[Mediawiki-l] Identification without Authentication

Lane, Ryan Ryan.Lane at ocean.navo.navy.mil
Mon Mar 12 17:17:27 UTC 2007


Although I agree with pretty much everyone else here in thinking this is
a terrible idea... Someone else obviously had this terrible idea as
well. I think this site has exactly what you are looking for:

http://adarshbhat.blogspot.com/2006/01/ldap-authentication-for-mediawiki
.html

You must *really* trust your users (or anyone who can figure out
usernames).

Using Kerberos, NTLM, SSL, Shibboleth, or some other type of
auto-authentication is a MUCH better idea if you can possibly use it. 

> -----Original Message-----
> From: mediawiki-l-bounces at lists.wikimedia.org 
> [mailto:mediawiki-l-bounces at lists.wikimedia.org] On Behalf Of 
> Guilhem Bonnefille
> Sent: Friday, March 09, 2007 2:18 PM
> To: mediawiki-l at lists.wikimedia.org
> Subject: [Mediawiki-l] Identification without Authentication
> 
> Hi,
> 
> I'm evaluating the use of MediaWiki in a corporate server.
> In such environment, my need for the "login" stage is only to 
> identify people. I do not need them to authenticate (no need 
> to password). The need is to know who made what, in a 
> "confident" world.
> 
> Is it possible to configure MediaWiki to only require a login (without
> password) and only check that this login exists in a LDAP database?
> 
> Thanks in advance for any tips.
> --
> Guilhem BONNEFILLE
> -=- #UIN: 15146515 JID: guyou at im.apinc.org MSN: 
> guilhem_bonnefille at hotmail.com
> -=- mailto:guilhem.bonnefille at gmail.com
> -=- http://nathguil.free.fr/
> 
> _______________________________________________
> MediaWiki-l mailing list
> MediaWiki-l at lists.wikimedia.org
> http://lists.wikimedia.org/mailman/listinfo/mediawiki-l
> 



More information about the MediaWiki-l mailing list