Completed ActiveDirectoryProvider.

This commit is contained in:
Matteo Tomasini 2010-03-03 13:05:23 +00:00
parent be05cd0a14
commit 0ec21aeb94
3 changed files with 956 additions and 407 deletions

File diff suppressed because it is too large Load diff

View file

@ -63,6 +63,9 @@
<Name>PluginFramework</Name> <Name>PluginFramework</Name>
</ProjectReference> </ProjectReference>
</ItemGroup> </ItemGroup>
<ItemGroup>
<Content Include="Install.txt" />
</ItemGroup>
<Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" /> <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
<!-- To modify your build process, add your task inside one of the targets below and uncomment it. <!-- To modify your build process, add your task inside one of the targets below and uncomment it.
Other similar extension points exist, see Microsoft.Common.targets. Other similar extension points exist, see Microsoft.Common.targets.

View file

@ -0,0 +1,32 @@
The Active Directory plugin allows you to authenticate using your Active Directory credentials.
Configuration
The configuration string of the plugin must at least contain the mapping between ActiveDirectory groups and wiki groups in the form:
GroupMap=ActiveDirectoryGroup1:WikiGroup1
GroupMap=ActiveDirectoryGroup2:WikiGroup2
You can also map multiple AD groups to the same wiki group or the other way round, for example
GroupMap=ActiveDirectoryGroup1,ActiveDirectoryGroup2:WikiGroup1
GroupMap=ActiveDirectoryGroup1:WikiGroup1,WikiGroup2
Other configuration options are:
- CommonGroups=wikigroup1[,WikiGroup2...]
gives all AD users membership in common wiki groups (Users, etc.)
- DefaultGroups=WikiGroup1[,WikiGroup2...]
gives AD users with no wiki group membership default wiki groups (Users, etc.)
- Domain=some.domain
authenticates against the given domain (if not specified tries to resolve it from the local machine)
- Server=somedomaincontroller.some.domain
authenticates against the given server if the webserver is not joined to the domain (this is mutual exclusive with Domain=some.domain)
- Username=someusername
Password=somepassword
queries Active Directory as the specified user on the domain
- DefaultEmail=example.com
In case the user doesn't have an email address in his ActiveDirectory profile, sets the email to a predefined value in the form displayname@example.com
To activate automatic login with your Active Directory credentials, you have to configure your IIS server to enable "Windows Authentication" and to disable "Anonymous Authentication".
You have also to modify the web.config file and add the following string inside the <system.web> section:
<anonymousIdentification enabled="false"/>
<authentication mode="Windows" />
In Internet Explorer to avoid the username and password prompt, remember to add the wiki to the trusted sites list. This way IE sends authentication data automatically based on your current Windows account.