Question

Hello,

Here is the problem:I'am setting up twiki 4.2.1 with LdapContrib authentification.

Authentication is working great, users and groups are loaded from LDAP.

The problem is that I do need to set up a twiki for a Private working group. I created the WEB and I did set up the accessControl like this * Set DENYWEBVIEW = * Set ALLOWWEBVIEW = ComdirGroup * Set DENYWEBCHANGE = * Set ALLOWWEBCHANGE = ComdirGroup * Set DENYWEBRENAME = * Set ALLOWWEBRENAME = ComdirGroup

Thereis is a ldap group (comdir) associated with the users,

VIEW access control is working great for people in the ComdirGroup (and does not for people which are not in this group, which is what we want). A session CGI is showing up asking for user/passwd dans authorisation is given accordingly.

The problem is with CHANGE. When I click on Edit, (even if I do have a session opened) I do have a apache popup that shows up asking for a Twiki user and passwd....which don't work.

ComdirGroup is right now a TwikiGroup containing Comdir group (but it was (not) working neither with Comdir.)

Any help on this one would be really appreciated,

Regards,

Marie-Laure

Environment

-- TWikiGuest - 06 Aug 2008

Answer

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

There was still a bit of mix between application authentification and apache authentification.

With the following lines in the apache config commented out it's OK.

# # require valid-user #

-- TWikiGuest - 07 Aug 2008

sorry, was :

<FilesMatch "(attach|edit|manage|rename|save|upload|mail|logon|rest|.*auth).*">
       require valid-user
</FilesMatch>

-- TWikiGuest - 07 Aug 2008