Commit 7b1e5044 authored by Hugo Hörnquist's avatar Hugo Hörnquist
Browse files

Remove pam.

parent 31507de2
<?php
/**
* @package MediaWiki
*/
# Copyright (C) 2004 Brion Vibber <brion@pobox.com>
# http://www.mediawiki.org/
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License along
# with this program; if not, write to the Free Software Foundation, Inc.,
# 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
# http://www.gnu.org/copyleft/gpl.html
require_once("AuthPlugin.php");
/**
* Authentication plug-in for authenticating against PAM.
*
* Requires pam_auth from http://www.math.ohio-state.edu/~ccunning/pam_auth/.
*
* @package MediaWiki
*/
class AuthPAM extends AuthPlugin {
/**
* Check whether there exists a user account with the given name.
* The name will be normalized to MediaWiki's requirements, so
* you might need to munge it (for instance, for lowercase initial
* letters).
*
* @param string $username
* @return bool
* @access public
*/
public function userExists( $username ) {
return true;
}
/**
* Check if a username+password pair is a valid login.
* The name will be normalized to MediaWiki's requirements, so
* you might need to munge it (for instance, for lowercase initial
* letters).
*
* @param string $username
* @param string $password
* @return bool
* @access public
*/
public function authenticate( $username, $password ) {
#replace all spaces with underscore as MediaWiki does the opposite somewhere internally and such makes it impossible to login with usernames containing underscores.
#//joakim_tosteberg 2008-04-21
$desc = array(
0 => array("pipe","r"),
1 => array("pipe","w"),
2 => array("file","/tmp/error.out","a")
);
$proc = proc_open('/usr/lib/squid3/basic_pam_auth -o -1 -n datorhandbok',$desc, $pipes);
if (is_resource($proc)) {
fwrite($pipes[0],strtolower(str_replace(' ', '_', $username)));
fwrite($pipes[0]," ");
fwrite($pipes[0],$password);
fwrite($pipes[0],"\n");
fclose($pipes[0]);
$response = stream_get_contents($pipes[1]);
fclose($pipes[1]);
}
$retval = proc_close($proc);
#return pam_auth(strtolower(str_replace(' ', '_', $username)), $password, &$error);
return ($response == "OK \n");
}
/**
* Return true if the wiki should create a new local account automatically
* when asked to login a user who doesn't exist locally but does in the
* external auth database.
*
* If you don't automatically create accounts, you must still create
* accounts in some way. It's not possible to authenticate without
* a local account.
*
* This is just a question, and shouldn't perform any actions.
*
* @return bool
* @access public
*/
public function autoCreate() {
return true;
}
/**
* Can users change their passwords?
*
* @return bool
*/
public function allowPasswordChange() {
return false;
}
/**
* Set the given password in the authentication database.
* Return true if successful.
*
* @param string $password
* @return bool
* @access public
*/
function setPassword( $password ) {
return false;
}
/**
* Update user information in the external authentication database.
* Return true if successful.
*
* @param User $user
* @return bool
* @access public
*/
function updateExternalDB( $user ) {
return false;
}
/**
* Add a user to the external authentication database.
* Return true if successful.
*
* @param User $user
* @param string $password
* @return bool
* @access public
*/
function addUser( $user, $password ) {
return false;
}
/**
* Return true to prevent logins that don't authenticate here from being
* checked against the local database's password fields.
*
* This is just a question, and shouldn't perform any actions.
*
* @return bool
* @access public
*/
function strict() {
return true;
}
/**
* When creating a user account, optionally fill in preferences and such.
* For instance, you might pull the email address or real name from the
* external user database.
*
* The User object is passed by reference so it can be modified; don't
* forget the & on your function declaration.
*
* @param User $user
* @access public
*/
function initUser( &$user ) {
$user->mEmail = strtolower(str_replace(' ', '_', $user->mName)) . "@lysator.liu.se";
}
/**
* If you want to munge the case of an account name before the final
* check, now is your chance.
*/
function getCanonicalName( $username ) {
return $username;
}
}
?>
auth required pam_krb5.so use_first_pass minimum_uid=100
account required pam_krb5.so minimum_uid=100
......@@ -7,8 +7,6 @@ class datorhandbok {
],
{ ensure => installed, })
ensure_packages(['squid3'], { ensure => absent })
service { 'apache2':
ensure => running,
enable => true,
......@@ -184,21 +182,9 @@ class datorhandbok {
source => 'puppet:///modules/datorhandbok/CASAuthSettings.php',
}
file { '/var/lib/mediawiki/extensions/AuthPAM.php':
ensure => absent,
}
file { '/etc/pam.d/datorhandbok':
ensure => absent,
}
file { '/etc/mediawiki-extensions/extensions-enabled/RSSReader.php':
ensure => symlink,
target => '/etc/mediawiki-extensions/extensions-available/RSSReader.php',
require => Package['mediawiki'],
}
file { '/usr/lib/squid3/basic_pam_auth':
ensure => absent,
}
}
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment