Apache::AuthCookieNTLM made short work of the former, but the latter is causing me some (albeit cosmetic) grief.

DENYWEBCHANGE = TWikiGuest works with a mod to userToWikiName(), but users get the same oopsaccesschange.tmpl for both access control and "not registered" conditions.

I put together a hack to attach/edit/rename/save/upload to call TWiki::isGuest() to choose between oopsaccesschange.tmpl and a new oopsneedregister.tmpl but there's probably a more graceful way to do this...

Speaking of which, TWiki::isGuest() seems to be broken (at least in a mod_perl env) and perhaps should be something like:

sub isGuest
{
   my( $wikiUser ) = @_;
   $wikiUser =~ s/^$mainWebname.//;
   return ( $wikiUser eq $defaultUserName );
}

-- KenGoldenberg - 09 Apr 2004