Hello!
I would like to install a mediawiki, to supply our forum (based on Woltlab Burning Board v3).
Is there any possibility to use registered user-accounts from the WBB in a Mediawiki-installation?
best regards, Jan
On 12/08/07, Jan 2036@gmx.de wrote:
Is there any possibility to use registered user-accounts from the WBB in a Mediawiki-installation?
MediaWiki can be set up to use an "authentication plugin" (which is a class implementing the AuthPlugin abstract, see includes/AuthPlugin.php) to authenticate users with external databases. A classic example of this is the excellent LDAP Authentication extension by Ryan Lane.
In general, if you know how your bulletin board software treats passwords before storing them in the database (if you have access to source code, this is obviously straightforward, provided you can work out where to look), then the whole process is not difficult once you're familiar with the nuances of AuthPlugin itself.
Rob Church
Thanks, Rob.
Wbb is closed software (like vBulletin, and some others) ... but I will try to learn more about AuthPlugin (up to now, I thought, AuthPlugin is be only designed for LDAP).
Thanks, Jan
On 12/08/07, Jan 2036@gmx.de wrote:
Is there any possibility to use registered user-accounts from the WBB in a Mediawiki-installation?
MediaWiki can be set up to use an "authentication plugin" (which is a class implementing the AuthPlugin abstract, see includes/AuthPlugin.php) to authenticate users with external databases. A classic example of this is the excellent LDAP Authentication extension by Ryan Lane.
In general, if you know how your bulletin board software treats passwords before storing them in the database (if you have access to source code, this is obviously straightforward, provided you can work out where to look), then the whole process is not difficult once you're familiar with the nuances of AuthPlugin itself.
Rob Church
MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/mediawiki-l
On 14/08/07, Jan 2036@gmx.de wrote:
Wbb is closed software (like vBulletin, and some others) ... but I will try to learn more about AuthPlugin (up to now, I thought, AuthPlugin is be only designed for LDAP).
Nope.* LDAP is, of course, a prominent example, but authentication plugins can be used to authenticate users against all sorts of sources, including some we haven't even invented yet. ;)
[* = Well, it may well have been, but ultimately, it shouldn't be thought of as LDAP exclusive any more.]
Rob Church
Wbb is closed software (like vBulletin, and some others) ... but I
will
try to learn more about AuthPlugin (up to now, I thought, AuthPlugin is be
only
designed for LDAP).
AuthPlugin is used in quite a few authentication plugins, including plugins for a few pieces of forum software. For all of the authentication plugins (that are correctly categorized) on mediawiki.org, see:
http://www.mediawiki.org/wiki/Category:Authentication_and_Login
Here are a couple that are specifically for forums:
http://www.mediawiki.org/wiki/Extension:PHPBB/Users_Integration http://www.mediawiki.org/wiki/Extension:PunBB_Authentication http://www.mediawiki.org/wiki/Extension:Invision_Power_Board_Authenticat ion
I haven't used them, so I can't vouch for their quality, but the phpbb one is listed as stable, and has quite a few releases. They may at least point you in the right direction.
V/r,
Ryan Lane
Lane, Ryan wrote:
http://www.mediawiki.org/wiki/Category:Authentication_and_Login
So the SSO hack we've been using on RHEL 3 and 4 (busted in RHEL 5!) to authenticate off of our AD infrastructure is to tell RHEL that the AD stuff is a Kerberos KDC. Works pretty well - all I need to do is a useradd on the person's AD login it's maintenance free from there as far as I'm concerned plus I control just which AD users can get in.
Anyone doing something like this with MW 1.10? I see http://www.mediawiki.org/wiki/Extension:LDAP_Authentication and that might do it, but I wasn't the one that came up with the scheme we use and don't know enough about AD and Kerberos to be able to do any necessary hacking.
I realize that I couldn't control who had an account (like having to do a useradd on RHEL), but I can probably do something similar via a group in AD.
On 8/15/07, Peter Laws plaws@ou.edu wrote:
Lane, Ryan wrote:
http://www.mediawiki.org/wiki/Category:Authentication_and_LoginSo the SSO hack we've been using on RHEL 3 and 4 (busted in RHEL 5!) to authenticate off of our AD infrastructure is to tell RHEL that the AD stuff is a Kerberos KDC. Works pretty well - all I need to do is a useradd on the person's AD login it's maintenance free from there as far as I'm concerned plus I control just which AD users can get in.
Anyone doing something like this with MW 1.10? I see http://www.mediawiki.org/wiki/Extension:LDAP_Authentication and that might do it
LDAP_Authentication does not do SSO.
Our Plexcel product does SSO and then some:
http://www.ioplex.com/mediawiki_plugin.html
Mike
So the SSO hack we've been using on RHEL 3 and 4 (busted in RHEL 5!)
to
authenticate off of our AD infrastructure is to tell RHEL that the AD stuff is a Kerberos KDC. Works pretty well - all I need to do is a useradd
on
the person's AD login it's maintenance free from there as far as I'm concerned plus I control just which AD users can get in.
Anyone doing something like this with MW 1.10? I see http://www.mediawiki.org/wiki/Extension:LDAP_Authentication and that
might
do it, but I wasn't the one that came up with the scheme we use and
don't
know enough about AD and Kerberos to be able to do any necessary
hacking.
I realize that I couldn't control who had an account (like having to
do a
useradd on RHEL), but I can probably do something similar via a group
in
AD.
The LDAP plugin doesn't (currently) do Kerberos authentication. Users will have to log in to your wiki using their AD username/password. CAC/Smartcard authentication is currently supported though.
I'm planning on adding http authentication support to the plugin soon. This support would allow you to use any apache module (including Kerberos) to do authentication, and then use LDAP for authorization and group/user information synchronization.
You can control access in a number of ways: roles, LDAP groups, mediawiki groups, attributes, OUs, etc. You just need to be crafty as to how you configure the plugin. I'll readily admit that the configuration examples are lacking in this area...
V/r,
Ryan Lane
Thanks for rescuing my lost logo.
This, I'm sure, is in the docs, I just can't put my finger on it. How do I make the WikiSysop user work? I can see him on Special:Listusers, but where do I set the password?
Like I said, I'm sure this is in the docs, but a pointer would be appreciated!
Thanks, Peter
From the weekly posting "Welcome to mediawiki-l":
When creating a new thread, do not reply to an existing message and change the subject. This will confuse peoples' mail readers, and will result in fewer people reading your mail. Instead, compose a new message for your post.
(I don't mean to offend, only to inform.)
-- F.
on mediawiki.org, see
Yes ... I had searched on mediawiki, of course. I already know about the existence of a phpBB-plugin ... so I hope, there would be something compareable for Woltlab wbb :)
Jan
mediawiki-l@lists.wikimedia.org