TWikiUserAuthentication (3 vs. 8)

Welcome, Registration, and other StartingPoints; TWiki history & Wiki style; All the docs...	View r8 > r7 > r6 > r5 > r4 > r3 ...
Main AmLegalHist CompPrivConst EngLegalHist LawContempSoc LawNetSoc TWiki

TWikiUserAuthentication 8 - 06 Sep 2001 - Main.MikeMannix

Line: 1 to 1

TWiki User Authentication

TWiki User Authentication

Changed:

<
< Controlling TWiki site access and logging authorized user activity

>
> TWiki site access control and user activity tracking

Overview

Line: 14 to 14

Authentication Options

No special installation steps need to be performed if the server is already authenticated. If not, you have three remaining options to controlling user access:

Changed:

<
<

Forget about authentication. All changes are registered to TWikiGuest user, so you can't tell who made changes. Your site is completely open and public - anyone can browse and edit freely, in classic Wiki mode.
Use Basic Authentication for the edit and attach scripts. This uses .htaccess and generates the familiar grey log-in window. The TWiki Installation Guide has step-by-step instructions.
Use SSL to authenticate and secure the whole server.

>
>

Forget about authentication. All changes are registered to TWikiGuest user, so you can't tell who made changes. Your site is completely open and public - anyone can browse and edit freely, in classic Wiki mode.
Use Basic Authentication for the edit and attach scripts. This uses .htaccess and generates the familiar grey log-in window. The TWiki Installation Guide has step-by-step instructions.
Use SSL to authenticate and secure the whole server.

Tracking by IP Address

Line: 43 to 43

This points WikiUser to the TWiki.Main web, where user registration pages are stored, no matter which web it's entered in. Without the web prefix, the name appears as a NewTopic? everywhere but in the Main web.

Added:

>
>

Changing Passwords

Added:

>
>

Change and reset passwords using forms on regular pages. Use topic-level TWikiAccessControl to restrict use as required.

The ChangePassword form, TWiki/ChangePassword:

Forgotten your password? Use ResetPassword instead.

After submitting this form your password will be changed.

Fields marked `**` are required
Your LoginName:	`**`
Current password:	`**`
New password:	`**`
Retype new password:	`**`

<-- /twikiFormStep-->

<-- /twikiFormSteps-->

If you have any questions, please contact webmaster@new.law.columbia.edu.
TWikiUsers has a list of other TWiki users.

Added:

>
>

Added:

>
>

The ResetPassword form TWiki/ResetPassword:

Remember your password? Use ChangePassword instead. Otherwise, use this form to get a new one e-mailed to you.

After submitting this form, you will receive an e-mail with your new, system-generated password, and a link to a page where you can change it.

you must have at least one valid registered e-mail to be able to reset your password. If none of your registered e-mail addresses is valid, and you have forgotten your password, contact webmaster@new.law.columbia.edu.

Fields marked `**` are required
Your LoginName:	`**`

<-- /twikiFormStep-->

<-- /twikiFormStep-->

<-- /twikiFormSteps-->

TWikiUsers has a list of other TWiki users.
If you have any questions, please contact webmaster@new.law.columbia.edu.

Added:

>
>

-- PeterThoeny - 16 Mar 2001
-- MikeMannix? - 29 Aug 2001

TWikiUserAuthentication 7 - 04 Sep 2001 - Main.MikeMannix

Line: 1 to 1

TWiki User Authentication

TWiki User Authentication

Line: 45 to 45

Changing Passwords

Changed:

<
<

<-- template: messages.nat.tmpl -->

Warning: Can't find topic TWiki.ChangingPasswords

>
>

Forgotten your password? Use ResetPassword instead.

After submitting this form your password will be changed.

Fields marked `**` are required
Your LoginName:	`**`
Current password:	`**`
New password:	`**`
Retype new password:	`**`

<-- /twikiFormStep-->

<-- /twikiFormSteps-->

If you have any questions, please contact webmaster@new.law.columbia.edu.
TWikiUsers has a list of other TWiki users.

Remember your password? Use ChangePassword instead. Otherwise, use this form to get a new one e-mailed to you.

After submitting this form, you will receive an e-mail with your new, system-generated password, and a link to a page where you can change it.

Fields marked `**` are required
Your LoginName:	`**`

<-- /twikiFormStep-->

<-- /twikiFormStep-->

<-- /twikiFormSteps-->

TWikiUsers has a list of other TWiki users.
If you have any questions, please contact webmaster@new.law.columbia.edu.

-- PeterThoeny - 16 Mar 2001
-- MikeMannix? - 29 Aug 2001

TWikiUserAuthentication 6 - 03 Sep 2001 - Main.MikeMannix

Line: 1 to 1
	TWiki User Authentication TWiki User Authentication
Line: 43 to 43
	This points `WikiUser` to the TWiki.Main web, where user registration pages are stored, no matter which web it's entered in. Without the web prefix, the name appears as a NewTopic? everywhere but in the Main web.
Added:
> >	Changing Passwords <-- template: messages.nat.tmpl --> Warning: Can't find topic TWiki.ChangingPasswords
	-- PeterThoeny - 16 Mar 2001 -- MikeMannix? - 29 Aug 2001

 TWikiUserAuthentication 5 - 02 Sep 2001 - Main.MikeMannix
 Line: 1 to 1
   
  TWiki User Authentication
 


 TWiki User Authentication 
 Changed: 
<
< TWiki does not authenticate users internally, it depends on the REMOTE_USER environment variable. This variable is set when you enable basic authentication or authentication via SSL (https protocol).
>
> Controlling TWiki site access and logging authorized user activity

 Overview 

TWiki does not authenticate users internally, it depends on the REMOTE_USER environment variable. This variable is set when you enable Basic Authentication (.htaccess) or SSL "secure server" authentication (https protocol).
  TWiki uses visitor identification to keep track of who made changes to topics at what time and to manage a wide range of personal site settings. This gives a complete audit trail of changes and activity.

 Authentication Options 

No special installation steps need to be performed if the server is already authenticated. If not, you have three remaining options to controlling user access:
 Changed: 
<
<  
 Forget about authentication. All changes are registered to TWikiGuest user, so you can't tell who made changes. Your site is completely open and public.
  Use Basic Authentication for the edit and attach scripts. This uses .htaccess and generates the familiar grey log-in window. TWiki Installation Notes has more.
 
>
>  
 Forget about authentication. All changes are registered to TWikiGuest user, so you can't tell who made changes. Your site is completely open and public - anyone can browse and edit freely, in classic Wiki mode.

  Use Basic Authentication for the edit and attach scripts. This uses .htaccess and generates the familiar grey log-in window. The TWiki Installation Guide has step-by-step instructions.

 
   
 Use SSL to authenticate and secure the whole server. 
 

 Tracking by IP Address 

The REMOTE_USER environment variable is only set for the scripts that are under authentication. If, for example, the edit, save and preview scripts are authenticated, but not view, you would get your WikiName in preview for the %WIKIUSERNAME% variable, but view will show TWikiGuest instead of your WikiName.
 Changed: 
<
< There is a way to tell TWiki to remember the user for the scripts that are not authenticated, ex: in case the REMOTE_USER environment variable is not set. TWiki can be configured to remember the IP address/username pair whenever an authentication happens (edit topic, attach file). Once remembered, the non-authenticated scripts like view will show the correct username instead of TWikiGuest. You can enable this by setting the $doRememberRemoteUser flag in TWiki.cfg. TWiki persistently stores the IP address / username pairs in file $remoteUserFilename, which is "$dataDir/remoteusers.txt" by default. Please note that this can fail if the IP address changes due to dynamically assigned IP addresses or proxy servers. 
>
> There is a way to tell TWiki to remember the user for the scripts that are not authenticated, ex: in case the REMOTE_USER environment variable is not set. TWiki can be configured to remember the IP address/username pair whenever an authentication happens (edit topic, attach file). Once remembered, the non-authenticated scripts like view will show the correct username instead of TWikiGuest. You can enable this by setting the $doRememberRemoteUser flag in TWiki.cfg. TWiki persistently stores the IP address/username pairs in the file $remoteUserFilename, which is "$dataDir/remoteusers.txt" by default. Please note that this can fail if the IP address changes due to dynamically assigned IP addresses or proxy servers. 
  Authentication Test: You are TWikiGuest (%WIKIUSERNAME%)
Line: 34 to 38
  TWiki can automatically map an intranet username to a TWiki username, provided that the username pair exists in the TWikiUsers topic. This is also handled automatically when you register.

 Changed: 
<
< NOTE: To correctly enter a WikiName - your own or someone else's - be sure to include the Main web name in front of the Wiki username, followed by a period, and no spaces. Ex:
>
> NOTE: To correctly enter a WikiName - your own or someone else's - be sure to include the Main web name in front of the Wiki username, followed by a period, and no spaces. Ex:
   Main.WikiUsername or %MAINWEB%.WikiUsername 
This points WikiUser to the TWiki.Main web, where user registration pages are stored, no matter which web it's entered in. Without the web prefix, the name appears as a NewTopic?  everywhere but in the Main web.
   TWiki User Authentication
 


 TWiki User Authentication
-<
<
+TWiki does not authenticate users internally, it depends on the REMOTE_USER environment variable. This variable is set when you enable basic authentication or authentication via SSL (https protocol).
->
>
+Controlling TWiki site access and logging authorized user activity

 Overview 

TWiki does not authenticate users internally, it depends on the REMOTE_USER environment variable. This variable is set when you enable Basic Authentication (.htaccess) or SSL "secure server" authentication (https protocol).
 TWiki uses visitor identification to keep track of who made changes to topics at what time and to manage a wide range of personal site settings. This gives a complete audit trail of changes and activity.

 Authentication Options 

No special installation steps need to be performed if the server is already authenticated. If not, you have three remaining options to controlling user access:
-<
<
+ Forget about authentication. All changes are registered to TWikiGuest user, so you can't tell who made changes. Your site is completely open and public.
  Use Basic Authentication for the edit and attach scripts. This uses .htaccess and generates the familiar grey log-in window. TWiki Installation Notes has more.
->
>
+ Forget about authentication. All changes are registered to TWikiGuest user, so you can't tell who made changes. Your site is completely open and public - anyone can browse and edit freely, in classic Wiki mode.

  Use Basic Authentication for the edit and attach scripts. This uses .htaccess and generates the familiar grey log-in window. The TWiki Installation Guide has step-by-step instructions.
  Use SSL to authenticate and secure the whole server. 
 

 Tracking by IP Address 

The REMOTE_USER environment variable is only set for the scripts that are under authentication. If, for example, the edit, save and preview scripts are authenticated, but not view, you would get your WikiName in preview for the %WIKIUSERNAME% variable, but view will show TWikiGuest instead of your WikiName.
-<
<
+There is a way to tell TWiki to remember the user for the scripts that are not authenticated, ex: in case the REMOTE_USER environment variable is not set. TWiki can be configured to remember the IP address/username pair whenever an authentication happens (edit topic, attach file). Once remembered, the non-authenticated scripts like view will show the correct username instead of TWikiGuest. You can enable this by setting the $doRememberRemoteUser flag in TWiki.cfg. TWiki persistently stores the IP address / username pairs in file $remoteUserFilename, which is "$dataDir/remoteusers.txt" by default. Please note that this can fail if the IP address changes due to dynamically assigned IP addresses or proxy servers.
->
>
+There is a way to tell TWiki to remember the user for the scripts that are not authenticated, ex: in case the REMOTE_USER environment variable is not set. TWiki can be configured to remember the IP address/username pair whenever an authentication happens (edit topic, attach file). Once remembered, the non-authenticated scripts like view will show the correct username instead of TWikiGuest. You can enable this by setting the $doRememberRemoteUser flag in TWiki.cfg. TWiki persistently stores the IP address/username pairs in the file $remoteUserFilename, which is "$dataDir/remoteusers.txt" by default. Please note that this can fail if the IP address changes due to dynamically assigned IP addresses or proxy servers.
 Authentication Test: You are TWikiGuest (%WIKIUSERNAME%)
 TWiki can automatically map an intranet username to a TWiki username, provided that the username pair exists in the TWikiUsers topic. This is also handled automatically when you register.
-<
<
+NOTE: To correctly enter a WikiName - your own or someone else's - be sure to include the Main web name in front of the Wiki username, followed by a period, and no spaces. Ex:
->
>
+NOTE: To correctly enter a WikiName - your own or someone else's - be sure to include the Main web name in front of the Wiki username, followed by a period, and no spaces. Ex:
  Main.WikiUsername or %MAINWEB%.WikiUsername 
This points WikiUser to the TWiki.Main web, where user registration pages are stored, no matter which web it's entered in. Without the web prefix, the name appears as a NewTopic?  everywhere but in the Main web.

TWikiUserAuthentication 4 - 01 Sep 2001 - Main.MikeMannix

Line: 1 to 1

Changed:

<
<

TWiki Authentication

>
>

TWiki User Authentication

TWiki does not authenticate users internally, it depends on the REMOTE_USER environment variable. This variable is set when you enable basic authentication or authentication via SSL (https protocol).

Line: 41 to 41

-- PeterThoeny - 16 Mar 2001
-- MikeMannix? - 29 Aug 2001

Added:

>
>

META TOPICMOVED	by="MikeMannix" date="999320061" from="TWiki.TWikiAuthentication" to="TWiki.TWikiUserAuthentication"

Revision 8	r8 - 06 Sep 2001 - 05:56:27 - MikeMannix?
Revision 7	r7 - 04 Sep 2001 - 01:41:41 - MikeMannix?
Revision 6	r6 - 03 Sep 2001 - 07:27:22 - MikeMannix?
Revision 5	r5 - 02 Sep 2001 - 05:32:08 - MikeMannix?
Revision 4	r4 - 01 Sep 2001 - 04:57:33 - MikeMannix?
Revision 3	r3 - 29 Aug 2001 - 15:23:41 - MikeMannix?

This site is powered by the TWiki collaboration platform.
All material on this collaboration platform is the property of the contributing authors.
All material marked as authored by Eben Moglen is available under the license terms CC-BY-SA version 4.

Syndicate this site RSS ATOM