On Sat, 2015-02-28 at 03:27 +0000, Alex Monk wrote:
(CCing wikitech-l)
On 28 February 2015 at 01:04, John Horne <john.horne(a)plymouth.ac.uk> wrote:
$wgAutopromote['sysop'] = array(APCOND_ISIP, '141.163.4.11');
Wait, what? MediaWiki supports that?! You should not do that.
Yes, MW allowed me to do this, but reading your reply I can see why it
is not something we want to do. It also explains why the 'user list'
page seemed to allocate everyone to the administrators group.
We have now changed things a bit in that the 'editor' permissions have
been pushed into the 'user' group (most were there anyway).
We also removed any other 'autopromote' settings. By logging in using
the default login mechanism, and with the initially created account, I
could then set my own account to be administrator and bureaucrat. After
that everything looked fine.
However, we are intending to use the Shibboleth extension (as forked on
github) as the main login mechanism. When we reapplied this, my groups
were gone again! It seems the extension has a bug in that it removes a
users groups, but never adds them back again. I have corrected this, and
submitted a patch upstream.
So now we are happy. We have Shibboleth login working fine, and the
users groups are as they should be and remain so upon login/logout. We
are now not using autopromote at all.
Many thanks for your reply,
John.
--
----------------------------------------------------
John Horne Tel: +44 (0)1752 587287
Plymouth University, UK