mediawiki/auth-remote-user

A Mediawiki extension to allow for authentication via webserver's REMOTE_AUTH (i.e. with kerberos) functionality.

Maintainers

Details

github.com/oetterer/AuthRemoteUser

Homepage

Source

Issues

Forum

Wiki

Installs: 8

Dependents: 0

Suggesters: 0

Security: 0

Stars: 0

Watchers: 1

Forks: 0

Open Issues: 0

Type:mediawiki-extension

1.0.0 2024-07-01 06:37 UTC

Requires

GPL-2.0-or-later a55d748d741431a943fbcdfb593e64360f9b2b85

  • Tobias Oetterer

Authenticationextensionwikiremotemediawikikerberos

This package is auto-updated.

Last update: 2024-12-01 00:09:47 UTC

README

Packagist download count

This MediaWiki extension aims to provide authentication via the webserver's REMOTE_AUTH (i.e. with kerberos) functionality.

It relies on the extension PluggableAuth.

After you installed the extension, you have to configure your webserver for remote authentication to match on the special page AuthRemoteUser.

Apache configuration example for Kerberos

<LocationMatch ".*/index\.php">
    <If "%{QUERY_STRING} =~ /title=[^:]+:AuthRemoteUser/">
        SSLRequireSSL
        AuthType Kerberos
        AuthName "Kerberos Login"
        KrbMethodNegotiate On
        KrbMethodK5Passwd Off
        KrbAuthoritative on
        KrbAuthRealms <your krb realms>
        KrbVerifyKDC on
        Krb5KeyTab /etc/keytabs/krb5.keytab.HTTP
        require valid-user
    </If>
</LocationMatch>

Note: even, if you are using Short URL schema, you have to match against index.php?title=, because the authentication special page is accessed internally with the original linking schema.

Contact

For bug reports and feature requests please see, if it is already reported on the list of open bugs. If not, report it.

For general questions, comments, or suggestions you might use the talk page on MediaWiki.org. For direct contact with the author please use the Email functionality on MediaWiki.org.