On Sat, 2015-02-28 at 03:27 +0000, Alex Monk wrote:
(CCing wikitech-l) On 28 February 2015 at 01:04, John Horne john.horne@plymouth.ac.uk wrote:
$wgAutopromote['sysop'] = array(APCOND_ISIP, '141.163.4.11');
Wait, what? MediaWiki supports that?! You should not do that.
Yes, MW allowed me to do this, but reading your reply I can see why it is not something we want to do. It also explains why the 'user list' page seemed to allocate everyone to the administrators group.
We have now changed things a bit in that the 'editor' permissions have been pushed into the 'user' group (most were there anyway).
We also removed any other 'autopromote' settings. By logging in using the default login mechanism, and with the initially created account, I could then set my own account to be administrator and bureaucrat. After that everything looked fine.
However, we are intending to use the Shibboleth extension (as forked on github) as the main login mechanism. When we reapplied this, my groups were gone again! It seems the extension has a bug in that it removes a users groups, but never adds them back again. I have corrected this, and submitted a patch upstream.
So now we are happy. We have Shibboleth login working fine, and the users groups are as they should be and remain so upon login/logout. We are now not using autopromote at all.
Many thanks for your reply,
John.