[Wikitech-l] ExtAuth, wgSecretKey questions...
I've been experimenting with a MW related project after all this time away. No-one is in IRC so I had two minor questions I needed clarified. What's the difference between the new ExtAuth and the old AuthPlugin system? Just a quick jist... I'm unsure of one thing related to $wgSecretKey and shared users. Obviously a set of wiki using a shared user table and a shared cookie $wgSecretKey should be the same on all wiki. However, given a set of wiki using a shared user table, but not using a shared cookie (ie: potentially domain separated wiki like example.com and example.org) should $wgSecretKey be the same since the users are the same, or different since the cookies are different? -- ~Daniel Friesen (Dantman, Nadir-Seen-Fire) [http://daniel.friesen.name] ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] ExtAuth, wgSecretKey questions...
Daniel Friesen wrote: > I've been experimenting with a MW related project after all this time away. > > No-one is in IRC so I had two minor questions I needed clarified. Perhaps not at the time you sent the email. You should try at an appropiate US time (around evening in Europe). > What's the difference between the new ExtAuth and the old AuthPlugin > system? Just a quick jist... I'll leave this to Aryeh. > I'm unsure of one thing related to $wgSecretKey and shared users. > Obviously a set of wiki using a shared user table and a shared cookie > $wgSecretKey should be the same on all wiki. > However, given a set of wiki using a shared user table, but not using a > shared cookie (ie: potentially domain separated wiki like example.com > and example.org) should $wgSecretKey be the same since the users are the > same, or different since the cookies are different? They can be different in both cases. It is only used as an entropy source. ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] ExtAuth, wgSecretKey questions...
> I've been experimenting with a MW related project after all > this time away. > > No-one is in IRC so I had two minor questions I needed clarified. > > What's the difference between the new ExtAuth and the old AuthPlugin > system? Just a quick jist... > See: http://www.mediawiki.org/wiki/ExternalAuth As the documentation mentions, it isn't really ready for use. V/r, Ryan Lane ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] ExtAuth, wgSecretKey questions...
On Wed, May 12, 2010 at 10:57 AM, Lane, Ryan wrote: > See: > > http://www.mediawiki.org/wiki/ExternalAuth > > As the documentation mentions, it isn't really ready for use. Although I use it on my site. :P It's also possibly better than the alternatives in some cases . . . the MediaWiki-vBulletin bridges I've seen are mostly horrifying. But AuthPlugin still works fine, and you can use that if you like. ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
