Skip to content

plainauthcas doesn't play nicely with authsplit #13

Description

@moobyfr

plainauthcas play difficulty with the plugin splitauth (which permit to separate authentication from authorization with groups)
my current setup is:
$conf['authtype'] = 'authsplit';
$conf['plugin']['authsplit']['primary_authplugin'] = 'authplaincas';
$conf['plugin']['authsplit']['secondary_authplugin'] = 'authmysql';
the authpllaincas only check the CAS ticket , the others values (name, email, ...) and groups are computed by the authmysql plugin
This setup is usefull if the CAS server return very few attributes (in my case, only the login)

  • the main problem is: Groups are replaced by authplaincas after there were set by the secondary plugin
    auth.php:314 if ($this->_userInfo['grps'] != $this->_userInfo['tmp_grps'] ... (and the name and the email)

  • a minor problem is the direct check from the plugin as auth backend which makes display the link to the cas server or not
    action.php:54 if ($conf['authtype'] == 'authplaincas')

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions