扩展:LDAPSyncAll

From mediawiki.org
This page is a translated version of the page Extension:LDAPSyncAll and the translation is 50% complete.
This extension is maintained by a member of the MediaWiki利害關係者群組 .
This extension is part of the LDAP Stack and requires the LDAPProvider extension to be installed first.

This extension provides a mechanism to synchronize users in the database and users in active directory.

MediaWiki扩展手册
LDAPSyncAll
发行状态: 稳定版
描述 用于同步用户
作者 Cindy Cicalese, Mark A. Hershberger, Robert Vogel
最新版本 1.0.0
兼容性政策 快照跟随MediaWiki发布。 master分支不向后兼容。
MediaWiki 1.31+
Composer mediawiki/ldap-sync-all
许可协议 GNU通用公眾授權條款2.0或更新版本
下載
  • $wgUserPageContent
  • $wgExcludedUsernames
  • $wgUsersSyncMechanism
  • $wgBlockExecutorUsername
  • $wgExcludedGroups
季度下載量 31 (Ranked 118th)
前往translatewiki.net翻譯LDAPSyncAll扩展
問題 开启的任务 · 报告错误
  • If a user is in LDAP, but not in the database => the user is added to the database
  • If a user is in the database, but not in LDAP => the user account will be disabled in the database


安裝

Execute within MediaWiki root or add mediawiki/ldap-sync-all to the composer.json file of your projectː

composer require mediawiki/ldap-sync-all dev-REL1_31

激活

Add the following line to your LocalSettings.phpː

wfLoadExtension( 'LDAPSyncAll' );

用法

The extension provides a maintenance script that you can simply run from your console PHP maintenance/SyncLDAPUsers.php. In addition, there is a RunJobsTriggerHandler that runs once a day.

配置

You need to add the following line in your LocalSettings.php. Don't forget to change "Admin" to the username who has admin permissions. This user disables accounts that are not in LDAP.

$GLOBALS['LDAPSyncAllBlockExecutorUsername'] = 'Admin';

You can specify usernames and usergroups that you want to exclude from disabling, for example:

$GLOBALS['LDAPSyncAllExcludedUsernames'] = [ 'Bob', 'Emily' ];

$GLOBALS['LDAPSyncAllExcludedGroups'] = [ 'bot', 'editor' ];