Author: Philipp_Kohl
Description:
I am using MediaWiki in an Intranet. The Web-Server is secured by a Single Sign
On, but the mechanism is simmilar to htaccess. I would wish for the wiki to read
the authentification data from the Web-server and use it for user
identification. In combination with LDAP that would essentially be a Single Sign on.
Version: unspecified
Severity: enhancement
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | None | T2828 HTTP authentication | |||
| Resolved | None | T2892 Authentication plugin interface |
mediazilla wrote:
I am also using MediaWiki in an Intranet. We also have Single Sign On. Any
integration with http basic auth is highly desired. I have done some mild
integration by pulling the REMOTE_USER variables and auto-populating some forms
but it is rudimentary. We would like to be able to set up MediaWiki to trust
REMOTE_USER (or some other server environment variable that contains the
username) and not ask for passwords or keep account information in a seperate
userstore. Integration with LDAP would be fine, but not required.
(In reply to comment #1)
I am also using MediaWiki in an Intranet. We also have Single Sign On. Any
integration with http basic auth is highly desired. I have done some mild
integration by pulling the REMOTE_USER variables and auto-populating some forms
but it is rudimentary. We would like to be able to set up MediaWiki to trust
REMOTE_USER (or some other server environment variable that contains the
username) and not ask for passwords or keep account information in a seperate
userstore. Integration with LDAP would be fine, but not required.
I have written this for my intranet.
Please read http://bugzilla.wikipedia.org/show_bug.cgi?id=1360 "Auto-login /
Auto-account-creation by hostname for intranet MediaWikis".
The changes are only a very few lines in User.php. Please let me know, if you
are interested, then I will send you the patch.
For LDAP see Ryan Lane's patch http://meta.wikipedia.org/LDAP and
http://bugzilla.wikipedia.org/show_bug.cgi?id=814 .
Tom
This is implemented by two extensions:
http://www.mediawiki.org/wiki/Extension:HttpAuth
http://www.mediawiki.org/wiki/Extension:AutomaticREMOTE_USER
They are part of the 'Authentication and Login' extensions:
http://www.mediawiki.org/wiki/Category:Authentication_and_Login
Marking bug as fixed.