Extension:LDAP Authentication/Roadmap
About - Requirements - Examples - Configuration Options - Changelog - Roadmap - Suggestions - User provided info - FAQ - Support
 Release status: stable |
|
|---|---|
| Implementation | User identity |
| Description | Provides LDAP authentication, and some authorization functionality for MediaWiki |
| Author(s) | Ryan Lane (Ryan lanetalk) |
| Latest version | 2.1.0 (2018-10-11) |
| Compatibility policy | master |
| MediaWiki | 1.19+ |
| Database changes | Yes |
| License | GNU General Public License 2.0 or later |
| Download | |
| Translate the LDAP Authentication extension if it is available at translatewiki.net | |
| Check usage and version matrix. | |
| Issues | Open tasks · Report a bug |
Contents
Next versionEdit
I have a bad memory, and need a to-do list. If I have promised to add something for you in the next version, and it isn't in the list below, please add it.
v1.2dEdit
Fix referencs to $ldapconn that should be $this->ldapconn in primary group code for AD(in SVN)- Fix User not loaded from session issue [1]
- Change behavior of locally managed groups to allow MediaWiki specific groups to be overridden [2]
- Fix the username-authentication issue once and for all (hopefully without nasty hacks) [3] [4]
- Fix the issue where local users can't change their passwords [5]
- Add strictUserAuth support
- Add support for automatic domain discovery
- Refactor the code to handle configuration globals differently
- Add an option for schema type, so that common options can be automatically configured
- Fallback to defaults when certain options aren't set
Fix memberOf with memberOf overlays(in SVN) [6]- Add check for non-returned data [7]
- Add $wgLDAPAllowLocalUsers and $wgLDAPRequiredUsers as a way to allow a list of local users (e.g., WikiSysop) and a list of LDAP users for access. [8]
- Ensure compatibility with PHP 5.3 [9]
- Fix issue with excluded groups [10]
- Support dynamic groups [11]
Possibly in a future versionEdit
- Allow changes to LDAP groups via Special:Userrights
- Support for choosing default search scope, and defining it for multiple domains.
- Support for adding users/changing passwords in Active Directory.
- Support for using LDAP as a complete user backend (including user options and such). Using ldap as a backend will require a custom schema to be loaded in the LDAP server.
- Optionally munge usernames when using auto-auth
ReferencesEdit
- ↑ Extension talk:LDAP Authentication/Archive 2#User not loaded from_session in MW 1.14
- ↑ Extension talk:LDAP Authentication/Archive 2#Remove Sysop, Bureaucrat, Bot from locally managed groups
- ↑ Extension talk:LDAP_Authentication/Archive 2#Can't set user rights because of lower case conversion issue
- ↑ Extension talk:LDAP Authentication/Archive 2#Problems authenticating usernames with underscore character(s)
- ↑ Extension_talk:LDAP_Authentication/Archive 2#Can_local_users_change_their_passwords.3F
- ↑ Thread:Extension talk:LDAP Authentication/$wgLDAPGroupsUseMemberOf doesn't work with memberof overlay
- ↑ Thread:Extension talk:LDAP Authentication/Modification of searchGroups - LDAP Search
- ↑ Extension:LDAP_Authentication/Suggestions
- ↑ Thread:Extension talk:LDAP Authentication/"Strict Standards" error
- ↑ Thread:Extension talk:LDAP Authentication/$wgLDAPExcludedGroups does not work alone
- ↑ Thread:Extension talk:LDAP Authentication/authenticate against dynamic group