[Phpwiki-talk] Authentication related questions

[S. M. <the...@ta...>]

Hi, everyone,

I'll start by telling you that PHPWiki is quite impressive in its way.
I've spent the last two months shoping, so to speak, for a wiki engine
and I was quite excited to discover this one. I'm starting a few
projects with friends of mine who are rather on the end-user side of
things and have asked them to evaluate PHPWiki along with the bare-bones
(but simple) UseMod and the featureful (but quite complex) TWiki and
they all chose PHPWiki... So PHPWiki it is.

Now I'll be setting up a few wikiss (one for each project) but most of
them need to be closed to the outside world for now, which leads me to
worry about authentication and such things. I guess I'll be using code
from CVS since it seems to be the one that supports authentication best.
I can't use external auth for now (though I suppose I will find a way to
if I have no other choice). So as I understand things, my choices are
between internal auth and HTTP auth. Now, my perception of things is
that internal auth isn't functional at all yet, is that correct?
This then leaves me with HTTP auth as my only choice. From index.php:
// The wiki can be protected by HTTP Auth. Use the username and password
// from there, but this is not sufficient. Try the other methods also.

What I hope this means is that I could just set up HTTP auth and have
PHPWiki use the authenticated user name. However this doesn't seem to
work for me. I set ALLOW_HTTP_AUTH_LOGIN to true and added this
statement to my .htaccess file:
<Files "index.php">
        require valid-user
</Files> # WARNING: my knowledge of Apache is rather limited...

I can authenticate, as far as accessing the wiki goes, but then I'm
still required to sign in. Am I missing something?

(That's with a fresh tarball of the nightly snapshop, BTW.)

Oh, and I think the plans for the internal auth scheme are realy
promising; just with it were already there. :(

Thanks for your help,
S. Massy