Lines Matching refs:auth
7 NOTE: This auth plugin requires DokuWiki WeatherWax (2013-05-10a) or later!
12 authsplit, while technically being an auth plugin, does NOT do any
14 method calls among TWO other auth plugins that will do the actual work:
15 - a PRIMARY auth plugin that will be used for VALIDATION of login names and
19 - a SECONDARY auth plugin that supplies ADDITIONAL user information such as
24 particularly useful auth plugin with an auth plugin that is more powerful, yet
27 The example that comes to mind is to use authhttp as PRIMARY auth plugin and
28 authplain as SECONDARY auth plugin, thereby combining the advantages of reusing
29 HTTP authentication information with an auth plugin that supplements everything
31 authsplit has been tested with, but in theory it should work with other auth
35 As authsplit has to orchestrate two auth plugins and the user's state in
37 stored with different data. This may lead to the effect that while one auth
54 passwords. authsplit will first make sure that the PRIMARY auth plugin
61 - trustExternal(): this is the method DokuWiki calls if the PRIMARY auth
62 plugin uses external authentication. authsplit will let the auth plugin itself
68 information from the SECONDARY auth plugin.
72 groups) from the SECONDARY auth plugin, which means that the user will have to
75 - if enabled (and the SECONDARY auth plugin reports being capable of adding
77 information from the PRIMARY auth plugin as basis. As this information will
90 authsplit just delegates the call to the PRIMARY auth plugin's logOff()
96 auth plugin's getUserData() method only to make sure the user exists there and
97 then return the SECONDARY auth plugin's getUserData() information to DokuWiki.
98 Thus, a user has to be known to both auth plugins, but the SECONDARY's user
100 auth plugin will be silently ignored.
105 authsplit will first check if the user is not known to the PRIMARY auth plugin
109 to fire up whatever admin tool the PRIMARY auth plugin would otherwise
112 If successful (or the PRIMARY auth plugin does not support adding users, as is
113 the case for authhttp), the user is then created in the SECONDARY auth plugin
115 come from the PRIMARY auth plugin.
118 unless the PRIMARY auth plugin reports being capable of modifying passwords,
128 modify in the PRIMARY auth plugin first (if that plugin reports being
129 capable of modifying it, that is), then in the SECONDARY auth plugin.
130 - passwords will be modified in the PRIMARY auth plugin only since by design
131 the SECONDARY auth plugin knows empty ones only.
132 - group memberships will always be modified in the SECONDARY auth plugin only.
135 SECONDARY auth plugin only. This is because it can't know whether user
136 accounts known to the PRIMARY auth plugin are yet in use by other software.
141 calls to the SECONDARY auth plugin, following the concept that DokuWiki's
143 even if the PRIMARY auth plugin offered these methods, the user lists and
145 is enabled, only the SECONDARY auth plugin would really know which users resp.
149 to the SECONDARY auth plugin since, by design, that is where group membership
153 calls to the PRIMARY auth plugin since that is the one that dictates
157 auth plugin since that is the one that dictates restrictions on group names.
159 So to summarize which auth plugins are involved in which method calls:
185 **: If supported by the auth plugin
188 auth plugin with authmysql as SECONDARY auth plugin:
190 conf/users.auth.php file.
201 As mentioned above, using authhttp as the PRIMARY auth plugin and authplain
202 as the SECONDARY auth plugin is the prime use case. You could of course also
221 - primary_authplugin: This is the DokuWiki auth plugin that will be used to
224 - secondary_authplugin: This is the DokuWiki auth plugin that will be used to
227 - username_caseconversion: If one of the two auth plugins used is
232 accounts for any users that exist in the PRIMARY auth plugin, but are yet
233 unknown in the SECONDARY auth plugin. If disabled, users will either have to
240 Note that you'll have to take some of the used auth plugin's settings into
242 works. For example, when using authhttp as the PRIMARY auth plugin, authhttp's
244 group information come from the SECONDARY auth plugin instead.
260 This plugin is based on ideas in the "ggauth" auth backend by Grant Gardner
261 <grant@lastweekend.com.au>, https://www.dokuwiki.org/auth:ggauth. Grant does
262 not actively maintain ggauth anymore, so an update for the new auth plugins