[mod_python] mod_python on / and authentication on /login (using trac)

BTW, it would help if you just sent the bits of the configuration you
are using. That Trac ticket shows using file based basic
authentication, but your posts on Trac users group show you trying to
use LDAP backed basic authentication. Have you tried it with file
based basic authentication instead of LDAP to eliminate that LDAP
isn't the problem, especially since you are setting:

  authzldapauthoritative Off

which to me looks a bit wrong as it suggests that if LDAP has a
problem that it will not error and instead will allow authentication
to fall through to latter authentication handlers but because you
don't have any, it would possibly just pass straight through
unauthenticated on passwd.

Graham

On 22/03/07, Graham Dumpleton <graham.dumpleton at gmail.com> wrote:
> Do you have any Alias, ScriptAlias or Location directives (normal or
> match type) defined outside of the VirtualHost containers? Do you have
> any other Auth type or mod_python directives outside of the
> VirtualHost container?
>
> If you are only running one VirtualHost, can you see what happens if
> you put the definitions outside of the VirtualHost container.
>
> On 22/03/07, Axel Thimm <Axel.Thimm at atrpms.net> wrote:
> > Hi,
> >
> > On Thu, Mar 22, 2007 at 08:38:21AM +1100, Graham Dumpleton wrote:
> > > On 22/03/07, Axel Thimm <Axel.Thimm at atrpms.net> wrote:
> > > >Hi,
> > > >
> > > >I'm fighting against a strange issue with a setup that involves having
> > > >mod_python on Location "/" and authenticating only on certain URLs
> > > >like /login. This is for example the typical setup for a trac
> > > >dedicated site, see
> > > >
> > > >http://trac.edgewall.org/ticket/3821
> > > >
> > > >for the background. It doesn't happen if mod_python/trac is hooked on
> > > >"/trac" and the authentication on "/trac/login".
> > > >
> > > >The combinations that are known to exhibit or not this error are
> > > >
> > > >httpd modpython trac     works
> > > >2.2.3 3.6.20    0.10     no
> > > >2.2.2 3.3.1     0.10.3   no
> > > >2.2.3 3.2.8     0.10.3.1 yes
> > > >2.2.2 3.2.10    0.10.3   no
> > > >
> > > >Any ideas what's going wrong or how I could debug this further?
> > >
> > > I'm not surprised it doesn't work with mod_python 3.6.20 as no such
> > > version exists.
> > >
> > > Have you tried setting your DocumentRoot to somewhere outside of your
> > > Trac instance. I'd suggest doing that what would be a bad idea to
> > > start with as the presence of directories/files in there can sometimes
> > > interfere with Apache's matching algorithms for locations. Set it
> > > instead to some empty directory elsewhere if you aren't going to serve
> > > any static files out of document root.
> >
> > Yes, that's how the setup already was. It was pointing to a folder
> > with only favicon.ico inside.
> >
> > > Also, have you tried changing the order of the two Location
> > > directives, ie., those for '/' and '/login' so the later is actually
> > > first. It shouldn't in practice matter, but some Apache configuration
> > > entries are order dependent.
> >
> > Yes, I tried that, I even replicated the /login section before and
> > after the / section. The only way I can get it to work is to move the
> > trac instance further into the URL space, e.g. /trac and /trac/login
> > instead of / and /login.
> > --
> > Axel.Thimm at ATrpms.net
> >
> >
>