smeserver-tt-rss/root/etc/e-smith/templates/usr/share/tt-rss/config.php/25auth

{

my $auth = ${'tt-rss'}{'Authentication'} || 'http';
my $authModule = ($auth eq 'internal') ? 'internal':'remote';
my $multi = ((${'tt-rss'}{'MultiUser'} || 'enabled') eq 'enabled') ? 'false':'true';

$OUT .=<<"HERE";

        define('SINGLE_USER_MODE',$multi);
        // Operate in single user mode, disables all functionality related to
        // multiple users.

        define('AUTH_MODULES',$authModule);
        // Set to 'true' if you trust your web server's REMOTE_USER
        // environment variable to validate that the user is logged in. This
        // option can be used to integrate tt-rss with Apache's external
        // authentication modules.

HERE
}

        define('AUTH_AUTO_CREATE',true);
        // If users are authenticated by your web server, set this to true if
        // You want new users to be automaticaly created in tt-rss database
        // on first login

        define('AUTH_AUTO_LOGIN',true);
        // Set this to true if you use ALLOW_REMOTE_USER_AUTH and you want
        // to skip the login form. If set to true, users won't be able to select
        // profile

        define('DATABASE_BACKED_SESSIONS', false);
        // Store session information in a database, recommended for multiuser 
        // configurations. Doesn't seem to work for everyone, so enable with caution.
        // tt-rss uses default PHP session storing mechanism if disabled.

        define('SESSION_CHECK_ADDRESS', 1);
        // Check client IP address when validating session:
        // 0 - disable checking
        // 1 - check first 3 octets of an address (recommended)
        // 2 - check first 2 octets of an address
        // 3 - check entire address

        define('SESSION_COOKIE_LIFETIME', 0);
        // Default lifetime of a session (e.g. login) cookie. In seconds, 
        // 0 means cookie will be deleted when browser closes.

        define('SESSION_EXPIRE_TIME', 86400);
        // Hard expiration limit for sessions. Should be
        // greater or equal to SESSION_COOKIE_LIFETIME