Question

I'm trying to setup access control and user authentication. The server-side authentication works, I need to enter my name/password when trying to acces any page. But TWiki doesn't recognize that I'm logging in, %WIKIUSERNAME% is always TWikiGuest. Clicking the login button in the sidebar just does nothing.

What's a little confusing is that view and viewauth are the exact same script, so it's not clear why it is supposed to make a difference which one is used.

Environment

-- DirkReiners - 26 Aug 2005

Answer

If you answer a question - or have a question you asked answered by someone - please remember to edit the page and set the status to answered. The status is in a drop-down list below the edit box.

That DirkReiners in the description should be the WIKIUSERNAME variable.

-- DirkReiners - 26 Aug 2005

You need to authenticate the viewauth script. If you want to track users for the non-authenticated view script you need to use cookies or enable IP-address based tracking. See TWikiUserAuthentication, Partial Authentication.

-- PeterThoeny - 26 Aug 2005

I'm a little confused about the 'authenticate the viewauth script' part. The whole directory is protected, you need to have a password for everything in there. Just for testing I removed the view script, but that didn't change anything (didn't expect it to).

The URL is http://www.vrac.iastate.edu/cgi-bin/dreiners/twiki/viewauth. I added an account for you with password guest. After logging in the sidebar still says 'login', clicking which doesn't do anything. In the Sandbox is a test topic with a WIKIUSERNAME, which will be TWikiGuest, even though you logged in as PeterThoeny. That's where I'm lost.

Thanks for your quick response!

-- DirkReiners - 26 Aug 2005

The 'authenticate the viewauth script' part is an Apache web server configuration thingy. Please do that in the Apache config file or in the cgi-bin's .htaccess. See TWikiInstallationGuide#Enabling_Authentication_of_Users and consult the Apache docs.

-- PeterThoeny - 27 Aug 2005