Question

Hi all, Can I use different authorization for different Web? Can I use Active directory groups, those already exist under my domain, for accessing Web. Can we set permission like

Set ALLOWTOPICVIEW = domainname\group

or like

<> require group domainname\group </> in .haccess file.

I want to achive that, ThisWeb is accessed by ThisGroup only that too belong to winodws/active directory group. I am using SSPI module for authentication. Log on using domain ID/PWD.

Thanks

Environment

-- RahulH - 21 Mar 2007

Answer

If you answer a question - or have a question you asked answered by someone - please remember to edit the page and set the status to answered. The status is in a drop-down list below the edit box.

I can do it by matching location in server conf file like,

< LocationMatch /WebName>

  require group groupname

</ LocationMatch>

and it is working alright. But same I want to use it in .htaccess. Since for every changes, it needs to reboot web server. Again < LocationMatch>, < DirectoryMatch> directives cant be used in .htaccess file. Is there any alternative?

-- RahulH - 22 Mar 2007

You need to map AD groups to TWiki groups. This can be done with the LdapContrib.

-- PeterThoeny - 23 Mar 2007

I am having trouble understanding how to get these Active Directory groups mapped to TWikiGroups. Notably, none of the AD groups show up in the %GROUPS% variable on the TWikiGroups topic, and I have been unable to stumble upon a logical mapping that worked properly. I can log in with an AD user, whose sAMAccountName appears in place of a WikiName in edits and such, but no luck with the groups.

Is there a way for me to tell what groups TWiki recognizes, aside from the TWikiGroups page?

-- AdamCompton - 20 Apr 2007

added link to LdapContribDev

-- SvenDowideit - 02 May 2007

Sorry, closing this after more than 30 days...

-- PeterThoeny - 02 Jul 2007