Also see discussion in <a thread<a/>.

Fossil already supports REMOTE_USER when running as CGI, which means it can be set up to pick up the user name (for existing users only) from the webserver, which can be set up to handle LDAP or any other authentication. Problems here are that the fossil client doesn't support basic or digest authentication, which means it can't talk to a fossil server behind LDAP (or any other external authentication scheme) at the moment.