Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                

Tom Wu

Newly attached to moinmoin and will contribute some thing during adapting moinmoin as intranet server.

Thanks to the moinmoin team and community.

Email: <tomyjwu AT gmail DOT com>

New Experience on 1.6beta2

See MoinMoinBugs/1.6_MacOSX_CreateNewPage_WrongName.

  • Thanks a lot for the moinmoin team and community support.

Tricks and Tips

  • To get the SSL User Certificate auto login and auto create works, Apache need to pass the extracted common name info from the certificate to the CGI (i.e.moinmoin engine). Here is how to config the apache2 to do it
    • Find your apache2 site conf file. Take ubuntu server as an examle, the file would be in /etc/apache2/sites-available/yourwiki
    • edit the site conf file and add SSLOptions +StdEnvVars. Here is a code snap

         <Location "/yourwiki">
              #SSLOptions           +FakeBasicAuth +StdEnvVars +ExportCertData
              SSLOptions           +StdEnvVars
              SSLRequireSSL
         </Location>
  • A similar issue about SSL User name passing regards to SVN.
    • SVN AuthzSVNAccessFile directive could user name from SSL client certificate, if setup correctly.
    • SSLUserName Env_Var_Name is the directive to use
    • Sample location block, reference from http://momtchil.momtchev.com/technical/apache+svn.php

              <Location /svn>
                      Order allow,deny
                      Allow from all
                      SSLRequireSSL                   # Add if you want to force everyone to use https
                      SSLVerifyClient optional        # Or set to required if you don't want anonymous access
                      SSLUserName SSL_CLIENT_S_DN_CN  # This is the field with the username in the certificate
      
                      DAV svn                         # Activate SVN
                      SVNParentPath /var/local/www/svn/repository # The SVN Root
      
                      AuthzSVNAccessFile /etc/subversion/public-svn-authzfile # All authorization happens in this file
              </Location>


CategoryHomepage

MoinMoin: TomYJWu (last edited 2008-04-16 13:08:01 by TomYJWu)