MoinMoin: TomYJWu

Tom Wu

Newly attached to moinmoin and will contribute some thing during adapting moinmoin as intranet server.

Thanks to the moinmoin team and community.

Email: <tomyjwu AT gmail DOT com>

New Experience on 1.6beta2

See MoinMoinBugs/1.6_MacOSX_CreateNewPage_WrongName.

• Thanks a lot for the moinmoin team and community support.

Tricks and Tips

• To get the SSL User Certificate auto login and auto create works, Apache need to pass the extracted common name info from the certificate to the CGI (i.e.moinmoin engine). Here is how to config the apache2 to do it
  • Find your apache2 site conf file. Take ubuntu server as an examle, the file would be in /etc/apache2/sites-available/yourwiki

  • edit the site conf file and add SSLOptions +StdEnvVars. Here is a code snap

       <Location "/yourwiki">
            #SSLOptions           +FakeBasicAuth +StdEnvVars +ExportCertData
            SSLOptions           +StdEnvVars
            SSLRequireSSL
       </Location>

• A similar issue about SSL User name passing regards to SVN.
  • SVN AuthzSVNAccessFile directive could user name from SSL client certificate, if setup correctly.
  • SSLUserName Env_Var_Name is the directive to use

  • Sample location block, reference from http://momtchil.momtchev.com/technical/apache+svn.php

            <Location /svn>
                    Order allow,deny
                    Allow from all
                    SSLRequireSSL                   # Add if you want to force everyone to use https
                    SSLVerifyClient optional        # Or set to required if you don't want anonymous access
                    SSLUserName SSL_CLIENT_S_DN_CN  # This is the field with the username in the certificate
    
                    DAV svn                         # Activate SVN
                    SVNParentPath /var/local/www/svn/repository # The SVN Root
    
                    AuthzSVNAccessFile /etc/subversion/public-svn-authzfile # All authorization happens in this file
            </Location>

CategoryHomepage