Extension:LDAP Authentication/Roadmap

From MediaWiki.org
Jump to: navigation, search

About - Requirements - Configuration - Options - Changelog - Roadmap - Suggestions - User provided info - FAQ - Support

MediaWiki extensions manual - list
Crystal Clear action run.png
LDAP Authentication

Release status: stable

Implementation User identity
Description Provides LDAP authentication, and some authorization functionality for MediaWiki
Author(s) Ryan Lane (Ryan laneTalk)
Last version 1.2d (2010-11-23)
MediaWiki 1.6+
License GPL
Download Download snapshot
Subversion [Help]

Browse source code
View code changes

Contents

[edit] Next version

I have a bad memory, and need a to-do list. If I have promised to add something for you in the next version, and it isn't in the list below, please add it.

[edit] v1.2d

  • Fix referencs to $ldapconn that should be $this->ldapconn in primary group code for AD (in SVN)
  • Fix User not loaded from session issue [1]
  • Change behavior of locally managed groups to allow MediaWiki specific groups to be overridden [2]
  • Fix the username-authentication issue once and for all (hopefully without nasty hacks) [3] [4]
  • Fix the issue where local users can't change their passwords [5]
  • Add strictUserAuth support
  • Add support for automatic domain discovery
  • Refactor the code to handle configuration globals differently
    • Add an option for schema type, so that common options can be automatically configured
    • Fallback to defaults when certain options aren't set
  • Fix memberOf with memberOf overlays (in SVN) [6]
  • Add check for non-returned data [7]
  • Add $wgLDAPAllowLocalUsers and $wgLDAPRequiredUsers as a way to allow a list of local users (e.g., WikiSysop) and a list of LDAP users for access. [8]
  • Ensure compatibility with PHP 5.3 [9]
  • Fix issue with excluded groups [10]
  • Support dynamic groups [11]

[edit] Possibly in a future version

  • Allow changes to LDAP groups via Special:Userrights
  • Support for choosing default search scope, and defining it for multiple domains.
  • Support for adding users/changing passwords in Active Directory.
  • Support for using LDAP as a complete user backend (including user options and such). Using ldap as a backend will require a custom schema to be loaded in the LDAP server.
  • Optionally munge usernames when using auto-auth

[edit] References

  1. Extension talk:LDAP Authentication/Archive 2#User not loaded from_session in MW 1.14
  2. Extension talk:LDAP Authentication/Archive 2#Remove Sysop, Bureaucrat, Bot from locally managed groups
  3. Extension talk:LDAP_Authentication/Archive 2#Can't set user rights because of lower case conversion issue
  4. Extension talk:LDAP Authentication/Archive 2#Problems authenticating usernames with underscore character(s)
  5. Extension_talk:LDAP_Authentication/Archive 2#Can_local_users_change_their_passwords.3F
  6. Thread:Extension talk:LDAP Authentication/$wgLDAPGroupsUseMemberOf doesn't work with memberof overlay
  7. Thread:Extension talk:LDAP Authentication/Modification of searchGroups - LDAP Search
  8. Extension:LDAP_Authentication/Suggestions
  9. Thread:Extension talk:LDAP Authentication/"Strict Standards" error
  10. Thread:Extension talk:LDAP Authentication/$wgLDAPExcludedGroups does not work alone
  11. Thread:Extension talk:LDAP Authentication/authenticate against dynamic group
Personal tools
Namespaces
Variants
Actions
Site
Support
Download
Development
Communication
Print/export
Toolbox