From frank4sam at gmail.com Thu Apr 6 08:07:04 2017 From: frank4sam at gmail.com (Sam Franklin) Date: Thu, 6 Apr 2017 17:37:04 +0530 Subject: [moin-user] Fwd: LDAP migration - Authentication fails In-Reply-To: References: Message-ID: Hi Team, We are currently running moinmoin version 1.9.3 on Windows 2008R2 server, its a farm configuration. We recently had users migrated to newer domain with secure LDAP authentication configured on farm config. The login is based on UserPrincipalName against the LDAPs server, for some users authentication works for some it does not work. No errors reported in apache logs, how can I trace the authentication errors to resolve the problem. Would appreciate your suggestion, recommendation and advice. Best Regards, Sam -------------- next part -------------- An HTML attachment was scrubbed... URL: From lists at sumpfralle.de Thu Apr 6 15:41:28 2017 From: lists at sumpfralle.de (Lars Kruse) Date: Thu, 6 Apr 2017 21:41:28 +0200 Subject: [moin-user] Fwd: LDAP migration - Authentication fails In-Reply-To: References:

Message-ID: <20170406214128.02896f77@erker.lan> Hi Sam, Am Thu, 6 Apr 2017 17:37:04 +0530 schrieb Sam Franklin : > [..] > The login is based on UserPrincipalName against the LDAPs server, for > some users authentication works for some it does not work. [..] just a wild guess: maybe using uppercase / lowercase makes the difference between success and failure? Cheers, Lars From Christian.Molecki at stala.bwl.de Tue Apr 11 03:13:36 2017 From: Christian.Molecki at stala.bwl.de (Molecki, Christian (STL)) Date: Tue, 11 Apr 2017 07:13:36 +0000 Subject: [moin-user] MoinMoin 1.9.9 Disable User Account Creation Message-ID: <205F109FB2535542BD9DB0753EFF6D3326DB4D62@BWLSM15.ZD.BWL.NET> Hello everybody, I try to disable the free user account registration. So I try to implement the solution descripted at the featurerequests (Solution for 1.9). Where should the file 'myauth.py' be placed? If I press "create account" I get the message: Unhandled Exception An unhandled exception was thrown by the application. In the apache error-log are these entries: [Tue Apr 11 09:10:21.009212 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: 2017-04-11 09:10:21,008 ERROR MoinMoin.wsgiapp:281 An exception has occurred [http://appweb/itdoc/Useranlegen].: /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009248 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: Traceback (most recent call last):: /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009270 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: File "/usr/lib/python2.7/site-packages/MoinMoin/wsgiapp.py", line 264, in __call__: /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009280 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: response = run(context): /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009300 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: File "/usr/lib/python2.7/site-packages/MoinMoin/wsgiapp.py", line 89, in run: /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009315 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: response = dispatch(request, context, action_name): /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009335 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: File "/usr/lib/python2.7/site-packages/MoinMoin/wsgiapp.py", line 137, in dispatch: /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009352 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: response = handle_action(context, pagename, action_name): /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009382 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: File "/usr/lib/python2.7/site-packages/MoinMoin/wsgiapp.py", line 203, in handle_action: /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009396 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: handler(context.page.page_name, context): /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009416 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: File "/web/wiki/itdoc/data/plugin/action/newaccount.py", line 174, in execute: /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009431 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: request.theme.add_msg(_create_user(request), "dialog"): /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009452 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: File "/web/wiki/itdoc/data/plugin/action/newaccount.py", line 64, in _create_user: /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009467 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: theuser.enc_password = user.encodePassword(password): /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009485 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: TypeError: encodePassword() takes at least 2 arguments (1 given): /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009496 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: Traceback (most recent call last):: /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009521 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: File "/usr/lib/python2.7/site-packages/MoinMoin/support/flup/server/fcgi_base.py", line 574, in run: /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009537 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: protocolStatus, appStatus = self.server.handler(self): /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009561 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: File "/usr/lib/python2.7/site-packages/MoinMoin/support/flup/server/fcgi_base.py", line 1159, in handler: /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009576 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: result = self.application(environ, start_response): /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009600 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: File "/usr/lib/python2.7/site-packages/MoinMoin/support/werkzeug/wsgi.py", line 599, in __call__: /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009798 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: return self.app(environ, start_response): /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009824 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: File "/usr/lib/python2.7/site-packages/MoinMoin/wsgiapp.py", line 264, in __call__: /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009835 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: response = run(context): /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009856 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: File "/usr/lib/python2.7/site-packages/MoinMoin/wsgiapp.py", line 89, in run: /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009877 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: response = dispatch(request, context, action_name): /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009898 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: File "/usr/lib/python2.7/site-packages/MoinMoin/wsgiapp.py", line 137, in dispatch: /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009915 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: response = handle_action(context, pagename, action_name): /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009936 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: File "/usr/lib/python2.7/site-packages/MoinMoin/wsgiapp.py", line 203, in handle_action: /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009949 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: handler(context.page.page_name, context): /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009969 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: File "/web/wiki/itdoc/data/plugin/action/newaccount.py", line 174, in execute: /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.009985 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: request.theme.add_msg(_create_user(request), "dialog"): /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.010005 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: File "/web/wiki/itdoc/data/plugin/action/newaccount.py", line 64, in _create_user: /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.010020 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: theuser.enc_password = user.encodePassword(password): /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount [Tue Apr 11 09:10:21.010037 2017] [cgi:error] [pid 13584] [client 10.23.57.41:61101] AH01215: TypeError: encodePassword() takes at least 2 arguments (1 given): /web/wiki/moin.cgi, referer: http://appweb/itdoc/Useranlegen?action=newaccount Is the featurerequest for inviting to a wiki also usable for v1.9.9 https://moinmo.in/FeatureRequests/MakeInvitations Mit freundlichen Gr??en Christian Molecki -------------------------------------------- Statistisches Landesamt Baden-W?rttemberg Referat 14: Systemtechnik und Datenmanagement OE 143: Systemtechnik, Gro?rechner, Internettechnik, Datenmanagement B?blinger Str. 68 70199 Stuttgart Tel.: 0711/641-2457 Fax: 0711/641-2440 -------------- next part -------------- An HTML attachment was scrubbed... URL: From thomas.hain at gmail.com Tue Apr 11 11:49:40 2017 From: thomas.hain at gmail.com (Thomas Hain) Date: Tue, 11 Apr 2017 16:49:40 +0100 Subject: [moin-user] Table creation in gui mode adds quot Message-ID: <52C2EDBB-9266-4109-BCFE-3670DC6D2AEB@gmail.com> Hi, I might have done something wrong in configuration - but when I produce a table via the GUI (Mac OS Sierra, Firefox 52.0.2 ) I get || || || || || || (shown in text mode before saving) which looks fine. If I then save and reopen it has made this instead: || || || || || || which does not do the job. Worse, after each saving it adds more quot ! How I can turn this off please ? Any help is greatly appreciated. Best Thomas PS. using MoinMoin 1.9.9 downloaded this week. From asis.hallab at gmail.com Tue Apr 11 19:22:20 2017 From: asis.hallab at gmail.com (Asis Hallab) Date: Tue, 11 Apr 2017 17:22:20 -0600 Subject: [moin-user] Problems with Installation on Cent OS 7 - "No permission on this server" error Message-ID: Dear MoinMoin-Experts, I'm a newby to administration, coming from being a software developer always having lived with the convenience of having expert administrators at hand. Not any more, unfortunately. For my new employer I have to install a MoinMoin-Wiki on Cent OS 7. I followed this guide to the last dot: https://moinmo.in/HowTo/CentOSQuick Attached you find a zip of my Apache and MoinMoin config. Unfortunately I always receive the following error, when trying to access the Wiki: " Forbidden You don't have permission to access /Reconstruct-Wiki on this server. " The path "/Reconstruct-Wiki" is obtained from the MoinMoin config file sitename parameter. I also tried "/Reconstruct-Project" which is the value of page_front_page parameter. Hopefully any of you has a quick idea what I am missing. Most likely it is quite simple, I imagine. Thank you very much and have a cheerful easter holiday! Cheers! -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: moinmoin_wiki_config.zip Type: application/zip Size: 8080 bytes Desc: not available URL: From lists at sumpfralle.de Tue Apr 11 21:35:32 2017 From: lists at sumpfralle.de (Lars Kruse) Date: Wed, 12 Apr 2017 03:35:32 +0200 Subject: [moin-user] MoinMoin 1.9.9 Disable User Account Creation In-Reply-To: <205F109FB2535542BD9DB0753EFF6D3326DB4D62@BWLSM15.ZD.BWL.NET> References: <205F109FB2535542BD9DB0753EFF6D3326DB4D62@BWLSM15.ZD.BWL.NET> Message-ID: <20170412033532.45105379@erker.lan> Hello Christian, Am Tue, 11 Apr 2017 07:13:36 +0000 schrieb "Molecki, Christian (STL)" : > Hello everybody, > > I try to disable the free user account registration. > So I try to implement the solution descripted at the featurerequests (Solution for 1.9). > > Where should the file 'myauth.py' be placed? Anywhere in the search path for python modules should be sufficient (see "import sys; print(sys.path)"). Probably /etc/moinmoin/ should work, too? If you want to use it for just one wiki, then you may want to add the content of "myauth.py" just to the top of your wiki config script. > If I press "create account" I get the message: > > Unhandled Exception > [..] This was probably caused by a change of the "user.encodePassword" method interface. I assume that you need to replace line 64 of https://moinmo.in/FeatureRequests/DisableUserCreation?action=AttachFile&do=view&target=newaccount.py: - theuser.enc_password = user.encodePassword(password) + theuser.enc_password = user.encodePassword(request.cfg, password) > Is the featurerequest for inviting to a wiki also usable for v1.9.9 > https://moinmo.in/FeatureRequests/MakeInvitations I guess, you will need to try it :) Cheers, Lars From lists at sumpfralle.de Tue Apr 11 21:39:44 2017 From: lists at sumpfralle.de (Lars Kruse) Date: Wed, 12 Apr 2017 03:39:44 +0200 Subject: [moin-user] Problems with Installation on Cent OS 7 - "No permission on this server" error In-Reply-To: References: Message-ID: <20170412033944.42f012d4@erker.lan> Hello Asis, Am Tue, 11 Apr 2017 17:22:20 -0600 schrieb Asis Hallab : > [..] > Unfortunately I always receive the following error, when trying to access > the Wiki: > " > Forbidden > > You don't have permission to access /Reconstruct-Wiki on this server. > " Maybe your apache error log contains more information regarding the cause of this rejection? Cheers, Lars From Christian.Molecki at stala.bwl.de Wed Apr 12 02:36:17 2017 From: Christian.Molecki at stala.bwl.de (Molecki, Christian (STL)) Date: Wed, 12 Apr 2017 06:36:17 +0000 Subject: [moin-user] MoinMoin 1.9.9 Disable User Account Creation In-Reply-To: <20170412033532.45105379@erker.lan> References: <205F109FB2535542BD9DB0753EFF6D3326DB4D62@BWLSM15.ZD.BWL.NET> <20170412033532.45105379@erker.lan> Message-ID: <205F109FB2535542BD9DB0753EFF6D3326DB5114@BWLSM15.ZD.BWL.NET> Hello Lars, the modification of the "user.encodePassword" method works. Thank You. I will try the invitation with v1.9.9 Mit freundlichen Gr??en Christian Molecki -------------------------------------------- Referat 14: Systemtechnik und Datenmanagement OE 143: Systemtechnik, Gro?rechner, Internettechnik, Datenmanagement -----Urspr?ngliche Nachricht----- Von: Lars Kruse [mailto:lists at sumpfralle.de] Gesendet: Mittwoch, 12. April 2017 03:36 An: Molecki, Christian (STL); moin-user at python.org Betreff: Re: [moin-user] MoinMoin 1.9.9 Disable User Account Creation Hello Christian, Am Tue, 11 Apr 2017 07:13:36 +0000 schrieb "Molecki, Christian (STL)" : > Hello everybody, > > I try to disable the free user account registration. > So I try to implement the solution descripted at the featurerequests (Solution for 1.9). > > Where should the file 'myauth.py' be placed? Anywhere in the search path for python modules should be sufficient (see "import sys; print(sys.path)"). Probably /etc/moinmoin/ should work, too? If you want to use it for just one wiki, then you may want to add the content of "myauth.py" just to the top of your wiki config script. > If I press "create account" I get the message: > > Unhandled Exception > [..] This was probably caused by a change of the "user.encodePassword" method interface. I assume that you need to replace line 64 of https://moinmo.in/FeatureRequests/DisableUserCreation?action=AttachFile&do=view&target=newaccount.py: - theuser.enc_password = user.encodePassword(password) + theuser.enc_password = user.encodePassword(request.cfg, password) > Is the featurerequest for inviting to a wiki also usable for v1.9.9 > https://moinmo.in/FeatureRequests/MakeInvitations I guess, you will need to try it :) Cheers, Lars From Christian.Molecki at stala.bwl.de Wed Apr 12 03:06:56 2017 From: Christian.Molecki at stala.bwl.de (Molecki, Christian (STL)) Date: Wed, 12 Apr 2017 07:06:56 +0000 Subject: [moin-user] MoinMoin 1.9.9 MakeInvitation Message-ID: <205F109FB2535542BD9DB0753EFF6D3326DB5174@BWLSM15.ZD.BWL.NET> Hello everybody, I try to implement the MakeInvitation macro. https://moinmo.in/FeatureRequests/MakeInvitations When I open the page, I get following error: <> Is the solution for v1.7.2 applicable for v1.9.9? Mit freundlichen Gr??en Christian Molecki -------------------------------------------- Statistisches Landesamt Baden-W?rttemberg Referat 14: Systemtechnik und Datenmanagement OE 143: Systemtechnik, Gro?rechner, Internettechnik, Datenmanagement B?blinger Str. 68 70199 Stuttgart Tel.: 0711/641-2457 Fax: 0711/641-2440 -------------- next part -------------- An HTML attachment was scrubbed... URL: From paul at boddie.org.uk Wed Apr 12 05:40:48 2017 From: paul at boddie.org.uk (Paul Boddie) Date: Wed, 12 Apr 2017 11:40:48 +0200 Subject: [moin-user] MoinMoin 1.9.9 MakeInvitation In-Reply-To: <205F109FB2535542BD9DB0753EFF6D3326DB5174@BWLSM15.ZD.BWL.NET> References: <205F109FB2535542BD9DB0753EFF6D3326DB5174@BWLSM15.ZD.BWL.NET> Message-ID: <201704121140.49441.paul@boddie.org.uk> On Wednesday 12. April 2017 09.06.56 Molecki, Christian (STL) wrote: > Hello everybody, > > I try to implement the MakeInvitation macro. > https://moinmo.in/FeatureRequests/MakeInvitations > > When I open the page, I get following error: > > < 'getPathinfo']>> > > Is the solution for v1.7.2 applicable for v1.9.9? Many details are the same, but the request interfaces changed in 1.8, I think, and this caused a long trail of breakage that can still occasionally cause problems. (The API in Moin before this change was easy to figure out, whereas you now have to decode the goings-on in the MoinMoin.web package and in the MoinMoin.support.werkzeug stuff, particularly the latter.) I think it might be possible to change getPathinfo to path_info and use the latter as an attribute, not a method. Paul From asis.hallab at gmail.com Thu Apr 13 13:46:02 2017 From: asis.hallab at gmail.com (Asis Hallab) Date: Thu, 13 Apr 2017 11:46:02 -0600 Subject: [moin-user] Problems with Installation on Cent OS 7 - "No permission on this server" error In-Reply-To: <20170412033944.42f012d4@erker.lan> References: <20170412033944.42f012d4@erker.lan> Message-ID: Hello Lars and MoinMoin-Users, 2017-04-11 20:39 GMT-05:00 Lars Kruse : > Hello Asis, > > > Am Tue, 11 Apr 2017 17:22:20 -0600 > schrieb Asis Hallab : > > > [..] > > Unfortunately I always receive the following error, when trying to access > > the Wiki: > > " > > Forbidden > > > > You don't have permission to access /Reconstruct-Wiki on this server. > > " > > Maybe your apache error log contains more information regarding the cause > of > this rejection? > That was exactly the right question. The MoinMoin-Installation-Guide is used is outdated. Latest Apache needs different configuration. This solved my issues: http://stackoverflow.com/questions/18392741/apache2-ah01630-client-denied-by-server-configuration Order allow,deny Allow from all Needs to be Require all granted > Cheers, > Lars Thank you and Cheers! Asis -------------- next part -------------- An HTML attachment was scrubbed... URL: From asis.hallab at gmail.com Fri Apr 21 10:10:39 2017 From: asis.hallab at gmail.com (Asis Hallab) Date: Fri, 21 Apr 2017 16:10:39 +0200 Subject: [moin-user] Can't get ACL to work Message-ID: Dear MoinMoin-Experts, I have edited the MoinMoin-Config as indicated in the documentation in order to allow only Known Users access to the Wiki: acl_hierarchic = True acl_rights_before = u"Known:read" Still after restarting Apache (and the server itself, just to make sure) I can still see all pages without logging in. Please help. Thank you and best regards! -------------- next part -------------- An HTML attachment was scrubbed... URL: From paul at boddie.org.uk Fri Apr 21 12:14:54 2017 From: paul at boddie.org.uk (Paul Boddie) Date: Fri, 21 Apr 2017 18:14:54 +0200 Subject: [moin-user] Can't get ACL to work In-Reply-To: References: Message-ID: <201704211814.54311.paul@boddie.org.uk> On Friday 21. April 2017 16.10.39 Asis Hallab wrote: > Dear MoinMoin-Experts, > > I have edited the MoinMoin-Config as indicated in the documentation in > order to allow only Known Users access to the Wiki: > > acl_hierarchic = True > acl_rights_before = u"Known:read" > > Still after restarting Apache (and the server itself, just to make sure) I > can still see all pages without logging in. What about acl_rights_default? If this allows anonymous visitors to read the pages then your acl_rights_before setting will not override it. You could try something like this... acl_rights_before = u"Known:read All:" This would deny all rights to unknown users ("All" after "Known" have been handled). However, putting "All:" in acl_rights_default would be cleaner because it would allow certain pages to use ACLs to make those pages readable to all: acl_rights_before = u"Known:read" # All not handled, default is used acl_rights_default = u"All:" # All is denied all rights Generally, acl_rights_before is best used to give administration privileges. So, you might do the following instead: acl_rights_default = u"Known:read All:" Then use acl_rights_before to grant administrative and editing privileges. Paul From asis.hallab at gmail.com Fri Apr 21 12:41:26 2017 From: asis.hallab at gmail.com (Asis Hallab) Date: Fri, 21 Apr 2017 18:41:26 +0200 Subject: [moin-user] Can't get ACL to work In-Reply-To: References:

Message-ID: Dear Chris and MoinMoin-Users, unfortunately your hints did not elucidate the cause of my problem with ACL. Please see below's inline answers and questions. 2017-04-21 16:50 GMT+02:00 Chris Freemesser : > On 04/21/2017 10:10 AM, Asis Hallab wrote: > >> Dear MoinMoin-Experts, >> >> I have edited the MoinMoin-Config as indicated in the documentation in >> order to allow only Known Users access to the Wiki: >> >> acl_hierarchic = True >> acl_rights_before = u"Known:read" >> >> Still after restarting Apache (and the server itself, just to make sure) >> I can still see all pages without logging in. >> > > I wrote up a wiki for my users that explains how ACLs work in MoinMoin, as > we experienced some weird access problems similar to yours. Perhaps it > will help you: > > https://wiki.bcs.rochester.edu/ComputerHelp/UnderstandingAcls I have read this, and actually I think I understood the things you explained within the Wiki. I still do not understand, why the two lines in my *wikiconfig.py* acl_hierarchic = True acl_rights_before = u"Known:read" do not do the magic? As far as I understand, I tell the Wiki to use hierarchical ACL, and then I tell it to use the default that only Known users are able to read. I also tried acl_rights_before = u"All:" to tell MoinMoin to ignore all not logged in users. I still can see the MoinMoin's Wiki FrontPage, and call any non-existing page where I'm offered to create it. All this without being a logged in user. Any hints? Please! Cheers! > > > Chris > > =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= > Chris Freemesser, Systems Administrator > Dept. of Brain & Cognitive Sciences + > The Center for Visual Science > University of Rochester > 255 Meliora Hall > 585-275-0786 > =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -------------- next part -------------- An HTML attachment was scrubbed... URL: From cfreemes at ur.rochester.edu Fri Apr 21 13:15:07 2017 From: cfreemes at ur.rochester.edu (Chris Freemesser) Date: Fri, 21 Apr 2017 13:15:07 -0400 Subject: [moin-user] Can't get ACL to work In-Reply-To: References:

Message-ID: <705d53bc-6d34-8b99-6b6f-216c794afd6e@ur.rochester.edu> On 04/21/2017 12:41 PM, Asis Hallab wrote: > Dear Chris and MoinMoin-Users, > > unfortunately your hints did not elucidate the cause of my problem with > ACL. Please see below's inline answers and questions. > acl_hierarchic = True > acl_rights_before = u"Known:read" > > do not do the magic? What exactly is "Known"? I've never seen an ACL variable with this name before. For my wikis, I create a group page for each wiki, add the users of that wiki to it, then use that group for defining ACLs. For example, if I have a wiki called the "Bowling" wiki, then there's a page in that wiki called "BowlingGroup". The users are defined there, then I use "BowlingGroup" in my ACL lines. Chris =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Chris Freemesser, Systems Administrator Dept. of Brain & Cognitive Sciences + The Center for Visual Science University of Rochester 255 Meliora Hall 585-275-0786 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= From asis.hallab at gmail.com Mon Apr 24 07:52:42 2017 From: asis.hallab at gmail.com (Asis Hallab) Date: Mon, 24 Apr 2017 13:52:42 +0200 Subject: [moin-user] How to only enable SuperUser to create new Users? Message-ID: Dear MoinMoin experts, after some trying and help from this mailing list, finally I successfully could setup ACL to allow only registered users read access to the Wiki. However anyone still can create an account and subsequently login to read any pages. I followed the manual given here: https://moinmo.in/FeatureRequests/DisableUserCreation#Solution_for_1.9_to_only_allow_superusers_to_create_new_accounts in order to restrict user creation to the super user only. Unfortunately I get an error after restarting the apache server and accessing the Wiki: Detected a misconfigured UNIX filesystem: Will use UTF-8 as filesystem encoding instead of 'ANSI_X3.4-1968' I really do not know, what to make of this error. The file myauth.py as explained in the above mentioned manual was written in vim right on the server. Also the filesystem is not corrupted, as far as I can see. For the moment I reverted to prohibit the creation of users and just switch it on, when I need to create new users. A bit cumbersome, but at least it works. [https://moinmo.in/FeatureRequests/DisableUserCreation#Solution_for_1.9] Is there really no elegant way to do this? Have a good day and Cheers! Asis -------------- next part -------------- An HTML attachment was scrubbed... URL: From cfreemes at ur.rochester.edu Mon Apr 24 07:58:33 2017 From: cfreemes at ur.rochester.edu (Chris Freemesser) Date: Mon, 24 Apr 2017 07:58:33 -0400 Subject: [moin-user] How to only enable SuperUser to create new Users? In-Reply-To: References: Message-ID: <2ca33d6e-e1a4-6f27-b754-c59369970844@ur.rochester.edu> On 04/24/2017 07:52 AM, Asis Hallab wrote: > For the moment I reverted to prohibit the creation of users and just > switch it on, when I need to create new users. A bit cumbersome, but at > least it works. > [https://moinmo.in/FeatureRequests/DisableUserCreation#Solution_for_1.9 > ] > > Is there really no elegant way to do this? I disable logins using the "actions_excluded" method...for my environment it works just fine. Eventually the spambots will find your wiki and you'll undoubtedly get inundated with bots constantly trying to create new accounts & pages. Disabling new account creation is pretty much a necessity. Chris =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Chris Freemesser, Systems Administrator Dept. of Brain & Cognitive Sciences + The Center for Visual Science University of Rochester 255 Meliora Hall 585-275-0786 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=