Quoting Platonides <Platonides(a)gmail.com>om>:
On 21/04/13 02:02, Jaap Winius wrote:
The users at my site keep forgetting their MediaWiki passwords often
enough that I wonder: might it be possible to configure MediaWiki (not
Apache) to authenticate them using Kerberos instead?
Yes, you can use the extension
http://www.mediawiki.org/wiki/Extension:LDAP_Authentication
After finally getting around to studying it, it looks like it only
supports the type of Kerberos authentication that comes with M$ Active
Directory (AD); not MIT Kerberos, which is what I use. I guess I
should have been more specific to begin with.
This page,
http://www.mediawiki.org/wiki/Extension:LDAP_Authentication/Kerberos_Config…,
starts by explaining how to configure Apache with mod_auth_kerb, which works fine with MIT
Kerberos, but that solution doesn't actually have anything to do with the MediaWiki
extension in
question.
The second part of the page includes two examples of how to modify
MediaWiki (presumably LocalSettings.php), including one to make it
work with the M$ AD Kerberos implementation, but nothing for MIT
Kerberos. In particular, there seems to be no way in
LdapAuthentication.php to configure the name of Kerberos realm and/or
the path to the keytab file; two items that AFAIK are always necessary
to enable support for MIT Kerberos.
Is this an accurate assessment? If so, is there perhaps another way to
add support for MIT Kerberos authentication to MediaWiki?
Cheers,
Jaap