Hi folks,
The users at my site keep forgetting their MediaWiki passwords often enough that I wonder: might it be possible to configure MediaWiki (not Apache) to authenticate them using Kerberos instead?
Thanks,
Jaap
remove
2013/4/20 Jaap Winius jwinius@umrk.nl
Hi folks,
The users at my site keep forgetting their MediaWiki passwords often enough that I wonder: might it be possible to configure MediaWiki (not Apache) to authenticate them using Kerberos instead?
Thanks,
Jaap
______________________________**_________________ MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.**org MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.org/**mailman/listinfo/mediawiki-lhttps://lists.wikimedia.org/mailman/listinfo/mediawiki-l
On 21/04/13 02:02, Jaap Winius wrote:
Hi folks,
The users at my site keep forgetting their MediaWiki passwords often enough that I wonder: might it be possible to configure MediaWiki (not Apache) to authenticate them using Kerberos instead?
Thanks,
Jaap
Yes, you can use the extension http://www.mediawiki.org/wiki/Extension:LDAP_Authentication
PS: Gerente de Sistemas, use https://lists.wikimedia.org/mailman/listinfo/mediawiki-l to unsbuscribe.
Quoting Platonides Platonides@gmail.com:
On 21/04/13 02:02, Jaap Winius wrote:
... might it be possible to configure MediaWiki (not Apache) to authenticate them using Kerberos instead?
Yes, you can use the extension http://www.mediawiki.org/wiki/Extension:LDAP_Authentication
Oh, fantastic! I saw that page but didn't read any further due to its misleading title. It should be called "Extension:LDAP integration".
Thanks!
Jaap
Quoting Platonides Platonides@gmail.com:
On 21/04/13 02:02, Jaap Winius wrote:
The users at my site keep forgetting their MediaWiki passwords often enough that I wonder: might it be possible to configure MediaWiki (not Apache) to authenticate them using Kerberos instead?
Yes, you can use the extension http://www.mediawiki.org/wiki/Extension:LDAP_Authentication
After finally getting around to studying it, it looks like it only supports the type of Kerberos authentication that comes with M$ Active Directory (AD); not MIT Kerberos, which is what I use. I guess I should have been more specific to begin with.
This page, http://www.mediawiki.org/wiki/Extension:LDAP_Authentication/Kerberos_Configu..., starts by explaining how to configure Apache with mod_auth_kerb, which works fine with MIT Kerberos, but that solution doesn't actually have anything to do with the MediaWiki extension in question.
The second part of the page includes two examples of how to modify MediaWiki (presumably LocalSettings.php), including one to make it work with the M$ AD Kerberos implementation, but nothing for MIT Kerberos. In particular, there seems to be no way in LdapAuthentication.php to configure the name of Kerberos realm and/or the path to the keytab file; two items that AFAIK are always necessary to enable support for MIT Kerberos.
Is this an accurate assessment? If so, is there perhaps another way to add support for MIT Kerberos authentication to MediaWiki?
Cheers,
Jaap
mediawiki-l@lists.wikimedia.org