Extension:LDAPSyncAll/ru

This extension is maintained by a member of the MediaWiki Stakeholders' Group .

This extension is part of the LDAP Stack and requires the LDAPProvider extension to be installed first.

This extension provides a mechanism to synchronize users in the database and users in active directory.

Справка по расширениям MediaWiki

LDAPSyncAll Статус релиза: стабильно
Описание	Used to synchronize users
Автор(ы)	Cindy Cicalese, Mark A. Hershberger, Robert Vogel
Последняя версия	1.0.0
Политика совместимости	Снэпшоты выходят вместе с MediaWiki. Мастер не имеет обратной совместимости.
MediaWiki	1.31+
Лицензия	GNU General Public License 2.0 или позднее
Скачать	Скачать расширение Git [?]: скачать текущую версию исходника репозиторий (Phabricator · GitHub) история изменений список разработчиков (GitHub) code review
Параметры $wgUserPageContent $wgExcludedUsernames $wgUsersSyncMechanism $wgBlockExecutorUsername $wgExcludedGroups
Используемые хуки ChangeTagsAllowedAdd
Ежеквартальные загрузки	41 (Ranked 101st)
Переведите расширение LDAPSyncAll, если оно доступно на translatewiki.net
Проблемы	Открытые задачи · Сообщить об ошибке

• If a user is in LDAP, but not in the database => the user is added to the database
• If a user is in the database, but not in LDAP => the user account will be disabled in the database

Установка

Execute within MediaWiki root or add mediawiki/ldap-sync-all to the composer.json file of your projectː

composer require mediawiki/ldap-sync-all dev-REL1_31

Activation

Add the following line to your LocalSettings.phpː

wfLoadExtension( 'LDAPSyncAll' );

Использование

The extension provides a maintenance script that you can simply run from your console PHP maintenance/SyncLDAPUsers.php. In addition, there is a RunJobsTriggerHandler that runs once a day.

Настройка

You need to add the following line in your LocalSettings.php. Don't forget to change "Admin" to the username who has admin permissions. This user disables accounts that are not in LDAP.

$GLOBALS['LDAPSyncAllBlockExecutorUsername'] = 'Admin';

You can specify usernames and usergroups that you want to exclude from disabling, for example:

$GLOBALS['LDAPSyncAllExcludedUsernames'] = [ 'Bob', 'Emily' ];

$GLOBALS['LDAPSyncAllExcludedGroups'] = [ 'bot', 'editor' ];