TWiki does not authenticate users internally, it depends on the
environment variable. This variable is set when you enable basic authentication or authentication via SSL (https protocol)
TWiki keeps track who made changes to topics at what time. This gives a complete audit trail of changes.
No special installation steps need to be performed in case the server is already autenticated. If not you can opt for one of these:
- Forget about authentication. All changes will be registered as TWikiGuest user, e.g. you can't tell who made changes.
- Use basic authentication for the
attach scripts. TWiki Installation Notes tells you more about that.
- Use SSL to authenticate and secure the whole server.
environment variable is only set for the scripts that are under authentication. If for example the
scripts are authenticated, but not
, you would get your WikiName
instead of your WikiName.
There is a way to tell TWiki to remember the user for the scripts that are not authenticated, e.g. for the case where the
environment variable is not set. TWiki can be configured to remember the IP address / username pair whenever an authentication happens (edit topic, attach file). Once remembered, the non authenticated scripts like
will show the correct username instead of
. You can enable this by setting the
. TWiki persistently stores the IP address / username pairs in file
, which is
by default. Please note that this can fail in case the IP address changes due to dynamically assigned IP addresses or proxy servers.
Test: You are TWikiGuest
- 16 Mar 2001