The only way to have a private ikiwiki, with a shared user database for static pages and CGI authentication, is to use httpauth. It would be good for httpauth to be on par with passwordauth, i.e. to allow registering users, resetting passwords, and changing passwords; supporting some kind of account_creation_password configuration option would be nice, too.

I'll probably propose patches implementing this at some point. I've not had a single look at the code yet, but it may be nice to factorize the relevant passwordauth code, instead of rewriting it completely in httpauth.

-- intrigeri

Well, on such a private wiki, one can neither register herself nor reset his password: the registration page, as any other page, would be forbidden to non-authenticated users. Admin users should then be enabled to:

  • register a new user
  • reset someone else's password

In both cases, a brand new random password is sent by e-mail to the new user.

An authenticated user should nevertheless be able to change his own password. -- intrigeri

wishlist