Brion Vibber wrote:
> 2) No cross-platform consistency -- a link that works on Windows won't
work on Mac/Unix and vice versa
So is there an extension that will have working links for Macs at all? I'm not too fussed if it's consistant or not, i just need it to work occassionally just to please management!!
Cheers
I have a page titled "Basic Questions" and its pathway from the Main
Page is this:
Main Page > Journal > Basic Questions
For the Navigation side bar, how exactly do I format the text to
create the link that will take the user directly from the Main Page
to the Basic Questions?
I understand the format is "** target|link text" but I do not
understand this, even with the examples given. How would you write
out for the above example?
For the URL I am using the default version, not the "prettier" one,
in case that's relevant.
Thanks in advance.
I'm thinking of starting up a new Google
group, something like MediaWiki-Community.
It would be for anyone who works with
MediaWiki, or even with other wiki soft-
wares. My own interest is in community-
based wikis (wiki cities) as I run the
Baltimore Collective: a community re-
collection of things uniquely Baltimore
/ MediaWiki cultural archive project.
I also help run a couple Google groups.
(Baltimore, MD, is north of Washington,
DC, and south of Philadelphia, PA).
http://BaltoCo.org
Do you think this is a good idea? It
would be good if we could start up with
25 or so initial members.
You can give me negative feedback if
you think the idea sounds redundant or
has other problems. As for non-English
language postings, that sounds ok to me.
Please pass this along to anyone who
might be interested. You can email
me from our contact page ...
http://BaltoCo.org/contact
Thank you,
Richard
The Baltimore Collective
Hi,
I'm using Mediawiki 1.12.0, PHP 5.2.5, MySQL 5.0.24 and im having
trouble with the afore mentioned Extension.
It works perfectly on the Windows machines, but not on the Mac machines.
We're starting to get more Macs in now so getting this working would be
perfect. I'm due to go live with the Wiki in a weeks time!!
The links are to files on a server on the same network, but the macs
aren't connected to the domain (ie they don't run open directory).
When clicking on a link, the Mac internet browser (whether it be Safari
or Firefox) doesn't load the link. When you right click the link and
select "Open in new Tab/Window" an error message appears saying that it
can't get the object as it is NULL.
Any help appreciated.
Cheers
Dan
Welcome to mediawiki-l. This mailing list exists for discussion and questions
about the MediaWiki software[0]. Important MediaWiki-related announcements
(such as new versions) are also posted to this list.
Other resources.
If you only wish to receive announcements, you should subscribe to
mediawiki-announce[1] instead.
MediaWiki development discussion, and all Wikimedia technical questions, should
be directed to the wikitech-l[2] mailing list.
Several other MediaWiki-related lists exist:
- mediawiki-api[5] for API discussions,
- mediawiki-enterprise[6] for discussion of MediaWiki in the enterprise,
- mediawiki-cvs[7] for notification of commits to the Subversion repository,
- mediawiki-i18n[8] for discussion of MediaWiki internationalisation support,
- wikibugs-l[9] for notification of changes to the bug tracker.
List administrivia (unsubscribing, list archives).
To unsubscribe from this mailing list, visit [12]. Archives of previous postings
can be found at [3].
This list is also gatewayed to the Gmane NNTP server[4], which you can use to
read and post to the list.
Posting to the list.
Before posting to this list, please read the MediaWiki FAQ[10]. Many common
questions are answered here. You may also search the list archives to see if
your question has been asked before.
Please try to ask your question in a way that enables people to answer you.
Provide all relevant details, explain your problem clearly, etc. You may
wish to read [13], which explains how to ask questions well.
To post to the list, send mail to <mediawiki-l(a)lists.wikimedia.org>. This is a
public list, so you should not include confidential information in mails you
send.
When replying to an existing thread, use the "Reply" or "Followup" feature of
your mail client, so that clients that understand threading can sort your
message properly. When quoting other messages, please use the "inline" quoting
style[11], for clarity.
When creating a new thread, do not reply to an existing message and change the
subject. This will confuse peoples' mail readers, and will result in fewer
people reading your mail. Instead, compose a new message for your post.
Messages posted to the list have the "Reply-To" header set to the mailing list,
which means that by default, replies will go to the entire list. If you are
posting a reply which is only interesting to the original poster, and not the
list in general, you should change the reply to only go to that person. This
avoids cluttering the list with irrelevant traffic.
About this message.
This message is posted to the list once per week by <river(a)wikimedia.org>.
Please contact me if you have any questions or concerns about this mailing.
References.
[0] http://www.mediawiki.org/
[1] http://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
[2] http://lists.wikimedia.org/mailman/listinfo/wikitech-l
[3] http://lists.wikimedia.org/pipermail/mediawiki-l/
[4] http://dir.gmane.org/gmane.org.wikimedia.mediawiki
[5] http://lists.wikimedia.org/mailman/listinfo/mediawiki-api
[6] http://lists.wikimedia.org/mailman/listinfo/mediawiki-enterprise
[7] http://lists.wikimedia.org/mailman/listinfo/mediawiki-cvs
[8] http://lists.wikimedia.org/mailman/listinfo/mediawiki-i18n
[9] http://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[10] http://www.mediawiki.org/wiki/FAQ
[11] http://en.wikipedia.org/wiki/Posting_style#Inline_replying
[12] http://lists.wikimedia.org/mailman/listinfo/mediawiki-l
[13] http://www.catb.org/~esr/faqs/smart-questions.html
I am having an issue getting authenticated to an AD server. The thing
is though, it works for one of my AD groups, but when I try to
authenticate to another group it fails. It won't pull the user's DN
according the the debug below. Both working and non-working debug
look identical up until that point. Anyone have any ideas? I'm kind
of under the gun to get this to work. Could it be a character
limitation bug since the non-working group has a much deeper CN? Much
appreciated to any help someone can give.
Thanks!
-GT
I'm using the 1.2a LdapAuthentication.php extension.
http://www.mediawiki.org/wiki/Extension_talk:LDAP_Authentication
The WORKING group debug level 3:
Entering validDomain
User is using a valid domain.
Setting domain as: domainname.com
Entering getCanonicalName
Username isn't empty.
Munged username: doej
Entering authenticate
Entering Connect
Using TLS or not using encryption.
Using servers: ldap://ldap.domainname.com
Connected successfully
Entering getSearchString
Doing a straight bind
userdn is: doej(a)domainname.com
Binding as the user
Bound successfully
Entering getUserDN
Created a regular filter: (sAMAccountName=doej)
Entering getBaseDN
basedn is not set for this type of entry, trying to get the default basedn.
Entering getBaseDN
basedn is ou=administrators,dc=domainname,dc=com
Using base: ou=administrators,dc=domainname,dc=com
Fetched username is not a string (check your hook code...). This
message can be safely ignored if you do not have the
SetUsernameAttributeFromLDAP hook defined.
Pulled the user's DN: CN=John
Doe,OU=Users,OU=Administrators,DC=domainname,DC=com
Checking for (new style) group membership
Entering isMemberOfRequiredLdapGroup
Required groups:cn=dl-unix
admin,ou=groups,ou=administrators,dc=domainname,dc=com
Entering getUserGroups
Entering getGroups
Entering getBaseDN
basedn is not set for this type of entry, trying to get the default basedn.
Entering getBaseDN
basedn is ou=administrators,dc=domainname,dc=com
Search string: (&(member=CN=John
Doe,OU=Users,OU=Administrators,DC=domainname,DC=com)(objectclass=group))
Returned groups:cn=mis-tech,ou=groups,ou=administrators,dc=domainname,dc=com,cn=mis-tech,ou=groups,ou=administrators,dc=domainname,dc=com,cn=dl-unix
admin,ou=groups,ou=administrators,dc=domainname,dc=com,cn=mis-alert,ou=groups,ou=administrators,dc=domainname,dc=com,cn=ssltest,ou=groups,ou=administrators,dc=domainname,dc=com,cn=bomgar
users,ou=groups,ou=administrators,dc=domainname,dc=com,cn=rds-vpn,ou=groups,ou=administrators,dc=domainname,dc=com
Returned groups:,,,,,,
Found user in a group.
Authentication passed
Entering updateUser
Relevant entries for LDAP authentication in LocalSettings.php
require_once( 'LdapAuthentication.php' );
$wgAuth = new LdapAuthenticationPlugin();
$wgLDAPDomainNames = array( "domainname.com" );
$wgLDAPServerNames = array( "domainname.com"=>"ldap.domainname.com" );
$wgLDAPSearchStrings = array( "domainname.com"=>"USER-NAME(a)domainname.com" );
$wgLDAPEncryptionType = array( "domainname.com"=>"clear" );
$wgLDAPUseLocal = true;
$wgMinimalPasswordLength = 1;
#DNs in $wgLDAPRequiredGroups must be lowercase, as search result
attribute values are...
$wgLDAPRequiredGroups = array( "domainname.com"=>array("cn=dl-unix
admin,ou=groups,ou=administrators,dc=domainname,dc=com") );
$wgLDAPGroupUseFullDN = array( "domainname.com"=>true );
$wgLDAPGroupObjectclass = array( "domainname.com"=>"group" );
$wgLDAPGroupAttribute = array( "domainname.com"=>"member" );
$wgLDAPGroupSearchNestedGroups = array( "domainname.com"=>true );
$wgLDAPBaseDNs = array(
"domainname.com"=>"ou=administrators,dc=domainname,dc=com" );
$wgLDAPSearchAttributes = array( "domainname.com"=>"sAMAccountName" );
NON WORKING group debug level 3:
Entering validDomain
User is using a valid domain.
Setting domain as: domainname.com
Entering getCanonicalName
Username isn't empty.
Munged username: doej
Entering authenticate
Entering Connect
Using TLS or not using encryption.
Using servers: ldap://ldap.domainname.com
Connected successfully
Entering getSearchString
Doing a straight bind
userdn is: doej(a)domainname.com
Binding as the user
Bound successfully
Entering getUserDN
Created a regular filter: (sAMAccountName=doej)
Entering getBaseDN
basedn is not set for this type of entry, trying to get the default basedn.
Entering getBaseDN
basedn is ou=groups,ou=town a,ou=sites,dc=domainname,dc=com
Using base: ou=groups,ou=town a,ou=sites,dc=domainname,dc=com
Fetched username is not a string (check your hook code...). This
message can be safely ignored if you do not have the
SetUsernameAttributeFromLDAP hook defined.
Pulled the user's DN:
Checking for (new style) group membership
Entering isMemberOfRequiredLdapGroup
Required groups:cn=wiki-w,ou=groups,ou=town a,ou=sites,dc=domainname,dc=com
Entering getUserGroups
Entering getGroups
Entering getBaseDN
basedn is not set for this type of entry, trying to get the default basedn.
Entering getBaseDN
basedn is ou=groups,ou=town a,ou=sites,dc=domainname,dc=com
Search string: (&(member=)(objectclass=group))
Returned groups:
Returned groups:
Couldn't find the user in any groups (1).
Entering strict.
Returning false in strict().
Entering modifyUITemplate
Allowing the local domain, adding it to the list.
Relevant entries for LDAP authentication in LocalSettings.php
require_once( 'LdapAuthentication.php' );
$wgAuth = new LdapAuthenticationPlugin();
$wgLDAPDomainNames = array( "domainname.com" );
$wgLDAPServerNames = array( "domainname.com"=>"ldap.domainname.com" );
$wgLDAPSearchStrings = array( "domainname.com"=>"USER-NAME(a)domainname.com" );
$wgLDAPEncryptionType = array( "domainname.com"=>"clear" );
$wgLDAPUseLocal = true;
$wgMinimalPasswordLength = 1;
#DNs in $wgLDAPRequiredGroups must be lowercase, as search result
attribute values are...
$wgLDAPRequiredGroups = array(
"domainname.com"=>array("cn=wiki-w,ou=groups,ou=town
a,ou=sites,dc=domainname,dc=com") );
$wgLDAPGroupUseFullDN = array( "domainname.com"=>true );
$wgLDAPGroupObjectclass = array( "domainname.com"=>"group" );
$wgLDAPGroupAttribute = array( "domainname.com"=>"member" );
$wgLDAPGroupSearchNestedGroups = array( "domainname.com"=>true );
$wgLDAPBaseDNs = array( "domainname.com"=>"ou=groups,ou=town
a,ou=sites,dc=domainname,dc=com" );
$wgLDAPSearchAttributes = array( "domainname.com"=>"sAMAccountName" );
Ryan,
A co-worker who had problems with a different box trying to authenticate
via this AD server also pointed out to me that the new certifcate from
the AD server does not have the fully-qualified domain name in it.
I used the x509 command to get info on the certficates. On the old one
I see:
Subject: CN=chaent3b.main.foo.com [name has been changed]
On the new one I see:
Subject: DC=com, DC=foo, DC=main, OU=Domain Controllers, CN=CHAENT3B
He also suggested I might just want to turn off SSL encryption for
authentication. I tried commenting out the line that specifies ssl but
got errors from TLS with that configuration.
If the right thing to do is to go up to the CA Cert, which PEM do I
specify? I can use x509 to find the correct one probably, but not sure
that certificate hasn't changed either since it was first loaded on my
host.
The two certificates I have looked at so far with x509 (the AD server
pem from a year ago and the one changed 2 days ago) have different CA
Issuers listed:
OLD: RI:http://foochaeca.foo.com/CertEnroll/longxxx.crt
NEW: URI:http://multi.foo.com/ca/xxx.crt
Thanks much for your help. I'm so confused right now that my head is
spinning!
- Beth
-----Original Message-----
From: Russell, Elizabeth
Sent: Wednesday, March 26, 2008 10:44 AM
To: 'MediaWiki announcements and site admin list'
Subject: RE: [Mediawiki-l] LDAP-Error: Can't contact LDAP server
My predecessor had commneted out the TLS_CACERT line:
#TLS_CACERT /usr/share/ssl/certs/tva_ad.pem
TLS_CACERTDIR /usr/share/ssl/certs
I think he had also converted the AD server's certificate to PEM format,
since I see about 5 .pem files in the ./certs directory
I should add.... We are authenticating via Active Directory server, and
I am on Linux.
I've tried taking the certificate I downloaded from the AD server named
in LocalSettings.php and just renaming as .pem, but I get the same
errors.
Will the TSL_CACERT work with Active Directory configuration?
-----Original Message-----
From: mediawiki-l-bounces(a)lists.wikimedia.org
[mailto:mediawiki-l-bounces@lists.wikimedia.org] On Behalf Of Lane, Ryan
Sent: Wednesday, March 26, 2008 10:29 AM
To: MediaWiki announcements and site admin list
Subject: Re: [Mediawiki-l] LDAP-Error: Can't contact LDAP server
> The LDAP server where we are doing our authentication had to change
> certificate, and now when user attempts to login for edit
> purposes they
> get Login error: Incorrect password entered. Please try again.
You should trust the CA certificate, not the server certificate; if you
do so, you won't have this problem next time.
If you are on a Linux system, the file you need to modify is going to be
/etc/openldap/ldap.conf. You need to add the following options:
TLS_CACERT <path to the CA certificate that signed your server
certificate>
TLS_CACERTDIR <same as above, minus the filename>
I believe the ca cert file needs to be in PEM format (base64). If the CA
certificate is in DER format for some reason (unlikely), you can convert
to PEM with openssl:
openssl x509 -inform DER -outform PEM -in cacertinderformat.cer
-out cacertinpemformat.cer
You can check the certificate information as well:
openssl x509 -noout -text -in cacert.cer
V/r,
Ryan Lane
_______________________________________________
MediaWiki-l mailing list
MediaWiki-l(a)lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
I've tried searching around, but it doesn't seem like anyone has had
this problem before. I'm still a bit new to hacking at the MediaWiki
API, so I figured I'd ask here before diving into the MediaWiki source
code.
>From within the callback of either a tag or parser function hook, is
there a way to determine whether or not the page being rendered is a
template?
Here's a simple example of about what I'm talking:
$wgParser->setHook( 'foo', 'fooParse' );
function fooParse( $input, $args, $parser ) {
if( WE ARE RENDERING INSIDE A TEMPLATE )
return 'FOO';
else
return 'BAR';
}
Here's my underlying motivation: I want to be able to label sections
for transclusion from within a template (using either the LST or DPL
extensions). Currently, this is how it's done:
//// Article A ////
<section begin=content />
This is some text to be transcluded.
<section end=content />
//// Article B ////
%% Transclude the text from labeled section `content' of [[A]] %%
The above code works perfectly, however, here's what I want to be able to do:
//// Template:BeginConent ////
<section begin=content />
//// Template:EndContent ////
<section end=content />
//// Article A ////
{{BeginContent}}
This is some text to be transcluded.
{{EndContent}}
That, however, doesn't work (the transcluded text ends up being
empty). Here's my theory on why it doesn't work from looking at the
LST and DPL extensions' code:
They each do something like this:
$wgParser->setHook( 'section', array( __CLASS__, 'noop' ) );
where 'noop' is a function that just returns the empty string, which
is what hides the <section ... /> tags from being rendered in the wiki
text. Then, inside the functions that do the transclusion, it
actually parses the raw DOM of the page to be transcluded looking for
the <section> tags (which are still in the raw DOM even though they
have not been rendered to the wiki text).
Although I admit that I do not fully comprehend the order in which
MediaWiki parses/expands/transcludes templates, my theory is that the
`<section begin=content />' tag inside the `BeginContent' template
above is being rendered inside the template before it is transcluded
into article A, thus, the section tags are not being included in A's
DOM. My theoretical solution to this problem is to hack the `section'
tag's hook in DPL such that it will only render to an empty string
when inside of the ultimate article.
Is this even possible? Does anyone have any alternate theories and/or
suggestions?
Thanks!
- Evan
I notice that "iw_url" has changed from a char(127) to a blob (was
this in 1.12.x or before?).
Running update.php leaves everything as it was before, but a fresh
install produces the new table structure (with a blob for the URL).
Both seem to work, but I am concerned about how to move to the new
table structure (table interwiki).
Any pointers?
Cheers!
Gordo
--
"Think Feynman"/////////
http://pobox.com/~gordo/
gordon.joly(a)pobox.com///