Hello!
I'm new to the list, but have been using the mediawiki for a few months now, and am now interested in trying to introduce into my workplace.
One of the show stoppers, at least as near as I can tell, is our use of SiteMinder for user auth. I'm wondering how difficult it would be to get MediaWiki to play with it.
Protecting the site is easy, obviously. But how to get MW to use the SM username when attributing edits? And we don't want to do something crazy like have to load all our company IDs into the MW user database.
For what it's worth, I'm not too worried about admins. I think we'd be able to just create 'real' MW accounts which match the individuals SM usernames. This is just a hunch, so correct me if I'm wrong.
Cary
On 14/07/05, Cary Collett cary@ratatosk.org wrote:
One of the show stoppers, at least as near as I can tell, is our use of SiteMinder for user auth. I'm wondering how difficult it would be to get MediaWiki to play with it.
I don't know the details of it, but there is an "AuthPlugin" facility in MediaWiki for exactly this kind of task; I know that one successful implementation uses an LDAP server to do the user authentication.
See http://meta.wikimedia.org/wiki/Authentication and the pages linked from there, and includes/AuthPlugin.php in the source for more details.
Our approach is to auto-create accounts in MW if the user presents to the authentication routine with a valid "netid" (enterprise account). There is a hook in the authentication plugin which helps with this.
[ Just beginning to code this, so this approach is not yet running... ]
-- Joshua
On 7/14/05 9:49 AM, "Cary Collett" cary@ratatosk.org wrote:
Hello!
I'm new to the list, but have been using the mediawiki for a few months now, and am now interested in trying to introduce into my workplace.
One of the show stoppers, at least as near as I can tell, is our use of SiteMinder for user auth. I'm wondering how difficult it would be to get MediaWiki to play with it.
Protecting the site is easy, obviously. But how to get MW to use the SM username when attributing edits? And we don't want to do something crazy like have to load all our company IDs into the MW user database.
For what it's worth, I'm not too worried about admins. I think we'd be able to just create 'real' MW accounts which match the individuals SM usernames. This is just a hunch, so correct me if I'm wrong.
Cary
mediawiki-l@lists.wikimedia.org