plugin:authhttp
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
plugin:authhttp [2013-05-28 00:30] – [HTTP authentication plugin] Klap-in | plugin:authhttp [2023-09-20 15:15] (current) – ggauth page does not exist anymore 5.147.81.239 | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== HTTP authentication plugin | + | ====== HTTP Authentication Plugin |
---- plugin ---- | ---- plugin ---- | ||
Line 6: | Line 6: | ||
email : pieter@hollants.com | email : pieter@hollants.com | ||
type : auth, action | type : auth, action | ||
- | lastupdate : 2013-05-04 | + | lastupdate : 2023-09-20 #yyyy-mm-dd |
- | compatible : Weatherwax | + | compatible : Jack Jackrum, Igor, Elenor of tsort, Ponder Stibbons, Hrun, Detritus, Frusterick Manners, Greebo, Hogfather |
depends | depends | ||
conflicts | conflicts | ||
similar | similar | ||
- | tags : | + | tags : authentication http |
downloadurl: | downloadurl: | ||
Line 19: | Line 19: | ||
---- | ---- | ||
- | :!: This is an authentication plugin for DokuWiki Weatherwax 2013-05-10 and later! For a solution for earlier | + | Last successfully tested: 2023-09-20 with PHP 8.0.30 |
===== Description ===== | ===== Description ===== | ||
- | This auth plugin | + | This auth plugin |
+ | through the login form all the time when you have instead already | ||
+ | your webserver | ||
+ | NTLM authentication). In that case, the Webserver provides a user's | ||
+ | credentials to PHP scripts through the superglobal variables | ||
+ | '' | ||
- | The very moment you enable HTTP authentication in the Webserver and a user authenticates successfully, | + | Out of the box DokuWiki will already |
+ | supplied those through the login form. It will perform authentication using | ||
+ | the configured auth plugin | ||
+ | user (and the admin) options depending on the auth plugin' | ||
This all works out as long as | This all works out as long as | ||
- | * **either** DokuWiki' | + | * **either** DokuWiki' |
* **or** the Webserver and DokuWiki' | * **or** the Webserver and DokuWiki' | ||
- | If the first condition is not true, the user can change his password through the "User profile" | + | If the first condition is not true, ie. the plugin **does** provide the named |
+ | capabilities, the user could attempt to change his password through the | ||
+ | "User profile" | ||
+ | change his login name, delete him or add him with a different login name. | ||
- | Note that this is not a bug in DokuWiki - DokuWiki can't in any way know how your Webserver' | + | Now if the second condition is **also** not true, there can be inconsistencies |
+ | between the HTTP authentication (which might eg. use an old password) and | ||
+ | DokuWiki' | ||
+ | else), causing Single Sign-On to break and errors to be displayed. | ||
+ | |||
+ | Note that this is not a bug in DokuWiki - DokuWiki can't in any way know how your Webserver' | ||
+ | |||
+ | For example, if you configure your Webserver to display the username/ | ||
This plugin does it the other way round. It assumes that **the web server** already did the authentication and essentially annuls DokuWiki' | This plugin does it the other way round. It assumes that **the web server** already did the authentication and essentially annuls DokuWiki' | ||
- | DokuWiki expects | + | Note however that DokuWiki expects |
- | * the user's **real name**: authhttp will simply return the user's login name here. This may not look nice but there' | + | * the user's **real name**: authhttp will simply return the user's login name here. |
* the user's **email address**: authhttp makes one up by appending a configurable domain part to the user's login name. This will generate email addresses that will probably not work. There is not really a way around this, so you might want to disable email-related functions in DokuWiki. | * the user's **email address**: authhttp makes one up by appending a configurable domain part to the user's login name. This will generate email addresses that will probably not work. There is not really a way around this, so you might want to disable email-related functions in DokuWiki. | ||
* the user's **groups**: authhttp will simply put **all** users in DokuWiki' | * the user's **groups**: authhttp will simply put **all** users in DokuWiki' | ||
- | If these limitations are not acceptable, you might want to combine authhttp with [[plugin: | + | If these limitations are not acceptable, you might want to combine authhttp with another plugin, |
* When authhttp is the primary auth plugin for [[plugin: | * When authhttp is the primary auth plugin for [[plugin: | ||
* When authhttp is used on its own, ie. without [[plugin: | * When authhttp is used on its own, ie. without [[plugin: | ||
Line 48: | Line 66: | ||
===== Installation ===== | ===== Installation ===== | ||
- | Download | + | Search and install the plugin using the [[plugin: |
- | + | ||
- | Please refer to [[: | + | |
===== Configuration and Settings ===== | ===== Configuration and Settings ===== | ||
- | * **emaildomain**: | + | |
- | * **specialusers**: | + | * '' |
- | * **specialgroup**: | + | * '' |
+ | * '' | ||
+ | | ||
+ | * **specialusers**: | ||
+ | * **specialgroup**: | ||
- | Note: when authhttp is used together with [[plugin: | + | **Note:** when authhttp is used together with [[plugin: |
===== Change Log ===== | ===== Change Log ===== | ||
- | {{rss> | + | {{rss> |
===== Credits ===== | ===== Credits ===== | ||
- | This plugin | + | This plugin |
+ | support group memberships if used on its own, ie. without the ggauth " | ||
===== Discussion ===== | ===== Discussion ===== |
plugin/authhttp.1369693851.txt.gz · Last modified: 2013-05-28 00:30 by Klap-in