I was just looking at a very similar problem. After looking through the code, it appears to me that MW just stores a UID in a session variable. So it seems if you modified your login/logout scheme to set this variable, you'd be effectively integrated.
From that point you'd have to decide how to manage MW cookies. I'm thinking about just disabling MW auth cookies and redirecting to my own login scheme upon failure to detect a valid session ID.
Prior to doing this, you'd need to disable the MW new user signup feature, and hack your own new user signup to write the account information to the MW user database.
I'm more than open to have this line of reasoning critiqued. I'm not crazy about this approach but it's the best I can envision given the stock products involved (I intend to work with vBulletin).
-----Original Message----- From: Philip Gabbert wiki@gpcentre.net Sent: Apr 17, 2005 7:46 PM To: MediaWiki List mediawiki-l@Wikimedia.org Subject: [Mediawiki-l] Current site integration
I currently run a site with a custom build session login/out with an already built access/auth system.
I'm wondering if there's a simple way to integrate MediaWiki? I can see it's user tables are rather simple, but I'd prefer to have a central login, not two locations of user account login information (security/consistency sakes).
I'd like to MediaWiki to use my login/out schema and I can use MW's own auth system by simply writing the data it expects to WM's user table.
Has anybody had any experience in this matter? I didn't see anything off hand through my reading in the Administrators or "hack wiki" section of the MediaWiki's help section.
Thanks ahead of time.
On 4/17/05, Carlton B carltonb@mindspring.com wrote:
I was just looking at a very similar problem. After looking through the code, it appears to me that MW just stores a UID in a session variable. So it seems if you modified your login/logout scheme to set this variable, you'd be effectively integrated.
From that point you'd have to decide how to manage MW cookies. I'm thinking about just disabling MW auth cookies and redirecting to my own login scheme upon failure to detect a valid session ID.
Prior to doing this, you'd need to disable the MW new user signup feature, and hack your own new user signup to write the account information to the MW user database.
The AuthPlugin interface has an option for this, I think. It's still a little murky for me.
The thing is, the auth plugin only tells MW if a certain user/password is correct. So I think a user would have to login again on the wiki if they were just on, say, your board.
More documentation on this would be helpful.
-- Jamie ------------------------------------------------------------------- http://endeavour.zapto.org/astro73/ Thank you to JosephM for inviting me to Gmail! Have lots of invites. Gmail now had 2GB.
mediawiki-l@lists.wikimedia.org