User talk:Osnard/LDAP
Add topicLatest comment: 7 years ago by Osnard in topic HowTo do LDAP now?
| This page used the Structured Discussions extension to give structured discussions. It has since been converted to wikitext, so the content and history here are only an approximation of what was actually displayed at the time these comments were made. |
HowTo do LDAP now?
[edit]Hi,
really great write up to the LDAP dilemma.
May I suggest to add a Link to this site at the top of Extension:LDAP_Authentication, would have helped me a lot.
What setup would you suggest to replace LDAP_Authentication?
My requirements are:
- Users exist in Microsoft Active Directory and contain underscores
- The wiki is closed, reading only after login
- Only user from a specific AD group should be able to login, but the can all have the same privileges
- Preferable no manual tasks for new users in AD
- SSO would be great
Or the next best to that...
P.S. already taken an interests in BlueSpice but I guess the issues the same when using it? Stephan14x (talk) 07:53, 20 November 2017 (UTC)
- Good news: The MWStake group has started working on a new LDAP-Stack build on Extension:PluggableAuth and Extension:Auth remoteuser. It is not done yet, though.
- Thanks for sharing your requirements. Osnard (talk) 10:48, 20 November 2017 (UTC)
- Do you have any kind of a time frame on that?
- As I'm currently no active contributor, would it be OK if I edited this hint LDAP_hub/Extension:LDAPAuthentication/Hint and add it to the Extension:LDAP Authorization article? Stephan14x (talk) 15:02, 20 November 2017 (UTC)
- The only thing I can say is, that I am actively working on it. I am way behind the schedule, sorry for that. It should be completed this year ;) Osnard (talk) 09:48, 21 November 2017 (UTC)
- OK no problem, thanks for your work and your feedback. Stephan14x (talk) 09:55, 21 November 2017 (UTC)
- Hi All,
- Has anyone had any experience with Extension:LdapGroups at all? I'm experimenting with it now, but I'm not having much luck.
- I've posted this question on the Discussion Page, if anyone has any advice at all.
- Many thanks Dshinks (talk) 14:23, 23 January 2018 (UTC)
- "LdapGroups" is getting a complete make over. To be honest, I don't know if the current version is operational. Have you recognized that it requires PluggableAuth and PluggableSSO? Osnard (talk) 08:05, 25 January 2018 (UTC)
- Hi Rob,
- Thanks for getting back to me. No, I didn't realise that LDAPGroups was dependent on these two plugins - didn't spot that in the extension page; I'd been trying to use it in conjunction with Extension:Auth_remoteuser.
- I'll give these a whirl instead - fingers crossed! Dshinks (talk) 13:49, 25 January 2018 (UTC)
- Great that you are actively working on this and it is still listed as a current project at MediaWiki Stakeholders' Group. Have you any update on anticipated completion? 192.206.154.2 (talk) 02:48, 20 June 2018 (UTC)
- The stack has been released. Please have a look at LDAP hub, LDAP Stack and the differen extension pages like Extension:LDAPAuthentication2. Osnard (talk) 12:48, 24 January 2019 (UTC)