Integrating Trac with existing site login form

18 views
Skip to first unread message

Obsidian

unread,
Apr 27, 2009, 6:30:07 AM4/27/09
to Trac Users
Hi,

I'd like to use Trac with an existing site and would like to save
users the trouble of logging into both.

Is there an easy way to have someone automatically registered on Trac
when they register on another site and logged in automatically to Trac
when logged into the other site?

I could write a script to do this but I was wondering if there is a
plugin or anything else that can save me some time?

~Rowan

Olemis Lang

unread,
Apr 27, 2009, 9:08:07 AM4/27/09
to trac-...@googlegroups.com
On Mon, Apr 27, 2009 at 5:30 AM, Obsidian <ro...@wookey.name> wrote:
>
> Hi,
>

Hi ... ;)

> I'd like to use Trac with an existing site and would like to save
> users the trouble of logging into both.
>
> Is there an easy way to have someone automatically registered on Trac
> when they register on another site and logged in automatically to Trac
> when logged into the other site?
>

In fact I've seen so far a couple of them :

- Using CoSign which is employed in WebLion's site
- Using Trac OpenId plgin

> I could write a script to do this

ufff ...

> but I was wondering if there is a
> plugin or anything else that can save me some time?
>

maybe this is the better way ;)

PS: Sorry if I dont include links ... 'm very busy right now :-/

St Google !

--
Regards,

Olemis.

Blog ES: http://simelo-es.blogspot.com/
Blog EN: http://simelo-en.blogspot.com/

Featured article:
Microsoft Magic bugs : ¿Por qué utilizar software libre? -
http://feedproxy.google.com/~r/simelo-es/~3/cXNYovsJJ5s/microsoft-magic-bugs-por-que-utilizar.html

Obsidian

unread,
Apr 28, 2009, 8:27:37 AM4/28/09
to Trac Users
Hi,

I googled for CoSign and had a brief look at it but it requires
installation which means something else to maintain not really what
I'm after.

OpenID isn't an option either since it allows anyone with an open ID
to log in I want it so only those that are registered on my site can
access.

Is there an RPC for trac I missed somewhere or would it just be easier
to run trac-admin from my site when someone registers and have my site
set the trac cookie?

Regards

Rowan
> Microsoft Magic bugs : ¿Por qué utilizar software libre?  -http://feedproxy.google.com/~r/simelo-es/~3/cXNYovsJJ5s/microsoft-mag...

Olemis Lang

unread,
Apr 28, 2009, 9:03:21 AM4/28/09
to trac-...@googlegroups.com
On Tue, Apr 28, 2009 at 7:27 AM, Obsidian <ro...@wookey.name> wrote:
>
> Hi,
>

Hi once again !

> I googled for CoSign and had a brief look at it but it requires
> installation which means something else to maintain not really what
> I'm after.
>

The fact is the following :

- What you 'r trying to do is known as SSO (link to wikipedia ->)
- Central user registration can be attained by seting up an LDAP dir
(which could be already there if MSAD is around ;)
- However, since the auth process is specific to every service, the login
part is still duplicated, and it is very difficult to have a shared login
unless you are delegating such task to a common service (e.g. CoSign).
However there other (commercial | free) SSO products out there.
- If you'r trying to setup an SSO then, since there are many services,
there's always an extra-overhead. IMHO (very particular & personal
opinion ;) duplicate data is a mess, and it gets worst with time & more
services.
- Yes, you'r righ, CoSign is not as simple as some might expect. I
understand what you'r saying, :-/ but ...
- Reinvent the wheel ? Ufff ...

> OpenID isn't an option either since it allows anyone with an open ID
> to log in I want it so only those that are registered on my site can
> access.
>

Maybe, but you could set up a local OpenId provider (for your
enterprise or whatever) and use white_list & black_list options under
[openid] section in order to reject the undesired providers and allow
only the one(s) you want.

> Is there an RPC for trac I missed somewhere or would it just be easier
> to run trac-admin from my site when someone registers and have my site
> set the trac cookie?
>

For user registration with LDAP, once somebody is registered, all the
services should write user data to the *same* LDAP dir, and therefore
everybody is always up to date. Permissions could be managed using
LDAP groups & the appropriate Trac plugins.

For user login, as I said before it is very, very difficult unless you
have a central service and delegate the login part to it.

But anyway, if you find out another way then I'd like to know ;)

--
Regards,

Olemis.

Featured article:
Microsoft Magic bugs : ¿Por qué utilizar software libre? -

http://feedproxy.google.com/~r/simelo-es/~3/cXNYovsJJ5s/microsoft-magic-bugs-por-que-utilizar.html

Noah Kantrowitz

unread,
Apr 28, 2009, 12:24:10 PM4/28/09
to trac-...@googlegroups.com
Look at implementing IAuthenticator. In there you can check for a
cookie from your other webapp and validate it.

--Noah
Reply all
Reply to author
Forward
0 new messages