|
|
| Version | 3.0.2.534 | | Rating |
| | Developer | Threeplicate Srl | | Updated | March 9, 2010 | | Homepage | N/A | | Works with | ScrewTurn Wiki v3.0.x | | License | GPLv2 |
|
More about this Plugin
The Active Directory plugin allows you to authenticate using your Active Directory credentials.
Configuration
The configuration string of the plugin must at least contain the mapping between ActiveDirectory groups and wiki groups in the form:
GroupMap=ActiveDirectoryGroup1:WikiGroup1
GroupMap=ActiveDirectoryGroup2:WikiGroup2
You can also map multiple wiki groups to the same AD group, for example:
GroupMap=ActiveDirectoryGroup1:WikiGroup1,WikiGroup2
Other configuration options are:
CommonGroups=wikigroup1[,WikiGroup2...]
gives all AD users membership in common wiki groups (Users, etc.)DefaultGroups=WikiGroup1[,WikiGroup2...]
gives AD users with no wiki group membership default wiki groups (Users, etc.)Domain=some.domain
authenticates against the given domain (if not specified tries to resolve it from the local machine)Server=somedomaincontroller.some.domain
authenticates against the given server if the webserver is not joined to the domain (this is mutual exclusive with Domain=some.domain)Username=someusername
Password=somepassword
queries Active Directory as the specified user on the domainAutomaticMail=example.com
In case the user doesn't have an email address in his ActiveDirectory profile, sets the email to a predefined value in the form displayname@example.comCaseInsensitive
login username is case insensitive.
To activate automatic login with your Active Directory credentials, you have to configure your IIS server to enable "Windows Authentication" and to disable "Anonymous Authentication".
You have also to modify the
web.config file and add the following string inside the <system.web> section:
<anonymousIdentification enabled="false" />
<authentication mode="Windows" />
If you are using IIS7, make sure to also
disable Anonymous Identification and
enable Windows Authentication at the website or web application level.
In Internet Explorer to avoid the username and password prompt, remember to add the wiki to the trusted sites list. This way IE sends authentication data automatically based on your current Windows account.
Discuss
When I try to use the DefaultEmail=server.com setting I kept getting the error "Invalid config key". When I looked into the source code I found that the setting should be AutomaticMail instead. Once I used that it was fine.
I fixed it. Thank you very much!
It's enabled, but will not show up in the list of default providers.
The web server is authenticating fine. I turned OFF anonymous, but when I get to the main page, I show up as 'Guest' instead of my active directory name.
is there a step I'm missing?
Thanks,
Mike
Do you have any solution for this? I installed ActiveDirectoryProvider, it is enabled, but not showing up in the combobox for default providers.
Got it. Seems, that ADProvider is not a replacement for SqlProvider, but an enhancement. Simply turn it on, go to your wiki, and your Wiki account in Sql (classic) provider will be created automatically. So why it didn't work initially? Well, System Logs told the truth. Active Directory user profile must have an e-mail address defined. If not, Wiki will not create an underlying user for the domain account.
I have mapped my AD group membership to the groups in Screw Turn Wiki but when I log in as my AD account, I am denied from seeing any pages. It does pick up my name so I am pretty sure it is authenticating to the DC ok. I can go in to the Accounts Administration and give my AD account a group membership then it all works. Is the AD plugin supposed to automatically map the AD groups to STW groups? or do I need to explicitly set them in the Accounts section of Administrtion? here are my config settings for the AD provider:
Domain=fully.qualified.com (this is not the real domain)
Server=adcdc01
DefaultGroups=Users
GroupMap=IS_ThirdPartySoftware, IS Third Party Software, IS Web Admin:Administrators
GroupMap=Domain Users:Users
CaseInsensitive
thanks
David K
Did you ever get this figured out? I am implementing STW into our organization, and am having the same issue as you with GroupMap. I am currently using DefaultGroups, but would love to get GroupMap working properly. Any help would be appreciated.
Thanks!
Kevin F
Hi,
is there a mechanism build into prevent a brute force attack?
When using AD-authentication and a person logs on for the first time it checks against the AD and you get your groups as you should but what happens if you change the AD-permission for that user and removes him from the group that is connected to Screwturn Wiki, does the plugin validate/update user-permissions daily or just at creation time?
If it's not updating as it is now, are there any future updates that have this on the 'to implement'-list?
/Z