[Wikitech-l] Scheduled database maintenance (9 Feb)

2016-02-09 Thread Jaime Crespo
Between 23:00 and 23:59 UTC, February 9th 2016 there is a scheduled maintenance window that will affect some of the wikis hosted by the Wikimedia Foundation. The maintenance is needed in order to perform necessary hardware, operating system and database upgrades. During the upgrade, content on

Re: [Wikitech-l] Windows Single Sign-On Extension

2016-02-09 Thread Ryan Lane
The best option here is: https://www.mediawiki.org/wiki/Extension:LDAP_Authentication I'm not sure why you think LDAP is a wart on Windows. Active Directory is just LDAP with Kerberos. Anyway, the LDAP Authentication extension has examples of how to do auto-auth using kerberos. You still need

Re: [Wikitech-l] Download link to properly packed extension

2016-02-09 Thread Stephan Gambke
I now used https://github.com/wikimedia/mediawiki-extensions-FooBar/archive/someTag.zip Github will put the files in a folder named mediawiki-extensions-FooBar-someTag, which is not ideal, but better than risking a mess in the .../extensions folder. If there is a better solution I'd still be

Re: [Wikitech-l] Download link to properly packed extension

2016-02-09 Thread Addshore
Hi! Take a look at https://www.mediawiki.org/wiki/Special:ExtensionDistributor And thus http://extdist.wmflabs.org/dist/extensions/ Addshore On 9 February 2016 at 08:16, Stephan Gambke wrote: > I now used >

[Wikitech-l] Windows Single Sign-On Extension

2016-02-09 Thread François St-Arnaud
Hello, To enable Single Sign-On to a MediaWiki hosted on IIS in a Windows Domain, the best MediaWiki extension I could find was NTLMActiveDirectory. https://www.mediawiki.org/wiki/Extension:NTLMActiveDirectory However, I had two peeves with this extension: 1) Its name; I'm not doing NTLM, but

Re: [Wikitech-l] Windows Single Sign-On Extension

2016-02-09 Thread François St-Arnaud
Thanks, I'll take a closer look at your extension. Well, although I understand that using LDAP against AD is supposed to work mostly seamlessly, I've had troubles trying to use it in our client's domain, mostly due to GPOs and other security constraints. For one thing, LDAP, even TLS-secured,

Re: [Wikitech-l] Windows Single Sign-On Extension

2016-02-09 Thread Ryan Lane
If this is what you'll need, you're going to need to write a custom extension. None of the existing auth extensions do this. On Tue, Feb 9, 2016 at 2:35 PM, François St-Arnaud wrote: > Thanks, I'll take a closer look at your extension. > > Well, although I understand

Re: [Wikitech-l] Scheduled database maintenance (9 Feb)

2016-02-09 Thread Jaime Crespo
Upgrade seems to have gone as well. Read-only mode was enabled for a bit longer than I initially expected: approximately between 23:16 and 23:30, but all within the scheduled maintenance window. Most of the time was spent monitoring that the switchover was done correctly, and that traffic was not

Re: [Wikitech-l] Windows Single Sign-On Extension

2016-02-09 Thread François St-Arnaud
Right. As mentioned in my first post, I already have created a custom extension using this approach and NTLMActiveDirectory as a starting point. Now, I wonder if it is worth sharing with the community, if others would benefit from an LDAP-less SSO solution for MW hosted on IIS? -Original

Re: [Wikitech-l] Windows Single Sign-On Extension

2016-02-09 Thread Ryan Lane
Never hurts :) On Tue, Feb 9, 2016 at 6:06 PM, François St-Arnaud wrote: > Right. As mentioned in my first post, I already have created a custom > extension using this approach and NTLMActiveDirectory as a starting point. > Now, I wonder if it is worth sharing with the

[Wikitech-l] MediaWiki core master now requires 5.5.9+ and other CI changes

2016-02-09 Thread Legoktm
Hi, has been merged, so MediaWiki core now requires PHP 5.5.9 or higher to run. We had to make some (read: a lot) of CI changes for that to happen, here's a quick summary: * php53 jobs are only triggered for REL1_2[3-6] branches * php55 jobs are only