Question

Hello all!

I want to set up a twiki project. We are 15 people and I we want to limit the access by a kind of authentification.

I am a bit confused how the authentification really works:

When I have logged in once as a user, clear all the Cookies, then I can continue working without loggin in again. A restart of the browser is necessary to have the login request again. why did the deletion of the cookies have no effect? Does the authentication rely on the IP address? But what info does the browser sent in addition, which is not sent after a restart?

When I want to change the login to a user with more privileges: Does it mean that I have to restart the browser again, or is there another way?

To my installation: I am using Suse Linux 9.2, with apache 2.0.50 and firefox + konqueror. Perl 5.8.5. I have installed it the described standard way, not added more plugins.

Greetings to all twiki users.

Stefan

Environment

-- StefanPichel - 11 Jun 2005

Answer

You probably have IP address memory switched on in TWiki.cfg, so TWiki is remembering your IP address. Basic TWiki doesn't use cookies.

I would recommend looking into SessionPlugin and AuthPagePlugin for more conventional authentication models.

-- CrawfordCurrie - 30 Jun 2005