MediaWiki Administration

From Notes

Contents 1 LDAP or AD Authentication Extension 2 Download and Install 3 Configure OpenLDAP 4 Restrict page editing to logged in accounts 5 Use robots.txt to prevent indexing of your entire site by Search bots

LDAP or AD Authentication Extension

Download and Install

• Available for download here.
• Configuration and Information Page

Configure OpenLDAP

# Add an entry for the WikiSysop
ldapadd -x -D "cn=manager,dc=itsecureadmin,dc=com" -W << EOF
> dn: uid=WikiSysop,ou=People,dc=itsecureadmin,dc=com
> uid: WikiSysop
> cn: WikiSysop
> userPassword: secret
> objectClass: shadowAccount
> objectClass: simpleSecurityObject
> objectClass: applicationProcess
> EOF    
Enter LDAP Password: 
adding new entry "uid=WikiSysop,ou=People,dc=itsecureadmin,dc=com"

Be sure to change the password:

ldappasswd -x -D "cn=manager,dc=itsecureadmin,dc=com" -W -s secret "uid=WikiSysop,ou=People,dc=itsecureadmin,dc=com"

---

Restrict page editing to logged in accounts

#LocalSettings.php
# Don't allow anonymous editing of pages
$wgGroupPermissions['*']['edit'] = false;
$wgGroupPermissions['user']['edit'] = true;

# Restrict account creation to WikiSysop
$wgGroupPermissions['*']['createaccount'] = false;

# Allow non-authenticated users to login
$wgWhitelistRead = array( "Main Page", "Special:Userlogin", "-", "MediaWiki:Monobook.css" );
$wgGroupPermissions['*'    ]['read']            = true;

---

Use robots.txt to prevent indexing of your entire site by Search bots

References:

• Mediawiki
• Mediawiki Forums