+1 Thomas Mortagne wrote:

Hi devs,

I posted a patch on http://jira.xwiki.org/jira/browse/XWIKI-3013 which make XWiki authenticate only once by session by default, this is configurable in xwiki.cfg using xwiki.authentication.always=1.

Pros: - quicker navigation because user is not re-authenticated for each request, this can be very annoying when authentication means access another server like LDAP and when there is a lots of users at the same time

Cons: - you have to start a new session (by logout/login for example) to be able to update informations from LDAP or any other authentication which do data update from remote authentication server.

The cons is why I prefer to make this possible to disable if needed.

Here is my +1.

Thanks,

+1 -Vincent On Jan 20, 2009, at 3:41 PM, Thomas Mortagne wrote:

Hi devs,

I posted a patch on http://jira.xwiki.org/jira/browse/XWIKI-3013 which make XWiki authenticate only once by session by default, this is configurable in xwiki.cfg using xwiki.authentication.always=1.

Pros: - quicker navigation because user is not re-authenticated for each request, this can be very annoying when authentication means access another server like LDAP and when there is a lots of users at the same time

Cons: - you have to start a new session (by logout/login for example) to be able to update informations from LDAP or any other authentication which do data update from remote authentication server.

The cons is why I prefer to make this possible to disable if needed.

Here is my +1.

Thanks, -- Thomas Mortagne

On Tue, Jan 20, 2009 at 3:41 PM, Thomas Mortagne <[email protected]> wrote:

Hi devs,

I posted a patch on http://jira.xwiki.org/jira/browse/XWIKI-3013 which make XWiki authenticate only once by session by default, this is configurable in xwiki.cfg using xwiki.authentication.always=1.

Pros: - quicker navigation because user is not re-authenticated for each request, this can be very annoying when authentication means access another server like LDAP and when there is a lots of users at the same time

Cons: - you have to start a new session (by logout/login for example) to be able to update informations from LDAP or any other authentication which do data update from remote authentication server.

The cons is why I prefer to make this possible to disable if needed.

Here is my +1.

Thanks, -- Thomas Mortagne

Five +1, no 0 and no -1 committing now. Thanks, -- Thomas Mortagne