Bitten fails authentication with Tracd

[mcs532@…]

• I have a user, and that user has every single BUILD_* permission enabled.
• I am attempting to run bitten-slave on the same machine as the actual tracd instance.
• I receive the same message whether or not any builds are active within Trac.
• I receive the correct HTTP 405 Method Not Allowed when attempting to GET the /builds directory (as in a web browser).
• I am using Trac 0.11 and Bitten 0.6dev-r567, although this problem exists in Bitten stable, as well.

My tracd server is run like this:

    tracd -s -p 9090 -b 127.0.0.1 -d --base-path=/trac --basic-auth=*,/var/trac_projects/.htpasswd,example.org /var/trac_projects/trac_instance/

When I attempt to run bitten-slave, this is the verbose output:

user@server:~$ bitten-slave http://example.org/trac/builds -u user -p password -v
[DEBUG   ] Enabling authentication with username 'user'
[DEBUG   ] Configured packages: {}
[DEBUG   ] Sending slave configuration: <slave name="server"><platform processor="">x86_64</platform><os version="2.6.18-xen" family="posix">Linux</os></slave>
[DEBUG   ] Sending POST request to 'http://example.org/trac/builds'
[WARNING ] Server returned error 403: Forbidden
[ERROR   ] HTTP Error 403: Forbidden
[DEBUG   ] Removing temporary directory /tmp/bittenm-l5HA

[michael@…]

I have the same problem, using Bitten 0.6dev-r628 running on Ubuntu 8.10 x86_64 with latest updates. I am running Trac through Apache.

If I set the anonymous user with BUILD_EXEC privileges, the builds work, but a dedicated user with the BUILD_EXEC or BUILD_ADMIN permissions does not work.

This is very important as some of the servers have to be accessible from a public IP.

[osimons]

It is because Bitten requests a url (/builds) that is not protected by authentication, so the web server - in this case tracd will not challenge for authentication. Tracd can't be configured to challenge on other paths directly, so you would need to do something like an Apache proxy setup and have Apache challenge for passwords on this path - see comments on #219 for example of Apache auth setup.

Anyway, the larger problem is that Bitten & Trac should now when it needs to use authentication - something already covered by other tickets. I'm closing this as a duplicate of #208, and please test the latest patch on that ticket as a possible solution.