Changes between Version 1 and Version 2 of TracStandalone
- Timestamp:
- Jun 30, 2013, 12:48:57 PM (11 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
TracStandalone
v1 v2 93 93 94 94 == Using Authentication == 95 96 Tracd allows you to run Trac without the need for Apache, but you can take advantage of Apache's password tools (htpasswd and htdigest) to easily create a password file in the proper format for tracd to use in authentication. (It is also possible to create the password file without htpasswd or htdigest; see below for alternatives) 95 97 96 98 Tracd provides support for both Basic and Digest authentication. Digest is considered more secure. The examples below use Digest; to use Basic authentication, replace `--auth` with `--basic-auth` in the command line. … … 137 139 138 140 Note: It is necessary (at least with Python 2.6) to install the fcrypt package in order to 139 decode the htpasswd format. Trac source code attempt an `import crypt` first, but there140 is no such package for Python 2.6. 141 decode some htpasswd formats. Trac source code attempt an `import crypt` first, but there 142 is no such package for Python 2.6. Only `SHA-1` passwords (since Trac 1.0) work without this module. 141 143 142 144 To create a .htpasswd file use Apache's `htpasswd` command (see [#GeneratingPasswordsWithoutApache below] for a method to create these files without using Apache): … … 164 166 If you have Apache available, you can use the htdigest command to generate the password file. Type 'htdigest' to get some usage instructions, or read [http://httpd.apache.org/docs/2.0/programs/htdigest.html this page] from the Apache manual to get precise instructions. You'll be prompted for a password to enter for each user that you create. For the name of the password file, you can use whatever you like, but if you use something like `users.htdigest` it will remind you what the file contains. As a suggestion, put it in your <projectname>/conf folder along with the [TracIni trac.ini] file. 165 167 166 Note that you can start tracd without the --authargument, but if you click on the ''Login'' link you will get an error.168 Note that you can start tracd without the `--auth` argument, but if you click on the ''Login'' link you will get an error. 167 169 168 170 === Generating Passwords Without Apache === 169 171 170 Basic Authorization can be accomplished via this [http:// www.4webhelp.net/us/password.php online HTTP Password generator]. Copy the generated password-hash line to the .htpasswd file on your system.172 Basic Authorization can be accomplished via this [http://aspirine.org/htpasswd_en.html online HTTP Password generator] which also supports `SHA-1`. Copy the generated password-hash line to the .htpasswd file on your system. Note that Windows Python lacks the "crypt" module that is the default hash type for htpasswd ; Windows Python can grok MD5 password hashes just fine and you should use MD5. 171 173 172 174 You can use this simple Python script to generate a '''digest''' password file: … … 214 216 It is possible to use `md5sum` utility to generate digest-password file: 215 217 {{{ 216 $ printf "${user}:trac:${password}" | md5sum - >>user.htdigest 217 }}} 218 and manually delete " -" from the end and add "${user}:trac:" to the start of line from 'to-file'. 218 user= 219 realm= 220 password= 221 path_to_file= 222 echo ${user}:${realm}:$(printf "${user}:${realm}:${password}" | md5sum - | sed -e 's/\s\+-//') > ${path_to_file} 223 }}} 219 224 220 225 == Reference == … … 234 239 -b HOSTNAME, --hostname=HOSTNAME 235 240 the host name or IP address to bind to 236 --protocol=PROTOCOL http|scgi|ajp 241 --protocol=PROTOCOL http|scgi|ajp|fcgi 237 242 -q, --unquote unquote PATH_INFO (may be needed when using ajp) 238 --http10 use HTTP/1.0 protocol version (default)239 --http11 use HTTP/1.1 protocol version instead of HTTP/1.0243 --http10 use HTTP/1.0 protocol version instead of HTTP/1.1 244 --http11 use HTTP/1.1 protocol version (default) 240 245 -e PARENTDIR, --env-parent-dir=PARENTDIR 241 246 parent directory of the project environments … … 244 249 -r, --auto-reload restart automatically when sources are modified 245 250 -s, --single-env only serve a single project without the project list 246 }}} 251 -d, --daemonize run in the background as a daemon 252 --pidfile=PIDFILE when daemonizing, file to which to write pid 253 --umask=MASK when daemonizing, file mode creation mask to use, in 254 octal notation (default 022) 255 --group=GROUP the group to run as 256 --user=USER the user to run as 257 }}} 258 259 Use the -d option so that tracd doesn't hang if you close the terminal window where tracd was started. 247 260 248 261 == Tips == … … 326 339 }}} 327 340 341 Note that if you want to install this plugin for all projects, you have to put it in your [TracPlugins#Plugindiscovery global plugins_dir] and enable it in your global trac.ini. 342 343 Global config (e.g. `/srv/trac/conf/trac.ini`): 344 {{{ 345 [components] 346 remote-user-auth.* = enabled 347 [inherit] 348 plugins_dir = /srv/trac/plugins 349 [trac] 350 obey_remote_user_header = true 351 }}} 352 353 Environment config (e.g. `/srv/trac/envs/myenv`): 354 {{{ 355 [inherit] 356 file = /srv/trac/conf/trac.ini 357 }}} 358 328 359 === Serving a different base path than / === 329 360 Tracd supports serving projects with different base urls than /<project>. The parameter name to change this is