wurzel/fruitbasket
9
1
Fork 0
Code Issues 5 Pull requests Projects Releases Packages Wiki Activity

FSR Wiki #40

Merged
fugidev merged 6 commits from wiki into main 2023-08-16 15:42:44 +02:00
Conversation 6 Commits 6 Files changed 4 +96 -180
fugidev commented 2023-06-12 23:41:39 +02:00 (Migrated from github.com)
Copy link
  • Database
  • [ ] LDAP
  • OpenID Connect with Dex
  • rebase after ldap PR is merged
  • ldap group mapping

(the mediawiki module is kinda broken.)

- [x] Database - ~~[ ] LDAP~~ - [x] OpenID Connect with Dex - [x] rebase after ldap PR is merged - [ ] ldap group mapping (the mediawiki module is kinda broken.)
fugidev (Migrated from github.com) reviewed 2023-06-12 23:43:56 +02:00
modules/wiki.nix
fugidev (Migrated from github.com) commented 2023-06-12 23:43:56 +02:00
Copy link

I'm probably gonna configure this dynamically, like this.

I'm probably gonna configure this dynamically, like [this](https://www.mediawiki.org/wiki/Extension:LDAPProvider#Dynamic_PHP_array).
fugidev commented 2023-06-15 00:23:11 +02:00 (Migrated from github.com)
Copy link

The so called "LDAP Stack" of MediaWiki seems to be in no usable condition. I'll try OpenID Connect (with dex) instead, that is up to date at least.

The so called "LDAP Stack" of MediaWiki seems to be in no usable condition. I'll try OpenID Connect (with dex) instead, that is up to date at least.
rouven0 commented 2023-07-20 13:06:48 +02:00 (Migrated from github.com)
Copy link

Weil ich's gerade beim Reboot gesehen habe: mediawiki-init.services sollte erst nach postgresql starten

Weil ich's gerade beim Reboot gesehen habe: mediawiki-init.services sollte erst nach postgresql starten
fugidev commented 2023-07-23 22:54:42 +02:00 (Migrated from github.com)
Copy link

Patching Portunus is necessary, because the Portunus module hard codes port 636 (ldaps) for dex (dex works with insecure ldap, but strongly discourages it), but we don't have a good way to configure ldaps for postfix yet. So just making slapd serve both insecure ldap and ldaps seems like the best solution for now.

Patching Portunus is necessary, because the Portunus module hard codes port 636 (ldaps) for dex (dex works with insecure ldap, but strongly discourages it), but we don't have a good way to configure ldaps for postfix yet. So just making slapd serve both insecure ldap and ldaps seems like the best solution for now.
👍 1
tanneberger (Migrated from github.com) reviewed 2023-08-03 13:26:38 +02:00
modules/wiki.nix
@ -118,0 +66,4 @@
"plugin" => "OpenIDConnect",
"data" => [
"providerURL" => "${config.services.portunus.domain}/dex",
"clientID" => "wiki",
tanneberger (Migrated from github.com) commented 2023-08-03 13:26:38 +02:00
Copy link

can u maybe add some comments here why this is needed ?

can u maybe add some comments here why this is needed ?
fugidev (Migrated from github.com) reviewed 2023-08-09 23:08:26 +02:00
modules/wiki.nix
@ -118,0 +66,4 @@
"plugin" => "OpenIDConnect",
"data" => [
"providerURL" => "${config.services.portunus.domain}/dex",
"clientID" => "wiki",
fugidev (Migrated from github.com) commented 2023-08-09 23:08:26 +02:00
Copy link

done

done
fugidev commented 2023-08-09 23:14:49 +02:00 (Migrated from github.com)
Copy link

I sort of got group sync to work. Custom groups like e.g. Struktur can be synced in my testing, but syncing MediaWiki's Admin group does not seem to work. If we have a use for syncing Struktur/Finanzen/etc. groups, I can commit what I have so far. I think not needing a special Admin account in MediaWiki would be quite useful, then we could disable the login form and just redirect directly to the OIDC login...

I sort of got group sync to work. Custom groups like e.g. Struktur can be synced in my testing, but syncing MediaWiki's Admin group does not seem to work. If we have a use for syncing Struktur/Finanzen/etc. groups, I can commit what I have so far. I think not needing a special Admin account in MediaWiki would be quite useful, then we could disable the login form and just redirect directly to the OIDC login...
fugidev commented 2023-08-16 13:54:17 +02:00 (Migrated from github.com)
Copy link

rebased and replaced secrets

rebased and replaced secrets
rouven0 commented 2023-08-16 15:41:51 +02:00 (Migrated from github.com)
Copy link

had to rebase to resolve the deleted vm secret file

had to rebase to resolve the deleted vm secret file
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: wurzel/fruitbasket#40
No description provided.
Delete branch "wiki"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?