-
Notifications
You must be signed in to change notification settings - Fork 11
Description
plainauthcas play difficulty with the plugin splitauth (which permit to separate authentication from authorization with groups)
my current setup is:
$conf['authtype'] = 'authsplit';
$conf['plugin']['authsplit']['primary_authplugin'] = 'authplaincas';
$conf['plugin']['authsplit']['secondary_authplugin'] = 'authmysql';
the authpllaincas only check the CAS ticket , the others values (name, email, ...) and groups are computed by the authmysql plugin
This setup is usefull if the CAS server return very few attributes (in my case, only the login)
-
the main problem is: Groups are replaced by authplaincas after there were set by the secondary plugin
auth.php:314 if ($this->_userInfo['grps'] != $this->_userInfo['tmp_grps'] ...(and the name and the email) -
a minor problem is the direct check from the plugin as auth backend which makes display the link to the cas server or not
action.php:54 if ($conf['authtype'] == 'authplaincas')