I'm running 1.3.11-rc3 on php5.
I have the following config.ini fragment:
ALLOW_ANON_USER = true
ALLOW_ANON_EDIT = false
ALLOW_BOGO_LOGIN = false
ALLOW_USER_PASSWORDS = true
USER_AUTH_ORDER = File
USER_AUTH_POLICY = stacked
AUTH_USER_FILE = /Users/liulk/Sites/wiki/passwd
AUTH_USER_FILE_STORABLE = false
AUTH_SESS_USER = userid
AUTH_SESS_LEVEL = 2
which works. But if I change USER_AUTH_POLICY to
first-only or strict, then it doesn't work. Notice
there is only one USER_AUTH_ORDER, so all stacked,
first-only, and strict should behave the same.