Hi to all,

I'm Marco Malavolti from GARR (Italian NREN) and I'm trying to use
Shibboleth extension for Mediawiki to set user's rights with groups.

https://www.mediawiki.org/wiki/Extension:Shibboleth

I have successfully configured the extension to enable the SSO and it
works, but I don't know why the following configuration doesn't set
privilegies/groups to logged users:

wfLoadExtension( 'Shibboleth' );

$wgShibboleth_Username = 'eppn';
$wgShibboleth_Email = 'mail';
$wgShibboleth_DisplayName = "cn";
$wgShibboleth_Logout_Base_Url = "https://sp.example.org";;
$wgShibboleth_Logout_Target_Url = '/index.php/Pagina_principale';

$wgShibboleth_GroupMap = [ 'attr_name' => 'unscoped-affiliation',
                           'sysop' => 'member',
                           'bureaucrat' => 'member',
                           'interface-admin' => 'member',
                         ];

'unscoped-affiliation' is the eduPersonAffiliation attribute. That name
is what Shibboleth set by default.

I'm using the latest version of the extension provided here:

https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/extensions/Shibboleth/+/master


Can you help me to understand how to provide group's permission to my
logged users, please?

Thank you so much for any help you can provide!


-- 
Marco Malavolti
Consortium GARR - Servizio IDEM GARR AAI
Via dei Tizii, 6 - I-00185 (ROMA)
CF: 97284570583 - PI:07577141000
Tel.: 02 6448 2507
Skype: marco.mala
PGP KEY: https://keys.openpgp.org/[email protected]

_______________________________________________
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Reply via email to