[xwiki-devs] [VOTE] Authenticate only once by session by default
Hi devs, I posted a patch on http://jira.xwiki.org/jira/browse/XWIKI-3013 which make XWiki authenticate only once by session by default, this is configurable in xwiki.cfg using xwiki.authentication.always=1. Pros: - quicker navigation because user is not re-authenticated for each request, this can be very annoying when authentication means access another server like LDAP and when there is a lots of users at the same time Cons: - you have to start a new session (by logout/login for example) to be able to update informations from LDAP or any other authentication which do data update from remote authentication server. The cons is why I prefer to make this possible to disable if needed. Here is my +1. Thanks, -- Thomas Mortagne
+1 JV. On Tue, Jan 20, 2009 at 3:41 PM, Thomas Mortagne <thomas.mortagne@xwiki.com> wrote:
Hi devs,
I posted a patch on http://jira.xwiki.org/jira/browse/XWIKI-3013 which make XWiki authenticate only once by session by default, this is configurable in xwiki.cfg using xwiki.authentication.always=1.
Pros: - quicker navigation because user is not re-authenticated for each request, this can be very annoying when authentication means access another server like LDAP and when there is a lots of users at the same time
Cons: - you have to start a new session (by logout/login for example) to be able to update informations from LDAP or any other authentication which do data update from remote authentication server.
The cons is why I prefer to make this possible to disable if needed.
Here is my +1.
Thanks, -- Thomas Mortagne _______________________________________________ devs mailing list devs@xwiki.org http://lists.xwiki.org/mailman/listinfo/devs
+1 Thomas Mortagne wrote:
Hi devs,
I posted a patch on http://jira.xwiki.org/jira/browse/XWIKI-3013 which make XWiki authenticate only once by session by default, this is configurable in xwiki.cfg using xwiki.authentication.always=1.
Pros: - quicker navigation because user is not re-authenticated for each request, this can be very annoying when authentication means access another server like LDAP and when there is a lots of users at the same time
Cons: - you have to start a new session (by logout/login for example) to be able to update informations from LDAP or any other authentication which do data update from remote authentication server.
The cons is why I prefer to make this possible to disable if needed.
Here is my +1.
Thanks,
+1 Jerome. Thomas Mortagne wrote:
Hi devs,
I posted a patch on http://jira.xwiki.org/jira/browse/XWIKI-3013 which make XWiki authenticate only once by session by default, this is configurable in xwiki.cfg using xwiki.authentication.always=1.
Pros: - quicker navigation because user is not re-authenticated for each request, this can be very annoying when authentication means access another server like LDAP and when there is a lots of users at the same time
Cons: - you have to start a new session (by logout/login for example) to be able to update informations from LDAP or any other authentication which do data update from remote authentication server.
The cons is why I prefer to make this possible to disable if needed.
Here is my +1.
Thanks,
+1 -Vincent On Jan 20, 2009, at 3:41 PM, Thomas Mortagne wrote:
Hi devs,
I posted a patch on http://jira.xwiki.org/jira/browse/XWIKI-3013 which make XWiki authenticate only once by session by default, this is configurable in xwiki.cfg using xwiki.authentication.always=1.
Pros: - quicker navigation because user is not re-authenticated for each request, this can be very annoying when authentication means access another server like LDAP and when there is a lots of users at the same time
Cons: - you have to start a new session (by logout/login for example) to be able to update informations from LDAP or any other authentication which do data update from remote authentication server.
The cons is why I prefer to make this possible to disable if needed.
Here is my +1.
Thanks, -- Thomas Mortagne
+1 Thomas Mortagne wrote:
Hi devs,
I posted a patch on http://jira.xwiki.org/jira/browse/XWIKI-3013 which make XWiki authenticate only once by session by default, this is configurable in xwiki.cfg using xwiki.authentication.always=1.
Pros: - quicker navigation because user is not re-authenticated for each request, this can be very annoying when authentication means access another server like LDAP and when there is a lots of users at the same time
Cons: - you have to start a new session (by logout/login for example) to be able to update informations from LDAP or any other authentication which do data update from remote authentication server.
The cons is why I prefer to make this possible to disable if needed.
Here is my +1.
Thanks,
On Tue, Jan 20, 2009 at 3:41 PM, Thomas Mortagne <thomas.mortagne@xwiki.com> wrote:
Hi devs,
I posted a patch on http://jira.xwiki.org/jira/browse/XWIKI-3013 which make XWiki authenticate only once by session by default, this is configurable in xwiki.cfg using xwiki.authentication.always=1.
Pros: - quicker navigation because user is not re-authenticated for each request, this can be very annoying when authentication means access another server like LDAP and when there is a lots of users at the same time
Cons: - you have to start a new session (by logout/login for example) to be able to update informations from LDAP or any other authentication which do data update from remote authentication server.
The cons is why I prefer to make this possible to disable if needed.
Here is my +1.
Thanks, -- Thomas Mortagne
Five +1, no 0 and no -1 committing now. Thanks, -- Thomas Mortagne
participants (5)
-
Jean-Vincent Drean -
Jerome Velociter -
Marius Dumitru Florea -
Thomas Mortagne -
Vincent Massol