[SAC] Spam in Wiki

Martin Spott Martin.Spott at mgras.net
Sat Aug 20 20:18:27 EDT 2011


On Thu, Aug 18, 2011 at 04:50:55PM +0200, Martin Spott wrote:

> I was just thinking of migrating the current OSGeo Wiki over to OSGeo
> LDAP authentication this weekend. I'll create a test instance on
> Saturday and if things are working as expected, then I'll merge the
> config changes over to the main Wiki.

Ok, please test your LDAP accounts against:

  http://wiki2.osgeo.org/

....  and report here.

It took a while for me to figure that MediaWiki LDAP authentication
won't work without having LDAP support available in PHP - I simply
forgot to install the corresponding distro package  :-)

Four items worth noting:

1.) While the old "User" pages are not going to vanish, every user has
to take care for migrating the content of their user pages over to the
new Wiki user name. In most cases that's a copy-and-paste job - except
from those where you're inheriting a different user ID (see 3.). I
think we should lock the user pages against writing upon migration and
give every Wiki user the chance to copy their own user page into a
local text file.

2.) Usernames in edit histories are most certainly going to be messed
up - except from those people who were using the same account name on
OSGeo LDAP and the Wiki. We should have a special page so every Wiki
could tell us how to map their old Wiki user name to the LDAP login
(might help with user pages and preferences as well).

3.) User preferences: If your OSGeo LDAP account name was formerly
being used by a different person as Wiki login, you're going to inherit
their user preferences - might be a slightly delicate topic ....

4.) Should we establish LDAP groups in order to map Wiki "User Rights"
via the directory ? This would either mean to disable the usual user
rights management in the Wiki or to allow writing to the LDAP directory
from the Wiki - whereas I'm uncertain if we really want to allow the
latter one for security measures.

Have fun,
	Martin.
-- 
 Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------


More information about the Sac mailing list