ivan-novakov / dokuwiki-shibboleth-auth Goto Github PK

Is it possible to source the dokuwiki groups from multiple Shibboleth attributes?
So basically to have two source_attributes with different options, like below:

'groups' => array(
            'type' => 'environment',
            'options' => array(
                'source_attribute' => 'groupAttr_1',
            )
),
'groups_2' => array(
            'type' => 'environment',
            'options' => array(
                'source_attribute' => 'groupAttr_2,
                'map' => array(
                    'value_1' => 'group1',
                    'value_2' => 'group1'
                ),
            )
)

I had created a shib auth plugin for the old dokuwiki auth mechanism and there i create a "cache" file to store the mapping shib unique id -> display name. so that the "recent changes" etc. would display useful names instead of the crypted unique ID which doesn't contain the users name. Would be happy to see a similiar function in this plugin.

It seems that this is probably a DokuWiki issue. It stores the information about the subscription in *.mlist files placed contextually in the data/meta folder. Only the username is stored, though. So in case of an external authentication there is no way to get the user's email to send the notification.

I'm using Dokuwiki version 2022-07-31b "Igor".

When I enable 'authshibboleth' authentication the following error is displayed in the browser instead of the wiki pages:
"dokuwiki\Exception\FatalException: Declaration of auth_plugin_authshibboleth::trustExternal() must be compatible with dokuwiki\Extension\AuthPlugin::trustExternal($user, $pass, $sticky = false)".

So I modified the file plugins/authshibboleth/auth.php replacing the line "public function trustExternal()" with "public function trustExternal($user, $pass, $sticky = false)".
I've been running the wiki for a few days since that and it seems that the issue is fixed.

After upgrading dokuwiki doesn't start.

Checking apache error log I see:

PHP Fatal error: Declaration of action_plugin_authshibboleth::register() must be compatible with dokuwiki\Extension\ActionPlugin::register(Doku_Event_Handler $controller) in /var/www/lib/plugins/authshibboleth/action.php on line 0,

PHP 5.6.31-1~dotdeb+7.1
apache 2.2

I really like this plugin. It basically just works, which is awesome.

Is there any likelihood of adding something (editing through the User Manager plugin, something else) to allow group membership management through the web interface?

I'm setting up wikis for ad-hoc teams who can't modify stuff in the enterprise directory but who will need to update access lists for their wikis from time to time and I'm worried about them properly maintaining the PHP syntax used in the custom group file definition. It would be a lot easier for them if there was some way they could edit the groups graphically.

The Report bugs link on Shibboleth Authentication Plugin directs to the wrong page (Auth SAML).

It would be really useful for me to be able to specify an entityID for the Shibboleth login request so some wikis could be configured to skip the DS completely. I don't see a way to add arbitrary parameters to the login request, though.

The latest DokuWiki version "2014-05-05" introduces an unwanted behaviour - automatically displays the login form to anonymous users when they visit a page, which requires to be logged in.

I created an admin dokuwiki user with authplain. I then installed the authshibboleth plugin and it works with the default settings, except that when I log in, dokuwiki doesn't recognize that my user is an admin and just gives me the read-only mode.

Is there something I should change to fix this?

Find a way to display user data available through Shibboleth. Probable using a syntax plugin.

We run the "Greebo" version of Dokuwiki. Trying update authshibboleth plugin from version released "2013-05-28" to the one releaesd "2015-11-04" doens't work. The ui extension manager says that updated is successful but the "update" button remains and also the message "Update: New version 2015-11-04 is available". Dokuwiki runs on a linux box "3.2.0-4-amd64 #1 SMP Debian 3.2.82-1 x86_64 GNU/Linux"

Hi there,
When using your plugin, the login process works, but only with one additional reload on the page. Is this a known problem? And if so, is there a solution? ;)

Here is the Apache Log excerpt:

On the dokuwiki page, after clicking the "login" button

Checking for DokuWiki session... [{dokuwiki-path}/start?do=login&sectok={xyz}]
Checking for Shibboleth session [Shib-Session-ID] ... [{dokuwiki-path}/start?do=login&sectok={xyz}

Redirect from shibboleth page back to dokuwiki

Shibboleth session found, trying to authenticate user... [{dokuwiki-path}/lib/exe/indexer.php?id=start&{zyx}]
Resolved groups: user [{dokuwiki-path}/lib/exe/indexer.php?id=start&{zyx}]
[https://{shibboleth-url}] Loaded user from environment [{dokuwiki-path}/lib/exe/indexer.php?id=start&{zyx}]

additional reload (necessary for being logged in)

Checking for DokuWiki session... [{dokuwiki-path}]
Loaded user from DokuWiki session [{dokuwiki-path}] 
Checking for DokuWiki session... [{dokuwiki-path}/lib/exe/indexer.php?id=start&{zyx}]
Loaded user from DokuWiki session [{dokuwiki-path}/lib/exe/indexer.php?id=start&{zyx}]