? |
| [10:00:06] |
<Jack9> |
coderanger: i downloaded TracWebAdmin-0.1.1dev_r2765-py2.4.egg.zip\?format\=raw then renamed it to TracWebAdmin-0.1.1dev_r2765-py2.4.egg |
| [10:00:33] |
<coderanger> |
Those are different files (2.3 vs. 2.4 ....) |
| [10:00:55] |
<Jack9> |
coderanger: yes I upgraded python in the between time |
| [10:03:54] |
<Jack9> |
screw it, I'll just source install. this egg garbage seems overly unnecessary |
| [10:05:23] |
<coderanger> |
Just make sure you use the right code version |
| [10:17:40] |
<Jack9> |
coderanger: i got it. seems strange that this isn't a native part of trac |
| [10:18:02] |
<coderanger> |
it will be in 0.11 |
| [10:18:22] |
<coderanger> |
The plugin system was only created with 0.9 |
| [10:18:47] |
<coderanger> |
There are a lot of things that people say should be part of Trac |
| [10:19:00] |
<coderanger> |
(SpamFilter, TicketDelete, WikiRename, etc etc) |
| [10:21:02] |
<Jack9> |
where's the latest ticketdelete :D |
| [10:21:17] |
<coderanger> |
trac-hacks |
| [10:21:37] |
<coderanger> |
Almost every plugin is hosted or mentioned that |
| [10:21:40] |
<coderanger> |
er, there |
| [10:22:41] |
<coderanger> |
The problem isn't so much that the plugins arent a part of trac's core, its that installing them gets tedious |
| [10:22:53] |
<coderanger> |
If it was 2 clicks for each it wouldn't be so annoying |
| [10:23:51] |
* |
coderanger should get HackInstall working again someday |
| [10:23:53] |
<Jack9> |
coderanger: why does the TicketDelete page say "just follow the normal egg installation procedures." when there's no egg linked. do I just try to download every link and then sort it out? |
| [10:24:32] |
<coderanger> |
Just checkout the source and build them like it says here http://trac.edgewall.org/wiki/TracPlugins |
| [10:24:44] |
<Jack9> |
kk |
| [10:24:45] |
<coderanger> |
If you need I can post eggs to PyPI though |
| [10:24:52] |
<Jack9> |
nah |
| [10:24:59] |
<Jack9> |
i'm happy with the source install procedure |
| [10:27:25] |
<coderanger> |
Just make sure to use the correct version wrt 0.9 vs. trunk |
| [10:28:46] |
* |
jborg has joined #trac |
| [10:29:27] |
<Jack9> |
coderanger: so .10 was not the right choice ;p |
| [10:29:37] |
<coderanger> |
Not unless you are running 0.10 ;-) |
| [10:30:04] |
<Jack9> |
coderanger: the correct uninstall is just to delete the plugin dir from the plugins directory, then reinstall? |
| [10:30:16] |
<coderanger> |
Yep |
| [10:31:37] |
<Jack9> |
coderanger: cool. it's listed on webadmin |
| [10:31:47] |
<Jack9> |
coderanger: how do i actually delete a ticket tho |
| [10:32:01] |
<coderanger> |
Look under the Ticket section in webadmin |
| [10:32:12] |
<coderanger> |
there are two new entries "Delete" and "Delete Changes" |
| [10:33:13] |
<Jack9> |
coderanger: i c. Works correctly |
| [10:33:34] |
<coderanger> |
The UI still needs more work, but its functionally okay |
| [10:34:23] |
* |
mjg2 has quit IRC |
| [10:34:31] |
* |
coderanger ->BBQ |
| [10:39:29] |
* |
Jack9 has left #trac |
| [10:56:55] |
<tuxipuxi> |
what could cause the repository browser and timeline to show an old state of the repository even if you do a 'resync' |
| [11:05:09] |
* |
MasterC has joined #trac |
| [11:10:16] |
* |
Standfast has quit IRC |
| [11:13:17] |
* |
De_mon has quit IRC |
| [11:16:20] |
* |
De_mon has joined #trac |
| [11:20:57] |
* |
xjjk has quit IRC |
| [11:28:05] |
* |
Blackhex has joined #trac |
| [11:33:38] |
* |
ralreegorganon has quit IRC |
| [11:35:54] |
* |
MasterC has quit IRC |
| [11:42:13] |
* |
MasterC has joined #trac |
| [12:05:32] |
* |
Del_Mon has joined #trac |
| [12:06:04] |
* |
Blackhex has quit IRC |
| [12:06:18] |
* |
Blackhex has joined #trac |
| [12:08:01] |
* |
iratsu has quit IRC |
| [12:14:59] |
* |
maxb has quit IRC |
| [12:15:38] |
* |
maxb has joined #trac |
| [12:16:34] |
<tuxipuxi> |
anybody? :/ |
| [12:17:29] |
* |
De_mon has quit IRC |
| [12:23:37] |
* |
stevegt has quit IRC |
| [12:24:35] |
* |
Blackhex has quit IRC |
| [12:25:33] |
* |
Blackhex has joined #trac |
| [12:47:07] |
* |
agile has quit IRC |
| [12:48:32] |
* |
xjjk has joined #trac |
| [12:57:49] |
* |
agile has joined #trac |
| [12:58:21] |
* |
stevegt has joined #trac |
| [12:58:41] |
* |
agile has quit IRC |
| [13:00:19] |
* |
agile has joined #trac |
| [13:00:37] |
* |
cmlenz has joined #trac |
| [13:01:00] |
<coderanger> |
tuxipuxi: wipe out the cache and then resync? |
| [13:03:21] |
<tuxipuxi> |
coderanger: how? (wipe cache) |
| [13:03:50] |
<coderanger> |
node_change table I think |
| [13:03:56] |
<coderanger> |
delete from node_change; |
| [13:04:19] |
<coderanger> |
probably should clear the revision table too |
| [13:05:23] |
<tuxipuxi> |
coderanger: cleared both tables and resynced, problem persits |
| [13:05:41] |
<coderanger> |
What is the specific problem? |
| [13:07:03] |
<tuxipuxi> |
oh damn, the problem is the stupidity of the guy who initially asked this question. he commited to the wrong/old repository, it's not trac's fault |
| [13:07:07] |
<tuxipuxi> |
thanks coderanger :) |
| [13:07:16] |
<coderanger> |
heh, thatl do it |
| [13:33:45] |
* |
cookin_ has joined #trac |
| [13:42:19] |
* |
agile has quit IRC |
| [13:47:51] |
* |
jborg has quit IRC |
| [13:48:22] |
* |
stevegt has quit IRC |
| [13:51:48] |
* |
jrydberg_ has quit IRC |
| [13:52:49] |
* |
MasterC has quit IRC |
| [13:54:49] |
* |
stevegt has joined #trac |
| [14:10:15] |
* |
s0undt3ch_ has joined #trac |
| [14:10:31] |
* |
_dmax has joined #trac |
| [14:11:11] |
* |
s0undt3ch has quit IRC |
| [14:11:14] |
* |
s0undt3ch_ is now known as s0undt3ch |
| [14:20:55] |
* |
dmax has quit IRC |
| [14:20:59] |
* |
_dmax is now known as dmax |
| [14:30:14] |
<tharvey> |
I'm having trouble using trac with apache when setting up a local and a virtual server on different ports. My apache config and the apache error log showing the issue is here: http://pastebin.ca/130028 |
| [14:32:48] |
<tharvey> |
not sure I understand the cookie error |
| [14:36:47] |
<coderanger> |
tharvey: Clear all cookies that would be sent to Trac |
| [14:38:28] |
<coderanger> |
Sounds like another app on the same host is setting an invalid cookie |
| [14:43:32] |
<tharvey> |
another app... hmm... perhaps some of my other apache configs are colliding with this one, although this is the only one that specifies a name of 'trac' |
| [14:44:32] |
<coderanger> |
tharvey: The way cookies work makes it easy to make things work pporly |
| [14:45:37] |
<tharvey> |
I'm also trying to figure out how to run multiple trac projects on one server without having to go and modify apache's config each time. Is there anyway to do that? |
| [14:48:18] |
<tharvey> |
so basically trac is reading the cookie and its choking because its not the cookie trac created? |
| [14:48:26] |
<coderanger> |
The TracEnvParentDir directive |
| [14:49:01] |
<coderanger> |
tharvey: Probably, Trac uses the Python cookie library, which dies on almost any deviation from the RFC |
| [14:50:13] |
<coderanger> |
There is an open ticket about it |
| [14:53:22] |
<tharvey> |
coderanger, cool... I wasn't aware of that directive, that looks like what I'm looking for. Of course, if I want different authentication with each project I'll need to manually tweak apache config. I have setup 3 trac projects for contracts I work on from different employers, so for local access I want simple access to all, but for remote access I want each one to have its own authentication |
| [14:54:00] |
<coderanger> |
tharvey: You can use AccountManager and form-based login to administer it from within Trac |
| [14:54:21] |
<tharvey> |
so AccountManager can also deal with multiple trac projects? |
| [14:55:03] |
<coderanger> |
You can enable it globally and then set a different password file for each Trac |
| [14:55:45] |
<coderanger> |
#2256 is the ticket about cookie issues |
| [14:55:51] |
<tharvey> |
cool... I'll look at that! thanks! |
| [14:59:52] |
* |
cookin_ is now known as jrydberg |
| [15:11:38] |
* |
Blackhex has quit IRC |
| [15:31:34] |
<exarkun> |
When I try to shut down my trac server, it always hangs indefinitely in an svn call, waiting on a lock. |
| [15:31:37] |
<exarkun> |
Every single time. |
| [15:49:56] |
* |
cmlenz has quit IRC |
| [15:50:29] |
<tharvey> |
so if I use AccountManager then I can't given anyone TRAC_ADMIN perms without them being able to muck with AccountManager correct? |
| [15:50:54] |
<coderanger> |
Correct |
| [15:51:17] |
<coderanger> |
trac_admin is supposed to be for admins, so thats normal ;-) |
| [15:51:46] |
<tharvey> |
right, but that would eliminate the ability to host multiple projects each with their own admin but without access to each other |
| [15:53:04] |
<coderanger> |
Well each Trac has its own permissions table |
| [15:53:39] |
<tharvey> |
are all mods you can make via WebAdmin in the project config vs global config? |
| [15:53:48] |
<coderanger> |
Yes |
| [15:53:55] |
* |
stevegt has quit IRC |
| [15:54:05] |
<coderanger> |
There isn't (yet) a good interface to the site config |
| [15:58:46] |
* |
xjjk-T42p has joined #trac |
| [16:01:17] |
* |
mjg2 has joined #trac |
| [16:08:26] |
* |
xjjk has quit IRC |
| [16:10:41] |
<tharvey> |
does 'trac-admin path upgrade' backup your database? I see a couple of .bak files in project/db |
| [16:10:51] |
<coderanger> |
Yep |
| [16:10:57] |
<alect> |
morning |
| [16:11:13] |
<coderanger> |
alect: Alo |
| [16:11:31] |
<tharvey> |
cool... ok, so if I'm archiving the entire project dir as a backup I can wipe the database .bak's... only an upgrade will create them then? |
| [16:14:41] |
<coderanger> |
yes |
| [16:17:39] |
<coderanger> |
alect: So hows Google AU going? |
| [16:19:29] |
<alect> |
pretty awesome :) |
| [16:19:46] |
<alect> |
i've had to start riding to work though, to work off the extra kg's i'm putting on |
| [16:20:15] |
<coderanger> |
heh |
| [16:20:44] |
<alect> |
how about you? how's school going? |
| [16:20:55] |
<coderanger> |
classes start in 2 weeks |
| [16:21:01] |
<alect> |
sweet holidays |
| [16:21:10] |
<alect> |
i forgot about your crazy mid-year holidays |
| [16:21:24] |
<coderanger> |
heh, assuming work doesn't implode my soul too much |
| [16:22:17] |
<tharvey> |
So is AccountManager simply a frontend to creating/editing an htaccess or htdigest file? You still need to setup your server to use that access mechanism right? |
| [16:22:29] |
<coderanger> |
tharvey: You could do that |
| [16:22:39] |
<coderanger> |
tharvey: Ot you can use the form-based login |
| [16:27:37] |
<tharvey> |
I was expecting the form-based login but I dn't see it... I'm not really clear how the AccountManager works - I installed it, enabled it, and created a test user, but then how am I able to do all this when I haven't logged in 'via' the AccountManager? |
| [16:28:16] |
<coderanger> |
Make sure you disable the builtin LoginModule |
| [16:28:31] |
<tharvey> |
ahh... didn't see that |
| [16:30:28] |
<tharvey> |
disabled the trac LoginModule but no diff |
| [16:31:53] |
<coderanger> |
What do you have in [components]? |
| [16:41:00] |
<tharvey> |
trac.web.auth.loginmodule = disabled |
| [16:41:08] |
<coderanger> |
LoginModule |
| [16:41:24] |
<tharvey> |
and acct_mgr.web_ui.loginmodule = enabled |
| [16:41:38] |
<coderanger> |
Capitalization counts |
| [16:41:51] |
<tharvey> |
I didn't edit components by hand, I used WebAdmin |
| [16:41:55] |
<coderanger> |
just put acct_mgr.* = enabled |
| [16:42:16] |
<tharvey> |
it won't hurt to have both the htpasswdstore and htdigeststore enabled? |
| [16:42:29] |
<coderanger> |
Nope |
| [16:42:45] |
<coderanger> |
You choose which to use in the config file |
| [16:43:05] |
<tharvey> |
ah, right, and I did that |
| [16:43:26] |
<coderanger> |
Anything in the log? |
| [16:45:02] |
<tharvey> |
not regarding auth/login - I'm not convinced the Trac LoginModule is disabled, what is the component name? disabling it via WebAdmin put a 'trac.web.auth.loginmodule = disabled' in the components |
| [16:45:18] |
<coderanger> |
Try fixing the case |
| [16:45:47] |
<tharvey> |
I tried it both ways... wait, I probably need to restart apache? |
| [16:45:54] |
<coderanger> |
Yes |
| [16:46:22] |
<coderanger> |
Or clear whatever persistant interpreter you are using |
| [16:46:28] |
<coderanger> |
mod_python does it on a HUP |
| [16:46:44] |
<tharvey> |
restarting httpd will do that though right? |
| [16:47:06] |
<coderanger> |
yes |
| [16:47:17] |
<coderanger> |
That just takes longer than HUPing it ;-) |
| [16:47:47] |
<tharvey> |
defineately, what process do I send a SIGHUP to? |
| [16:48:02] |
<coderanger> |
all apache procesess |
| [16:48:11] |
<coderanger> |
killall -HUP apache2 on my system |
| [16:48:34] |
<tharvey> |
ah... I'll just stick with 'service httpd restart' |
| [16:50:18] |
<tharvey> |
hmm still nothing. I'm assuming requesting the project path should prompt me with a login form right? I have 'not' removed the htpasswd auth from apache (yet) - is that causing a conflict? |
| [16:50:28] |
<coderanger> |
Yes |
| [16:50:39] |
<coderanger> |
You need to disable HTTP auth to get the form |
| [16:52:01] |
<tharvey> |
dang... once again all this info is in http://trac-hacks.org/wiki/AccountManagerPlugin - I'm just not reading it carefully enough - sorry :( |
| [16:56:41] |
<tharvey> |
ok the components seem to be case-insensitive: it works with 'loginmodule' or 'LoginModule' |
| [16:57:03] |
<coderanger> |
odd, it shouldnt |
| [16:57:06] |
<tharvey> |
what I notice however is that no login is 'required'. I assume that you default to the 'anonymous' account with its perms |
| [16:57:10] |
<coderanger> |
Python is case-sensitive |
| [16:57:20] |
<coderanger> |
tharvey: Yes |
| [16:57:40] |
<tharvey> |
so if you wanted to completely lock people out of the project could you simply remove the anonymous user or all the perms for anonymous? |
| [16:57:53] |
<coderanger> |
The second one |
| [16:58:57] |
<tharvey> |
so one thing that confuses me a little is that the permssions can be set for users who don't necessarily exist in the htpasswd/htdigest file, anonymous for example |
| [16:59:49] |
<coderanger> |
They are "groups" |
| [16:59:51] |
<tharvey> |
so when you first enable the AccountManager, the passwd file is empty, so how would you get in with admin privileges to create a user? |
| [16:59:59] |
<coderanger> |
That you are a member of based on certain conditions |
| [17:01:20] |
<tharvey> |
I guess you use the Register component, create an account, then via trac-admin cmdline give yourself perms? |
| [17:01:40] |
<coderanger> |
You could either do it from the CLI, give anonymous TRAC_ADMIN, or bootstrap from HTTP auth |
| [17:03:50] |
<tharvey> |
in fact AccountManager won't let you create a user that youve' already created with trac-admin, so for example, my htdigest has 'only' user:test, and I cannot create user 'tharvey' (via Register) because it says it already exists (via trac-admin). So like you say, I guess I would have to temporarily give test or anonymous admin perms to get in |
| [17:04:22] |
<coderanger> |
You can't create users with trac-admin |
| [17:04:39] |
<coderanger> |
You can assign perms, but thats unrelated |
| [17:05:17] |
<tharvey> |
hmmm... why would Register say 'tharvey' already exists then? Its not in the htdigest file |
| [17:05:39] |
<coderanger> |
sounds like a bug |
| [17:06:36] |
<tharvey> |
yet 'trac-admin project permission list' shows anonymous, test, and tharvey - and I previously did a 'trac-admin project permission add tharvey TRAC-ADMIN' which I assumed both created the notion of the user tharvey and assigned perms |
| [17:06:47] |
<coderanger> |
Nope |
| [17:06:54] |
<coderanger> |
Trac alone has no concept of users |
| [17:07:01] |
<coderanger> |
It just gets handed a name from HTTP auth |
| [17:08:16] |
<tharvey> |
so the 'trac-admin project permssions list' is listing 'groups' that have been created and assigned perms? |
| [17:08:28] |
<coderanger> |
kind of |
| [17:08:56] |
<coderanger> |
it takes that string HTTP auth hands it an checks the permission table for any perms assigned using that name |
| [17:09:18] |
<coderanger> |
So just because a "user" is in the permission table doesn't mean there is a login by that name |
| [17:09:57] |
<tharvey> |
now that I've given 'test' TRAC_ADMIN perms, I go to WebAdmin, Accounts and try to create 'tharvey' and it gives the error 'Another account with that name already exists.' (again the htdigest file 'only' has 'test') so AccountManager certainly thinks of tharvey as a 'user' |
| [17:10:49] |
<coderanger> |
What version of Trac are you using? |
| [17:11:20] |
<tharvey> |
0.10-dev |
| [17:13:31] |
<coderanger> |
How did you add test? |
| [17:14:02] |
<tharvey> |
via account manager, then I used trac-admin to give test TRAC_ADMIN |
| [17:14:47] |
* |
tuxipuxi has quit IRC |
| [17:15:01] |
<tharvey> |
I can't figure out how to get the user 'tharvey' added to AccountManager. I've tried manually putting it in the htdigest by coyping the test user and changing the name, which made it show in account manager yet I still couldn't login |
| [17:15:38] |
<tharvey> |
it seems that there is some conflicts between however trac stores users/perms and how AccountManager does - how would I access the sqlite tables to manually delete the user tharvey? |
| [17:16:37] |
<coderanger> |
I can assure thats not the problem |
| [17:16:37] |
<tharvey> |
ah, never mind, I was able to delete it via TracAdmin->Permissions |
| [17:17:19] |
<tharvey> |
so it would seem if your using AccountManager you want to create the user via AccountManager before trying to do a 'trac-admin project permissions add' for that user |
| [17:18:01] |
<coderanger> |
The two systems are unrelated |
| [17:18:32] |
<tharvey> |
right, which is the issue I think - AccountManager won't let you add a user if it exists in the permission table already, which means you can't login as that user |
| [17:18:35] |
<coderanger> |
Try making a digest file using htdigest |
| [17:18:46] |
<coderanger> |
tharvey: That isn't the case, I'm looking at the code right now |
| [17:19:22] |
<tharvey> |
well I was able to resovle the isuse by removing tharvey via WebAdmin->Permissions. After that AccountManager let me create user tharvey |
| [17:20:01] |
<coderanger> |
http://trac-hacks.org/browser/accountmanagerplugin/trunk/acct_mgr/htfile.py#L209 |
| [17:20:09] |
<coderanger> |
Thats the function that ends up getting called |
| [17:21:33] |
<tharvey> |
all I know is that AccountManager would not allow me to create tharvey until I removed tharvey from the permissions (gave me a 'user already exists' error) |
| [17:21:52] |
<coderanger> |
I would file a bug on trac-hacks |
| [17:22:00] |
<tharvey> |
ok |
| [17:23:29] |
<tharvey> |
so I did remove all perms for anonymous but it still allows you access to the 'Settings' page and allows you to register an account - so it would appear AccountManager doesn't offer a way to 'lock out' the project |
| [17:24:43] |
<coderanger> |
what do you mean by "lock out" |
| [17:24:56] |
<coderanger> |
Ahh, disable publig registration? |
| [17:25:08] |
<coderanger> |
Disable the RegistrationMoule |
| [17:26:07] |
<tharvey> |
ya, that makes sense. I'm just trying to assess if AccountManager offers full authentication, which is what I mean by locking out all access to a project. |
| [17:26:44] |
<coderanger> |
It provides no more or less that the normal LoginModule |
| [17:27:02] |
<coderanger> |
permission remove anonymous * |
| [17:27:13] |
<coderanger> |
Any page they try to access will show an error |
| [17:28:47] |
<tharvey> |
accept for settings and about |
| [17:29:10] |
<coderanger> |
Which don't show anything about the project anyway |
| [17:30:46] |
<tharvey> |
true, but I'm not sure what the 'settings' page is all about. It allows you to specify a session key... is this like modifying the cookie? |
| [17:31:16] |
<coderanger> |
Yes, its a (bad) by product of the way Trac stores user data |
| [17:31:51] |
<coderanger> |
You can set a vanity session key if you need to access the same Trac in multiple places, but don't have a login |
| [17:33:35] |
<tharvey> |
interesting concept... so that's how you can know who made changes (if they want to be known) without requiring accounts? |
| [17:34:46] |
<coderanger> |
No, in edits it just ends up as anonymous |
| [17:35:12] |
<coderanger> |
Its not terribly well designed in retrospect |
| [17:35:22] |
<tharvey> |
it should probably be assigned a permission in trac so that it can be removed then? |
| [17:36:31] |
<coderanger> |
Why? |
| [17:36:56] |
<coderanger> |
It doesn't give you any data or let you do anything to the Trac |
| [17:37:15] |
<coderanger> |
You just get a different string in your trac_session cookie |
| [17:37:19] |
<tharvey> |
then IMHO it shouldn't be there :) |
| [17:37:56] |
<tharvey> |
I notice 'Tags' is still present if not logged in (and anonymous perms are removed as well) although it doesn't appear to function - I assume this is to do with the TracTagsPlugin |
| [17:37:57] |
<coderanger> |
Its a non-entity security wise, not worth adding complexity |
| [17:38:25] |
<coderanger> |
If you need better path-based ACLs, itl have to be enforced by the server |
| [17:40:16] |
<tharvey> |
I realize these are not 'security' issues, they are just things that IMHO shouldn't be present if your not logged in (and have removed anonymous perms) - just thinking outloud |
| [17:40:37] |
<tharvey> |
I haven't found where the 'password reminder' mechanism is in AccountManager yet - do you know? |
| [17:42:00] |
<coderanger> |
You have to enable the AccountModule and setup notifications (the ticket ones) |
| [17:46:52] |
<tharvey> |
ah I see... I haven't explored the notifications feature yet - looks like I've got the component enabled, but I need to fill in the details (manually I assume) in trac.ini |
| [17:47:07] |
<coderanger> |
Yeah, or use IniAdmin |
| [17:47:25] |
<tharvey> |
oooh... yet another cool plugin? - I'll go look for that one |
| [17:47:28] |
<coderanger> |
the reset feature uses the same smtp settings |
| [17:48:04] |
<tharvey> |
so does AccountManager realize that notifications are not setup yet so it doesn't add a link/button to send a reminder? |
| [17:48:13] |
<coderanger> |
Correct |
| [17:49:19] |
<tharvey> |
cool. Man, I'm starting to realize that trac is nothing without track-hacks... there are so many cool extensions there. But then I suppose that was the idea |
| [17:49:26] |
<coderanger> |
Indeed |
| [17:49:51] |
<coderanger> |
The Trac devs can focus on making Trac's small feature base as good as they can |
| [17:50:07] |
<coderanger> |
While the rest of us round out with plugins |
| [17:51:18] |
<tharvey> |
well thanks again for all your help - I've got some new plugins to play with and evaluate now. I'm trying to convert some of the companies I do contract work to use trac... already got them converted to subversion which was a good thing |
