dear group,
i'm using mediawiki1.9.3 with LDAP_Authentication 1.1d. for some reason, there aren't any group-enrties that i need in our ldap, so i have to use an other special grouplist.
what i want is:
- user authenticates with his ldap-account/password against our directory-server (works), *and*
- user is in my grouplist (handmade list, or database-connection to a infosystem with group-information).
so my question is: where to put a hook, that users who aren't in my list will not be able to login?
regards jens
You might be able to do this using the 'AutoAuthenticate' hook found in StubObject.php.
Others may be able to suggest a better place.
-- Jim
On 4/5/07, Jens Vieler jens.vieler@fernuni-hagen.de wrote:
dear group,
i'm using mediawiki1.9.3 with LDAP_Authentication 1.1d. for some reason, there aren't any group-enrties that i need in our ldap, so i have to use an other special grouplist.
what i want is:
- user authenticates with his ldap-account/password against our
directory-server (works), *and*
- user is in my grouplist (handmade list, or database-connection to a
infosystem with group-information).
so my question is: where to put a hook, that users who aren't in my list will not be able to login?
regards jens
MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/mediawiki-l
You might be able to do this using the 'AutoAuthenticate' hook found in StubObject.php.
Others may be able to suggest a better place.
-- Jim
I think this would occur too early for what he wants.
What we really need for situations like this is some type of stackable authentication system. I already have a planned way to stack auto-authentication plugins with regular authentication plugins (I just need to document it somewhere). I can probably create a plugin to stack regular authentication plugins while I'm at it...
V/r,
Ryan Lane
You can't just make a special LDAP group, or are you saying your group is in some external (non-LDAP) application/database? If it is the latter, you could add a hook to the authenticate method in the ldap plugin, and add your code in that hook. I'd accept that into the plugin (the hook that is).
-----Original Message----- From: mediawiki-l-bounces@lists.wikimedia.org [mailto:mediawiki-l-bounces@lists.wikimedia.org] On Behalf Of Jens Vieler Sent: Thursday, April 05, 2007 12:59 AM To: MediaWiki announcements and site admin list Subject: [Mediawiki-l] Hook for special grouplist?
dear group,
i'm using mediawiki1.9.3 with LDAP_Authentication 1.1d. for some reason, there aren't any group-enrties that i need in our ldap, so i have to use an other special grouplist.
what i want is:
- user authenticates with his ldap-account/password against
our directory-server (works), *and*
- user is in my grouplist (handmade list, or
database-connection to a infosystem with group-information).
so my question is: where to put a hook, that users who aren't in my list will not be able to login?
regards jens
MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/mediawiki-l
hi,
Lane, Ryan schrieb:
You can't just make a special LDAP group, or are you saying your group is in some external (non-LDAP) application/database? If it is the latter, you could add a hook to the authenticate method in the ldap plugin, and add your code in that hook. I'd accept that into the plugin (the hook that is).
thanks a lot.
no, we can't change the LDAP-attributes. first we want to ask the LDAP-server weather the user exists and the given password is the correct one - this works fine for all our known LDAP-users. in a second step (hook) i want to ask a external application/database/flatfile-user-list if the user is a member of a group which should work with that wiki. for example: "is this student (user) a member of that course (group)", while the course-membership isn't part of the LDAP-entry.
my question: is there a standard entrypoint where to add a hook? or should i add my code-snippet in function authenticate() just after the global definitions and return a false if membership-control failes?!?
thanks a lot jens
mediawiki-l@lists.wikimedia.org