My not so uninteresting notes

To content | To menu | To search

Tag - dokuwiki

Entries feed - Comments feed

Friday 8 July 2011

More patches

I just pushed most of my patches here not sure it can be always interesting for every body but still there is some quite useful patches like this one.

It allows dokuwiki to accept extensionless files.

SSO for dokuwiki

I tend to prefer dokuwiki over other Wiki tools. One thing that is neat with dokuwiki is that you can use Active Directory as a backend for user storage and user rights. If you don't want to multiply the number of database where your users are and where their right are affected I think that's a must !

But one big minus is that there is no way to use any kind of SSO technics like NTLMSSP auth or Kerberos. That's too bad because I guess people get tired of having to type and retype their password everywhere (and it leads to weaker password to my mind as they know they'll have to type it 10,20 ... 100 times a day).

In order to be able to support SSO the following patch is needed and the use of mod_auth_kerberos.

The patch enable SASL bind in AdLDAP (the library used by dokuwiki for doing Active Directory lookup), as most SASL implementation know how to use Kerberos (well GSSAPI). This implementation know also how to request additional tickets (if delegation is authorized) so that additional connexion can be done without asking the user to (re)enter its password.

I also created a ticket in AdLDAP's request tracker so that hopefully this patch will become mainstream.