Re: [Mediawiki-enterprise] Conditional login

2013-09-12 Thread david mason
hi again, Just wanted to say thanks. Although through all my testing REMOTE_USER did not show up in "local" networks, I was able to use the LocalSettings approach as you suggested to achieve the configuration I was looking for. David On 10 September 2013 07:34, wrote: > This might be the simp

Re: [Mediawiki-enterprise] Conditional login

2013-09-10 Thread vitalif
This might be the simplest, though I was hoping to avoid any code-level hack since it may be more difficult to keep up to date with MW releases. Though MW auth would be better than the htauth popup that no one likes. I didn't realize this could be done in LocalSettings, I thought it was cached,

Re: [Mediawiki-enterprise] Conditional login

2013-09-09 Thread david mason
hi again, On 7 September 2013 16:08, wrote: > Oh, thanks for clarifying. Two things that come to my mind are: > > 1) Try to do it on the application level. For example, try a following > hack - check $_SERVER['REMOTE_ADDR'] in LocalSettings.php and conditionally > set $wgGroupPermissions['*']['*

Re: [Mediawiki-enterprise] Conditional login

2013-09-07 Thread vitalif
the wiki will become read-only for non-local addresses... (sorry, I've meant "the wiki will become unreadable for non-local addresses") ___ Mediawiki-enterprise mailing list Mediawiki-enterprise@lists.wikimedia.org https://lists.wikimedia.org/mailma

Re: [Mediawiki-enterprise] Conditional login

2013-09-07 Thread vitalif
Oh, thanks for clarifying. Two things that come to my mind are: 1) Try to do it on the application level. For example, try a following hack - check $_SERVER['REMOTE_ADDR'] in LocalSettings.php and conditionally set $wgGroupPermissions['*']['read'] to false (also 'edit', 'createaccount', 'creat

Re: [Mediawiki-enterprise] Conditional login

2013-09-07 Thread david mason
I want REMOTE_USER since I am using Apache to require login if the user is not coming from the local network. But I don't want to have them log in twice. Essentially in psuedocode; if user is on a remote network: deny access without login (through htauth) prompt for login on success, pass lo

Re: [Mediawiki-enterprise] Conditional login

2013-09-07 Thread vitalif
"Local" users are on an identified network address range (via .htaccess) and "remote" users are anyone who's not "local." In both cases they have accounts.  The problem is Apache won't pass REMOTE_USER if the directory is considered to not require auth, which I need to have the site read-only for

Re: [Mediawiki-enterprise] Conditional login

2013-09-07 Thread david mason
Hi, "Local" users are on an identified network address range (via .htaccess) and "remote" users are anyone who's not "local." In both cases they have accounts. The problem is Apache won't pass REMOTE_USER if the directory is considered to not require auth, which I need to have the site read-only

Re: [Mediawiki-enterprise] Conditional login

2013-09-07 Thread Виталий Филиппов
Hi David! What do you exactly mean by "local" and "remote" users? Where do either of them really have accounts? david mason пишет: >Hi all, > >I've been hacking at this for a while and hoping someone has solved it. > >I am trying to set up MediaWiki with LDAP so users from a remote >network >mus

[Mediawiki-enterprise] Conditional login

2013-09-05 Thread david mason
Hi all, I've been hacking at this for a while and hoping someone has solved it. I am trying to set up MediaWiki with LDAP so users from a remote network must log in, but it's optional on the local network. I don't want users to have to log in twice, so I set up Extension:AutomaticREMOTE_USER (hta