You're welcome. I wonder how APCOND_ISIP and APCOND_IPINRANGE were expected to work, and if we should deprecate/remove them.
On 28 February 2015 at 23:17, John Horne john.horne@plymouth.ac.uk wrote:
On Sat, 2015-02-28 at 03:27 +0000, Alex Monk wrote:
(CCing wikitech-l) On 28 February 2015 at 01:04, John Horne john.horne@plymouth.ac.uk
wrote:
$wgAutopromote['sysop'] = array(APCOND_ISIP, '141.163.4.11');
Wait, what? MediaWiki supports that?! You should not do that.
Yes, MW allowed me to do this, but reading your reply I can see why it is not something we want to do. It also explains why the 'user list' page seemed to allocate everyone to the administrators group.
We have now changed things a bit in that the 'editor' permissions have been pushed into the 'user' group (most were there anyway).
We also removed any other 'autopromote' settings. By logging in using the default login mechanism, and with the initially created account, I could then set my own account to be administrator and bureaucrat. After that everything looked fine.
However, we are intending to use the Shibboleth extension (as forked on github) as the main login mechanism. When we reapplied this, my groups were gone again! It seems the extension has a bug in that it removes a users groups, but never adds them back again. I have corrected this, and submitted a patch upstream.
So now we are happy. We have Shibboleth login working fine, and the users groups are as they should be and remain so upon login/logout. We are now not using autopromote at all.
Many thanks for your reply,
John.
--
John Horne Tel: +44 (0)1752 587287 Plymouth University, UK
MediaWiki-l mailing list To unsubscribe, go to: https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
wikitech-l@lists.wikimedia.org