Re: LDAP authentification and ACL

> I've managed to get LDAP authentification to work with my MoinMoin
> installation by using the following code in Apache configuration:
> 
> <Location /wiki1>
>   AuthName "Wiki wiki1"
>   AuthType Basic
>   AuthBasicProvider ldap
>   AuthLDAPGroupAttribute memberUid
>   AuthLDAPGroupAttributeIsDN off
>   AuthLDAPUrl
> "ldap://10.27.21.6/dc=ldap,dc=c2c?uid??(|(gidNumber=1029)(sambaSID=*))
> <http://10.27.21.6/dc=ldap,dc=c2c?uid??(|(gidNumber=1029)(sambaSID=*))>"
>   Require ldap-group cn=dev,ou=Groups,dc=ldap,dc=c2c
>   Require ldap-group cn=mapfish,ou=Groups,ou=Externals,dc=ldap,dc=c2c
>   Require ldap-group cn=sitev5,ou=Groups,ou=Externals,dc=ldap,dc=c2c
> </Location>

>From moin's perspective, this is GivenAuth (done by the web server), not
ldap (done by moin).

> Does anybody have an idea of how I could achieve to have a readonly
> group ? No matter for me if it is managed with apache or with moinmoin.

There is no support for ldap groups in moin. There was a project about
this some years ago, but it wasn't finished. The code still exists on
hg.moinmo.in.

So, your only choice right now is to create a group either on a page or
in your wiki config.

Cheers, Thomas


------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_apr