This file is indexed.

/usr/share/pyshared/TracAuthOpenId-0.4.1.egg-info/PKG-INFO is in trac-authopenid 0.4.1-2.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
Metadata-Version: 1.1
Name: TracAuthOpenId
Version: 0.4.1
Summary: OpenID plugin for Trac
Home-page: https://github.com/dairiki/authopenid-plugin/
Author: Jeff Dairiki
Author-email: dairiki@dairiki.org
License: Trac license (BSD-like)
Description: ============================
        OpenID Authentication Plugin
        ============================
        
        Description
        ===========
        
        This plugin allows to login to Trac using OpenID.  I use it with Trac 0.12.
        It was developed under Trac 0.11, so it should work there too.
        Version 0.4 of this plugin runs under trac 1.0 (formerly 0.13), but
        this configuration has not yet been extensively tested or used in
        production.
        
        Download & Source
        =================
        
        The source repository is on github__.
        You may submit bug reports and pull requests there.
        
        __ https://github.com/dairiki/authopenid-plugin/
        
        There are several ways to install this plugin.
        
        1. You can install directly from PyPI_ using ``easy_install`` or pip_::
        
               easy_install TracAuthOpenId
        
           or::
        
               pip install TracAuthOpenId
        
        2. There is `Debian package` for this plugin::
        
               sudo aptitude install trac-authopenid
        
        3. You can clone git repository somewhere in your system::
        
               cd /your/3rdparty/src
               git clone git://github.com/dairiki/authopenid-plugin.git
        
           Then you should do following steps::
        
               cd authopenid-plugin
               python setup.py install
        
           Alternatively, if you use pip_, you can  install directly from the git
           repository::
        
               pip install git+git://github.com/dairiki/authopenid-plugin.git
        
        For any of the above methods, if you want to do a system-wide
        installation, you will have to do this with *root* permissions
        (e.g. using ``su`` or ``sudo``).
        
        .. _PyPI: http://pypi.python.org/pypi/TracAuthOpenId/
        .. _Debian package: http://packages.qa.debian.org/t/trac-authopenid.html
        .. _pip: http://www.pip-installer.org/
        
        How to enable
        =============
        
        ::
        
            [components]
            trac.web.auth.* = disabled
            authopenid.* = enabled
        
        
        You don't need to disable default authentication mechanism
        (trac.web.auth.*) if you are using it. OpenID plugin does not conflict
        with default authentication mechanism.
        
        Options
        =======
        
        This plugin has number of configuration options. Examples are best way
        to illustrate them.
        (NB: some of this is out of date and needs to be updated)::
        
            [trac]
            # Check user IP address. IP addresses are masked because
            # in some cases user is behind internal proxy and last
            # number in IP address might vary. Disable check_auth_ip
            # if you are using IPv6. If you still want to have IPv6
            # support please contact me.
            check_auth_ip = true
            check_auth_ip_mask = 255.255.255.0
            # number of seconds until cookie will expire
            auth_cookie_lifetime = 86400
        
            [openid]
        
            # In some cases company might have internal OpenID server that
            # automatically identifies user (e.g. windows SSPI). Also known as
            # single sign-on.  default_openid = http://openid.ee Require sreg
            # data
            sreg_required = false
        
            # If you want username to be written as
            # "username_in_remote_system <openid_url>" use:
            #combined_username = true
        
            # Default PAPE method to request from OpenID provider.
            # pape_method =
        
            # What is OpenID link.
            whatis = http://openid.net/what/
            # Sign-up link
            signup = http://openid.net/get
            # Gmail login button (default: true)
            # gmail = false
            # In some cases you might want allow users to login to different
            # projects using different OpenIDs. In that case don't use
            # absolute trust root.
            absolute_trust_root = false
        
            # Remove http:// or https:// from URL that is used as
            # username. (Default: false)
            strip_protocol = false
        
            # Remove trailing slash from URL that is user as username (Defaul: false)
            strip_trailing_slash = false
        
            # Expiration time acts as timeout. E.g. if expiration time is 24
            # hour and you login again in those 24 hours. Expiration time is
            # extended for another 24 hours. (Default: false)
            timeout = false
        
            # White and black lists.
            # E.g.: Allows all the people from Lithuania, Latvia or Estonia
            # except delfi domain.
            # IMPORTANT: strip_protocol and strip_trailing_slash affects what
            # openid will be given to white_list or black_list
            #white_list = *.lt, *.lv, *.ee
            #black_list = *.delfi.lt,*.delfi.lv,*.delfi.ee
        
            # In addition to white and black lists you can use external
            # service for allowing users into trac. To control that you must
            # use check_list and check_list_key option. It will generate URL:
            #
            #     check_list?check_list_key=openid&email=email
            #
            # email will be attached only if available.
            #
            # It expects JSON result in following format:
            #
            #     {"check_list_key": true}
            #
            # IMPORTANT: strip_protocol and strip_trailing_slash affects what
            # openid will be send to service
            # NOTE: You can specify check_list_username as well. In that case
            # JSON service should return new username as
            # well. E.g. check_list_username=username. Expected result from
            # JSON service is:
            #
            #     {"check_list_key": true, "username": "Peter"}
            #
            # You can use this option to map your OpenIDs to internal username.
            #check_list = http://your.site.com/openidallow
            #check_list_key = check_list
            #check_list_username=
            #
            # You can add one custom openid provider:
            #custom_provider_name = test
            #custom_provider_label = Enter openidprovider username:
            #custom_provider_url = http://openidprovider/{username}
            #custom_provider_image = http://openidprovider/favicon.png
        
        
        Authors
        =======
        
        This plugin was written by `Dalius Dobravolskas`_.
        It is currently being maintained by `Jeff Dairiki`_.
        
        .. _Jeff Dairiki: mailto:dairiki@dairiki.org
        .. _Dalius Dobravolskas: mailto:dalius@sandbox.lt
        
        
        =======
        Changes
        =======
        
        Version 0.4.1 (2012-06-25)
        ==========================
        
        This is a brown bag release.  Release 0.4 was unusable.
        
        Bug Fixes
        ---------
        
        - Packaging: A number of crucial files were omitted from the manifest.
        
        Version 0.4 (2012-06-25)
        ========================
        
        Configuration Changes
        ---------------------
        
        - The default for ``[trac] check_auth_ip`` is now ``False``.  **This
          has security implications**.  If you want authorization to be tied
          to the clients IP address *you must now explicitly set* this option
          to ``True``.
        
          Prior to this change, if ``check_auth_ip`` was not explicitly set, we
          ignored the global trac default (``False``) for the setting and behaved
          as if it were set to ``True``.
        
          This change is being made for the sake of backwards compatibility
          with trac 0.11 whose ``Configuration.has_option`` method does not
          support the optional ``defaults`` argument added in 0.12.  Without
          that there seems to be no clean way to determine whether a setting
          is explicitly set in the ``.ini`` file.
        
        
        New Features
        ------------
        
        - We will now use the json_ package if your python version includes it
          (python >= 2.6).   For older pythons, the simplejson_ package is now
          required.
        
        
        - A minor hack has been made which allows at least basic functionality
          under the development branch, trac-1.0 (formerly know as trac-0.13).
          Note that only very basic tests under trac-1.0 have not been
          performed.  (The code in this plugin still does not adhere to
          the modern `trac db API`_ usage recommendations.)
        
        .. _json: http://docs.python.org/library/json.html
        .. _simplejson: https://github.com/simplejson/simplejson
        .. _trac db API: http://trac.edgewall.org/wiki/TracDev/DatabaseApi
        
        Version 0.3.6 (2012-03-05)
        ==========================
        
        New Maintainer
        --------------
        
        Jeff Dairiki has taken over maintenance of this plugin from
        the original author, Dalius Dobravolskas (who no longer uses trac.)
        
        The source repository for the plugin has moved to
        https://github.com/dairiki/authopenid-plugin.
        
        New Features
        ------------
        
        - Respect the ``[trac] auth_cookie_lifetime`` config value when
          setting cookie expiration times.
        
        Deprecations
        ------------
        
        - Using the ``[trac] expires`` setting to specify the auth cookie lifetime
          is deprecated.  Use ``[trac] auth_cookie_lifetime`` instead.
          (The ``expires`` setting does not seem to exist in trac 0.12 or 0.11.)
        
        Bug Fixes
        ---------
        
        - Don't override the default value for the ``[trac] check_auth_ip``
          configuration setting.   Trac declares this to have a default value
          of *false*; we were overriding that default to *true*.
        
        Version 0.3.5 (2011-10-04)
        ==========================
        
        
        New Features
        ------------
        
        - Now AX (as well as SREG) are attempted to get the user’s name.
          This is tested with Google (which does not support SREG).
        
        - The new config setting ``[openid] lowercase_authname``
          specifies whether to force authnames to lowercase.
          For backwards compatibility, the default for this option is
          *true* (see below__).  In general, however, I think it makes
          more sense to set this option to *false*.
        
        __ `authnames were being lower-cased`_
        
        
        Bug Fixes
        ---------
        
        - _`Authnames were being lower-cased` when recovering them from the cookie,
          but not when generating them initially.  This resulted — unless the
          user’s name was all lower case to start with — in two sessions being
          created upon initial login, one of which was ignored thereafter.
        
        - Always uniquify authnames.  When they are lowercased, there’s always a
          chance of collision, even when they include the identity URL.
        
Keywords: trac openid
Platform: Any
Classifier: Development Status :: 4 - Beta
Classifier: Environment :: Plugins
Classifier: Environment :: Web Environment
Classifier: Framework :: Trac
Classifier: Intended Audience :: System Administrators
Classifier: Topic :: Internet :: WWW/HTTP
Classifier: Programming Language :: Python :: 2
Classifier: License :: OSI Approved :: BSD License