Tags:
create new tag
view all tags

Question

What all should I configure (and how) to get "Login" prompt by TWiki?

I installed the Twiki as per the documentation. I always seem to be Guest, though I registered myself as "AtulSowani". I never get the "Login" prompt when I try to edit and save any page - it always gets saved! How can I enable the authentication?

Environment

TWiki version: TWikiRelease02Sep2004
TWiki plugins: DefaultPlugin, EmptyPlugin, InterwikiPlugin
Server OS: Slackware Linux 9.1, kernel 2.4.22
Web server: Apache 1.3
Perl version: perl5 (revision 5.0 version 8 subversion 0)
Client OS: Slackware Linux 9.1
Web Browser: Mozilla Firebird 0.7
Categories: Htaccess, Authentication

-- AtulSowani - 03 Nov 2005

Answer

ALERT! If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

It looks like the edit script is not authenticated. This can be a problem with the .htaccess file in your twiki/bin directory or with the Apache configuration file that disables .htaccess files.

The relevant documentation is at TWikiInstallationGuide

-- PeterThoeny - 04 Nov 2005

I followed exactly all the instructions given in TwikiInstallationGuide but the authentication is still not working.

Another piece of information is: If I try to access "templates" and "data" directories using my apache server (as http://myserver.com/twiki/bin/view/templates I do get pop-up window asking me username and password. But when I try to edit any twiki page, it just allows me to do it without any authentication checks.

-- AtulSowani - 18 Nov 2005

This definitely sounds like an Apache roblem rather than a pure TWiki problem.

You should not be able to access templates/ or date/, the .htaccess shoud prevent this. See the top level file subdir-htaccess.txt for addressing that problem.

In addition, any topic can be edited by an unauthenticated user unless its access permission is set to be restrictive. See discussion of ALLOWTOPICCHANGE.

Dakar has a clearer "login" and "logout" mechanism than Cairo because its session management is built into the core. But the above notes on Apache and ALLOWTOPICCHANGE still apply. Dakar can be configured to demand authentication if an unauthenticated user tries to access a restricted topic.

-- AntonAylward - 18 Nov 2005

Edit | Attach | Watch | Print version | History: r6 < r5 < r4 < r3 < r2 | Backlinks | Raw View | Raw edit | More topic actions
Topic revision: r6 - 2006-01-02 - PeterThoeny
 
  • Learn about TWiki  
  • Download TWiki
This site is powered by the TWiki collaboration platform Powered by Perl Hosted by OICcam.com Ideas, requests, problems regarding TWiki? Send feedback. Ask community in the support forum.
Copyright © 1999-2026 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.