Hi devs, I posted a patch on http://jira.xwiki.org/jira/browse/XWIKI-3013 which make XWiki authenticate only once by session by default, this is configurable in xwiki.cfg using xwiki.authentication.always=1. Pros: - quicker navigation because user is not re-authenticated for each request, this can be very annoying when authentication means access another server like LDAP and when there is a lots of users at the same time Cons: - you have to start a new session (by logout/login for example) to be able to update informations from LDAP or any other authentication which do data update from remote authentication server. The cons is why I prefer to make this possible to disable if needed. Here is my +1. Thanks, -- Thomas Mortagne _______________________________________________ devs mailing list devs(a)xwiki.org http://lists.xwiki.org/mailman/listinfo/devs

Hi devs, I posted a patch on http://jira.xwiki.org/jira/browse/XWIKI-3013 which make XWiki authenticate only once by session by default, this is configurable in xwiki.cfg using xwiki.authentication.always=1. Pros: - quicker navigation because user is not re-authenticated for each request, this can be very annoying when authentication means access another server like LDAP and when there is a lots of users at the same time Cons: - you have to start a new session (by logout/login for example) to be able to update informations from LDAP or any other authentication which do data update from remote authentication server. The cons is why I prefer to make this possible to disable if needed. Here is my +1. Thanks,

Hi devs, I posted a patch on http://jira.xwiki.org/jira/browse/XWIKI-3013 which make XWiki authenticate only once by session by default, this is configurable in xwiki.cfg using xwiki.authentication.always=1. Pros: - quicker navigation because user is not re-authenticated for each request, this can be very annoying when authentication means access another server like LDAP and when there is a lots of users at the same time Cons: - you have to start a new session (by logout/login for example) to be able to update informations from LDAP or any other authentication which do data update from remote authentication server. The cons is why I prefer to make this possible to disable if needed. Here is my +1. Thanks,