Securing MediaWiki using Centrale KU Leuven Login: Difference between revisions

m (Yoa moved page Securing MediaWiki using Shibboleth to Securing MediaWiki using Centrale KU Leuven Login: domme mensen weten niet wat shibboleth is)
No edit summary
Line 9: Line 9:


==Installation==
==Installation==
First unzip the zip file in your <code><mediawiki installation folder>/extensions/</code> directory.  
First, download the latest release from [https://github.com/ULYSSIS-KUL/MediaWikiShibboleth/releases/latest]. Make sure to click the `MediaWikiShibboleth.zip` download button. Then, unzip the zip file in your <code><mediawiki installation folder>/extensions/</code> directory.  
Then, add the following lines to your <code><mediawiki installation folder>/LocalSettings.php</code>:
Finally, add the following lines to your <code><mediawiki installation folder>/LocalSettings.php</code>:


  wfLoadExtension('MediaWikiShibboleth');
  wfLoadExtension('MediaWikiShibboleth');

Revision as of 23:35, 23 November 2017

About

MediaWikiShibboleth is the name of a MediaWiki extension created by ULYSSIS to allow for Shibboleth (Centrale KU Leuven) login. The extension disables editing and creating of (talk) pages by anonymous users, and requires Shibboleth account creation and login.

Prerequisites

Before installing, you need to have SSL and Shibboleth (Centrale KU Leuven) login enabled on your domain. For instructions on how to get SSL: https://docs.ulyssis.org/Getting_SSL Information about requesting Shibboleth: https://docs.ulyssis.org/Shibboleth Once you know everything is installed properly, you can proceed to install the extension.

Installation

First, download the latest release from [1]. Make sure to click the `MediaWikiShibboleth.zip` download button. Then, unzip the zip file in your <mediawiki installation folder>/extensions/ directory. Finally, add the following lines to your <mediawiki installation folder>/LocalSettings.php:

wfLoadExtension('MediaWikiShibboleth');
include 'extensions/MediaWikiShibboleth/MediaWikiShibboleth_body.php';

$wgGroupPermissions['*']['edit'] = false;
$wgGroupPermissions['*']['createtalk'] = false;
$wgGroupPermissions['*']['createpage'] = false;
$wgGroupPermissions['*']['writeapi'] = false;

If you want to allow anonymous editing, you should not add the last 4 lines of the previous paragraph. Though this really defeats the purpose of the extension.

Operation

When the extension is installed successfully, anonymous users will not be able to create an account and the account creation page will be removed from the home page. On the log in page, a new image is added: if you click on this image, you will be logged in using Shibboleth. If you want to log in with an explicit username/password combination, you can click "Password Login" to expand a login menu.

The new log in page looks like this with "Password Login" expanded:

Login.png

Creating accounts

If you want to create password accounts, you can navigate to the CreateAccount special page (make sure you are logged in using an administrator account). This is necessary to create accounts for users without a KU Leuven login. You should select "Use a temporary random password and send it to the specified email address".

CreateAccount.png