Closed bruinsg closed 11 years ago
hmm. this reuses the username/password used for authentication at mediawiki's api.php. why can't we have a dedicated username/password for apache?
Well, because that is the username and password that is used by mediawiki. The LDAP information is past on to the mediawiki in the HTTP header and then used for authentication and creation of the user in the mediawiki database incase the user doesn't exists yet. It is even possible to use the mediawiki preferences page to change the password in the LDAP database. For more info see: http://www.mediawiki.org/wiki/Extension:LDAP_Authentication
To be exact, we are using AutoAuthentication as described here: http://www.mediawiki.org/wiki/Extension:LDAP_Authentication/Configuration_Options#When_using_auto-authentication
Please let me know if you have any more questions/remarks.
Thanks for the explanation. I've merged the changes.