<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="generator" content="Osso Notes">
<title></title></head>
<body>
<p>Tested my login, worked seamlessly.  Good move!
<br>Thanks.
<br>
<br>
<br>----- Original message -----
<br>> On Thu, Aug 18, 2011 at 04:50:55PM +0200, Martin Spott wrote:
<br>>
<br>> > I was just thinking of migrating the current OSGeo Wiki over to OSGeo
<br>> > LDAP authentication this weekend. I'll create a test instance on
<br>> > Saturday and if things are working as expected, then I'll merge the
<br>> > config changes over to the main Wiki.
<br>>
<br>> Ok, please test your LDAP accounts against:
<br>>
<br>>  <a href="http://wiki2.osgeo.org/">http://wiki2.osgeo.org/</a>
<br>>
<br>> ....  and report here.
<br>>
<br>> It took a while for me to figure that MediaWiki LDAP authentication
<br>> won't work without having LDAP support available in PHP - I simply
<br>> forgot to install the corresponding distro package  :-)
<br>>
<br>> Four items worth noting:
<br>>
<br>> 1.) While the old "User" pages are not going to vanish, every user has
<br>> to take care for migrating the content of their user pages over to the
<br>> new Wiki user name. In most cases that's a copy-and-paste job - except
<br>> from those where you're inheriting a different user ID (see 3.). I
<br>> think we should lock the user pages against writing upon migration and
<br>> give every Wiki user the chance to copy their own user page into a
<br>> local text file.
<br>>
<br>> 2.) Usernames in edit histories are most certainly going to be messed
<br>> up - except from those people who were using the same account name on
<br>> OSGeo LDAP and the Wiki. We should have a special page so every Wiki
<br>> could tell us how to map their old Wiki user name to the LDAP login
<br>> (might help with user pages and preferences as well).
<br>>
<br>> 3.) User preferences: If your OSGeo LDAP account name was formerly
<br>> being used by a different person as Wiki login, you're going to inherit
<br>> their user preferences - might be a slightly delicate topic ....
<br>>
<br>> 4.) Should we establish LDAP groups in order to map Wiki "User Rights"
<br>> via the directory ? This would either mean to disable the usual user
<br>> rights management in the Wiki or to allow writing to the LDAP directory
<br>> from the Wiki - whereas I'm uncertain if we really want to allow the
<br>> latter one for security measures.
<br>>
<br>> Have fun,
<br>> Martin.
<br>> --
<br>>  Unix _IS_ user friendly - it's just selective about who its friends are
<br>> !
<br>> --------------------------------------------------------------------------
<br>> _______________________________________________ Sac mailing list
<br>> <a href="mailto:Sac@lists.osgeo.org">Sac@lists.osgeo.org</a>
<br>> <a href="http://lists.osgeo.org/mailman/listinfo/sac">http://lists.osgeo.org/mailman/listinfo/sac</a>
<br><br></p>
</body>
</html>