noris-network / mediawiki-extensions-sessionprovider-remoteuser

Authentication via REMOTE_USER environment for MediaWiki >= 1.27
Other
5 stars 5 forks source link

Not working following instructions #12

Open Syavne opened 7 years ago

Syavne commented 7 years ago

Good day.

After following configuration instructions, even when REMOTE_USER is present (tested with a phpInfo function) MediaWiki 1.28 still says "Not logged in". The configuration file:

####################################################
# Extension: AuthRemoteuser
wfLoadExtension( 'AuthRemoteuser' );

# If you want the extension to autocreate users not existing you have to add 
$wgGroupPermissions['*']['autocreateaccount'] = true;

# Settings: AuthRemoteuser
$wgGroupPermissions['*']['createaccount']   = false;
#$wgGroupPermissions['*']['read']            = false;
#$wgGroupPermissions['*']['edit']            = false;
####################################################

The problem persist even if we set: $wgAuthRemoteuserEnvVariable = 'REMOTE_USER';

No errors in log files from Apache 2.4.6-45.el7.centos and php 5.5.38-1.w7, we are using a clean install on a fully upgraded CentOS 7 virtual machine. Also, for installation we cloned the GIT repository in the core/extensions directory (this is not mentioned in the README).

Is there a particular place where we can look for debug messages or errors?.

bluikko commented 7 years ago

Same issue on MW 1.27.x. User is correctly logged in, REMOTE_USER contains the user@REALM.TLD, but MW does not log the user in. It does not even seem to create the user since Special:ListUsers page in MW shows only the admin user.

Note you probably need to add: $wgInvalidUsernameCharacters = "%:"; $wgUserrightsInterwikiDelimiter = "%";

If your REMOTE_USER contains user in format user@REALM - otherwise the '@' character is blocked by MW as "invalid username character".

beardedgeek commented 6 years ago

This is the same in MW 1.29.2

The module appears to register within MW, but doesn't do anything when I hit the site. I un-hide the Log In link and when I press it it tells me Logging in is not possible when using AuthRemoteuser sessions. so it's clearing doing something, just doesn't create accounts or login.