Tags:
create new tag
view all tags

Question

I am running Apache v2.2.4 and have loaded mod_ntlm2. I have successfully configured TWiki to automatically log in the domain user to its WikiUser. This is great; however, if a domain user, who has not registered and therefore does not have a TWikiUser ID created, goes to my twiki site, they are logged in as 'their domain account', not in TWikiUser format and are able to edit pages. Is this normal behavior? If so, how can TWiki be configured to not log them in and force them to register? If not, what am I doing wrong?

Environment

TWiki version: TWikiRelease04x01x02
TWiki plugins: DefaultPlugin, EmptyPlugin, InterwikiPlugin
Server OS: Linux version 2.6.16.21-0.8-bigsmp (geeko@buildhost) (gcc version 4.1.0 (SUSE Linux)) #1 SMP Mon Jul 3 18:25:39 UTC 2006
Web server: Apache 2.2.4
Perl version: 5.8.3
Client OS: MS Windows XP Prof SP2
Web Browser: MS Internet Explorer 6.0
Categories: Security

-- TWikiGuest - 18 Apr 2007

Answer

ALERT! If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

That is normal behaviour. Once a user registers, TWiki is mapping from the login name (e.g. jsmith) to the WikiWord name (e.g. JohnSmith). Unregistered users can edit content, but their changes are tracked as Main.jsmith instead of Main.JohnSmith.

You need some extra logic if you want to prevent unregistered users from contributing, e.g. a plugin that redirects to the registration page if needed. I wrote a plugin that does that, but am waiting for the permission from the client to release it to the public.

-- PeterThoeny - 18 Apr 2007

Peter, thanks for such a quick reply, I see how busy you are. After further research, I did see exactly what you mentioned. I also saw a post from someone a while ago recommending a variable to enable/disable password changes/resets. Has there been any development on that? I think a plugin to force registration plus the ability to hide password administration would be the perfect way to handle single signon scenarios.

Please let me know how I can be notified if any/both of these additions are available. Thanks again!

P.S. - I now am a registered user [JosephMecca]

-- TWikiGuest - 19 Apr 2007

Joseph, I'm currently working in the user code for (we expect 4.2), and I hope to make the registration system and topics a removeable option - it mostly depends on how far i get into the work, and how many problems i encounter on the way smile

So, if you subscribe to the twiki-announce mailing list, you should find out about the next release - and its betas - please give me feed back if the beta does not do what you need!

with respect to magically creating users - that may need a tiny UserMapper, and the NewUserPlugin

-- SvenDowideit - 24 Apr 2007

Thanks Sven, I'll keep my eyes opened for it. :^)

-- JosephMecca - 25 Apr 2007

Change status to:
Edit | Attach | Watch | Print version | History: r7 < r6 < r5 < r4 < r3 | Backlinks | Raw View | Raw edit | More topic actions
Topic revision: r7 - 2007-04-25 - JosephMecca
 
  • Learn about TWiki  
  • Download TWiki
This site is powered by the TWiki collaboration platform Powered by Perl Hosted by OICcam.com Ideas, requests, problems regarding TWiki? Send feedback. Ask community in the support forum.
Copyright © 1999-2026 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.