Review Board

beta

Improvements for authentication using REMOTE_USER

Pending Review
Updated 5 months ago

Xavier Duret Reviewers
reviewboard
513 chipx86
None Review Board SVN 
This patch aims to increase awareness of a specific need related to the use of Review Board in a corporate environment: the use of single sign on logins. In this case, the user authenticates once and the Apache server communicates the user name to Review board through Django. There is no more need for login and logout links as authentication is done when the user logs in its terminal or through its browser.

Because the current patch waiting for inclusion into Django's repository does not provide for a system to detect that web authentication is performed, a new variable called WEBAUTH is introduced in "settings". Its use in the template is straightforward. The manner in which the detection of web authentication is inelegant. Maybe this patch can be improved or maybe it is preferable to improve the patch for Django.
The change (with commented out code activated) have been deployed on my company servers which runs with the latest patch (t689-r7609.diff) for Django ticket #689. Review board is installed on a Centos 5 Apache box. It works properly.
Brad Fults
Posted 5 months ago (June 19th, 2008, 9 p.m.)

   

  
    
   
  




   



    

     
     

      
       
       
       
       
      
      
       

        
         trunk/reviewboard/templates/accounts/prefs.html
		 

		  (Diff revision 1)

		 
        
       

      

      

       

         
         

         48
         
   {%endif %}

       


      

     

    

    

     
Missed a space.

	 

  
    
   

   
  1. 
    
    
     
    
      
      Xavier Duret
      5 months ago (June 20th, 2008, 3:29 a.m.)
      
     
    
     
    Fixed in new diff version.
    
    
    
   
    2. 


  



    


   


  
 




  

 











 

  




 

 

  
  
Christian Hammond

  
Posted 4 months, 1 week ago (July 11th, 2008, 3:12 a.m.)

 

 

   
Just to keep you up to date, I'm not ignoring this patch or anything. I'm partially waiting for the Django patch to go in and partially waiting to finish some code I'm working on that heavily influence how settings and auth in Review Board work.

Trying not to introduce many new settings or auth-related things until this goes in, but I hope that to be soon.

   

  
    
   

   
  1. 
    
    
     
    
      
      Christian Hammond
      4 weeks, 1 day ago (October 22nd, 2008, 2:58 a.m.)
      
     
    
     
    Looks like the patch just went in.

Can you update this change to use the new siteconfig support for authentication, and to only provide these options if using a version of Django that supports this? We want to stay compatible with Django 1.0.
    
    
    
   
    2. 



   
  2. 
    
    
     
    
      
      Xavier Duret
      3 weeks, 4 days ago (October 26th, 2008, 5:12 a.m.)
      
     
    
     
    I am afraid as of r9281, the patch has not been integrated in Django yet. The functionality has been added to milestone 1.1 though. So it will have to wait a bit more...
    
    
    
   
    3.