Comments for Debug blog

Comment on Simple horizontal text scrolling with Ext Core 3 (marquee replacement) by extjstutorial.org

extjstutorial.org — Fri, 06 May 2011 13:44:27 +0000

Simple horizontal text scrolling with Ext Core 3 (marquee replacement)…

For one of my projects I needed to implement a line of scrolling text at the top or at the bottom of the browser window. One of the options was to use the non-standard marquee HTML element, which I rejected for obvious reasons. Plus, it didn’t work ver…

Comment on Shibboleth authentication adapter for the Zend Framework by Ivan Novakov

Ivan Novakov — Wed, 13 Apr 2011 15:46:09 +0000

It’s just an example code, so you can use any part of it for anything you want .

Comment on Shibboleth authentication adapter for the Zend Framework by James Johnson

James Johnson — Wed, 13 Apr 2011 15:34:02 +0000

I’m research shibboleth for use with Zend Framework. What license is your code under? Thanks!

Comment on Dokuwiki Shibboleth authentication backend by Ivan Novakov

Ivan Novakov — Thu, 07 Oct 2010 10:40:17 +0000

Hi KoS,
I’m here, but I don’t have much time running the blog. I remember your contribution, but it reached me after some time and I was too busy to examine it more carefully and as a result I didn’t answer at all, I’m sorry for that.

Now it seems I’ll be updating the plugin, so if you send me again your modification, I’ll be glad to merge them.

In fact, I dealed with the same problem, but I had to modify directly the Dokuwiki code, to make it display the “name” instead of the principal/targeted/persistent ID.

Comment on Dokuwiki Shibboleth authentication backend by KoS

KoS — Wed, 06 Oct 2010 09:05:52 +0000

thanks for the great plugin! some time ago i have extended it a little bit so that the users are cached locally (so the right name can be displayed on the wiki pages instead of the uniqueID that i use as username, which is just a “random” string). i tried to contact ivan to get it merged with his version, but so far haven’t got any answer ivan? are you there?

greets
KoS

Comment on Dokuwiki Shibboleth authentication backend by procaccia

procaccia — Mon, 10 May 2010 08:11:28 +0000

It’s not a bug , neither a mis-configuration of the ACL.
It’s just a silly Carriage Return left at the end of the file pointed by $conf['auth']['shib']['customgroups_file'] that added a CR at the begening of every media
(0a FF D8 ….) instead of (FF D8 ….)
I removed the CR at the end of my custom_group file, and now it works fine.

Comment on Dokuwiki Shibboleth authentication backend by procaccia

procaccia — Sun, 09 May 2010 10:22:29 +0000

When shib plugin is enabled and you restrict acces to namespace with ACL, media files/images aren’t anymore visible
I double check my ACL and file permissions, no way . is this a bug ?

example
user:* @shibusers 1

for example, when accessing doku.php?id=user:shibusers:dsi page which contains images, before installing shib plugins (with @user acl 1 access at that time !) images were visible to a logged in user (plain), as soon as I enable shib auth, page and group access works fine, but not for images .

please help.
thanks .

Comment on Dokuwiki Shibboleth authentication backend by micro

micro — Tue, 09 Mar 2010 19:12:37 +0000

you should put that part of the configuration in local.protected.php.

When you save the settings in the admin panel, only local.php is modified.

Thanks for the plugin!

Regards,
micro

Comment on Dokuwiki Shibboleth authentication backend by procaccia

procaccia — Sun, 24 Jan 2010 09:07:58 +0000

Sorry, I finally found the problem
enable debug helped a lot, thanks for that fonctionnality
The problem comes from the admin page (id=start&do=admin&page=config), when I edit config from the admin web interface of dokuwiki, it rewrites the config, but wrongly for entitlement_groups

original:
$conf['auth']['shib']['entitlement_groups'] = array(
‘student’ => ‘student’,
‘member’ => ‘member’,
‘invite’ => ‘invite’,
‘employee’ => ‘employee’
);

had been rewriten to

#$conf['auth']['shib']['entitlement_groups'] = ‘array( \’student\’ => \’student\’, \’invite\’ => \’invite\’, \’member\’ => \’member\’ \’employee\’ => \’employee\’ )’;
which seems to be syntaxly wrong regarding debug message:

[Thu Jan 07 22:23:38 2010] [error] [client 82.230.31.137] entitlement groups not configured
[Thu Jan 07 22:23:38 2010] [error] [client 82.230.31.137] Array\n(\n [uid] => Procaccia\n [name] => Procaccia\n [mail] => procacci@enst.fr\n [grps] => Array\n (\n [0] => shibusers\n [1] => intraIT\n )\n\n)\n

now I have that I reset the ['entitlement_groups'] = array(… in multiple lines manually in local.php, I have no more the “entitlement groups not configured” error in apache error_log, and “invite” shib group is now set :
[Thu Jan 07 22:28:36 2010] [error] [client 82.230.31.137] Array\n(\n [uid] => Procaccia\n [name] => Procaccia\n [mail] => procacci@enst.fr\n [grps] => Array\n (\n [0] => shibusers\n [1] => intraIT\n [2] => invite\n )\n\n)\n

I’ve checked ACL based on those shib group (?do=check also confirm that it is set), everything seems fine, I’ll post that positive experience on your blog when all my test will be concluant.

Thanks again for that wonderfull and powerfull plugin !

Comment on Dokuwiki Shibboleth authentication backend by entitlement_groups

entitlement_groups — Wed, 06 Jan 2010 18:04:28 +0000

finally, allocating dynamically groups based on shib attributes value does’nt seem to work
I did a wrong test with too much open ACL in my previous post.
Now I checked again with a better test, and it doesn’t work as expected.
I use the ?do=check option on the page I want to check ACL, and now I can clearly see that I am not in the expected groups .
?do=check on the start page after logged in with shib and a username that has “employee” for var_entitlement value only gives me:
“You are part of the groups allusers”
not the expected additional group “employee”
as programmed in
$conf['auth']['shib']['entitlement_groups'] = array(
’student’ => ’student’,
‘employee’ => ‘employee’,
‘member’ => ‘member’
);

did I missed something ?
I also read that all users not connected with ‘plain’ auth aren’t in @user group which is supposed to group all connected users
it’s quite ambarasing, any help greatly appreciated .

Regards .