ETH User Plugin

Plugin required to use the ETH LDAPS or AD for authentication.

Introduction

This plugin is used to enable authentication using ETH user accounts. Both LDAPS and AD authentication are supported but must be configured in the apache configuration. It is responsible to translate the REMOTEUSER apache variable into a TWiki login. Specifically it

• strips the @D.ETHZ.CH domain specification if Kerberos authentication is used.
• prohibits admin access for the admin account.

Optionally this plugin also enforces that the authenticated user must have change rights to WikiUsers when the register binary is invoked.

Plugin Configuration

The configuration for this plugin is located in /var/www/twiki/etc/config.d/ETHUserPlugin.conf or managed via configure. The following configurable options are available:

$ $TWiki::cfg{Plugins}{ETHUserPlugin}{AllowPublicRegistration}: Set to 1 if anybody with a valid ETH user account can register. Default is 0 in which case only users who can change WikiUsers can register.

Plugin Info

• Set SHORTDESCRIPTION = Plugin required to use the ETH LDAPS or AD for authentication.

Plugin Author:	TWiki:Main/StefanWalter
Copyright:	© 2017, TWiki:TWiki/TWikiContributor
License:	GPL (GNU General Public License)
Plugin Version:	1 (2017-01-16)
Change History:
2019-04-12:	Adaption to new ETH IAM
2017-01-16:	Initial version

Related Topics: TWikiPlugins, DeveloperDocumentationCategory, AdminDocumentationCategory, TWikiPreferences