Shibboleth & Mediawiki

[Marco Malavolti]

Hi to all,

I'm here to know if any of you use Shibboleth as authentication method
on Mediawiki and this extension:

https://www.mediawiki.org/wiki/Extension:Shibboleth

I successful configure it to allow access with Shibboleth, but seems
that the assignment of the groups doesn't work... :(

This is my configuration in the LocalSettings.php:

wfLoadExtension( 'Shibboleth' );

$wgShibboleth_Username = 'eppn';
$wgShibboleth_Email = 'mail';
$wgShibboleth_DisplayName = "cn";
$wgShibboleth_Logout_Base_Url = "https://sp.example.org";
$wgShibboleth_Logout_Target_Url = '/index.php/Pagina_principale';

$wgShibboleth_GroupMap = [ 'attr_name' => 'affiliation',
	                   'sysop' => 'member at example.org',
			   'bureaucrat' => 'member at example.org',
		         ];

'affiliation' is the eduPersonScopedAffiliation attribute. That name
is what Shibboleth set by default.

I'm using the latest version of the extension provided here:

https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/extensions/Shibboleth/+/master


Thank for any help you can provide to solve this problem with groups.

Best Regards,


-- 
Marco Malavolti
Consortium GARR - Servizio IDEM GARR AAI
Via dei Tizii, 6 - I-00185 (ROMA)
CF: 97284570583 - PI:07577141000
Tel.: 02 6448 2507
Skype: marco.mala
PGP KEY: https://keys.openpgp.org/search?q=marco.malavolti@garr.it