Mercurial > p > roundup > code
comparison roundup/configuration.py @ 6053:380dec305c28
Add config option 'http_auth_convert_realm_to_lowercase'
| author | Ralf Schlatterbeck <rsc@runtux.com> |
|---|---|
| date | Mon, 13 Jan 2020 09:36:40 +0100 |
| parents | 55f5060e0508 |
| children | c177e7128dc9 |
comparison
equal
deleted
inserted
replaced
| 6052:302eceff0c49 | 6053:380dec305c28 |
|---|---|
| 826 "Whether to use HTTP Basic Authentication, if present.\n" | 826 "Whether to use HTTP Basic Authentication, if present.\n" |
| 827 "Roundup will use either the REMOTE_USER or HTTP_AUTHORIZATION\n" | 827 "Roundup will use either the REMOTE_USER or HTTP_AUTHORIZATION\n" |
| 828 "variables supplied by your web server (in that order).\n" | 828 "variables supplied by your web server (in that order).\n" |
| 829 "Set this option to 'no' if you do not wish to use HTTP Basic\n" | 829 "Set this option to 'no' if you do not wish to use HTTP Basic\n" |
| 830 "Authentication in your web interface."), | 830 "Authentication in your web interface."), |
| 831 (BooleanOption, 'http_auth_convert_realm_to_lowercase', "no", | |
| 832 "If usernames consist of a name and a domain/realm part of\n" | |
| 833 "the form user@realm and we're using REMOTE_USER for\n" | |
| 834 "authentication (e.g. via Kerberos), convert the realm part\n" | |
| 835 "of the incoming REMOTE_USER to lowercase before matching\n" | |
| 836 "against the roundup username. This allows roundup usernames\n" | |
| 837 "to be lowercase (including the realm) and still follow the\n" | |
| 838 "Kerberos convention of using an uppercase realm. In\n" | |
| 839 "addition this is compatible with Active Directory which\n" | |
| 840 "stores the username with realm as UserPrincipalName in\n" | |
| 841 "lowercase."), | |
| 831 (IntegerNumberGeqZeroOption, 'login_attempts_min', "3", | 842 (IntegerNumberGeqZeroOption, 'login_attempts_min', "3", |
| 832 "Limit login attempts per user per minute to this number.\n" | 843 "Limit login attempts per user per minute to this number.\n" |
| 833 "By default the 4th login attempt in a minute will notify\n" | 844 "By default the 4th login attempt in a minute will notify\n" |
| 834 "the user that they need to wait 20 seconds before trying to\n" | 845 "the user that they need to wait 20 seconds before trying to\n" |
| 835 "log in again. This limits password guessing attacks and\n" | 846 "log in again. This limits password guessing attacks and\n" |