Module: External Authentication

I have made my own plugin for an install of codeigniter it uses cookies for sessions.
It appears to work.
I looked in through codeigniter and go to phorum and i appear to be logged in but when I click on one of the forums I am logged out. Any one know why this would happen?

Maurice,

Very good point, I agree with your point. It is definitely not a good idea to move anything into a production environment in that manner. I was just trying to get some variables passed in some manner with some of the blocks I had in the way. The proper way for proper security is always to pass credentials through a session, especially in any production environment. Otherwise your right you open yourself up to a wide array of easy hacking possibilities.

I am sure you have found though in a development environments that testing things out in specific ways can clarify possibilities that maybe are not evident otherwise. In which case it did.

I most definitely appreciate your insight and all the development and support you give this project without a doubt though.

nmpress,

"

Quote
nmpress
I looked in through codeigniter and go to phorum and i appear to be logged in but when I click on one of the forums I am logged out."

Does the account information show up in your phorum database once you have logged into codeigniter and move to Phorum? If not, it is not being inserted into your Phorum database which you will need, to stay logged into Phorum.

Hi Joe,

Quote
Joe Curia
If yours is not listed, please request it in this module's thread on the Phorum site.

I'm currently working on an internal knowledge platform and would like to use Phorum with MediaWiki's user table. Users will login to the internal site using HTTP-Auth (mod_auth_mysql), which authenticates against MediaWiki's user table. The same login data should be used by Phorum. I guess I may be able to write some code for that based on your module, but perhaps you already know a solution for this issue.

Kind regards,
Götz

Götz,

Sorry, there is no preset solution for your installation. However, you should be able to use portions of the Base plugin to build your own plugin. You may also want to look at the other plugins available for examples and ideas. As always, feel free to bring your questions here for answers. Good luck.

---

Joe Curia (aka Azumandias)
Modules: l0Admin Mass Email00000000l000000Automatic Time Zones000ll.l00000Enhanced Custom Profiles0.00Google Calendar0000l.l000000Post Previews
000000000Admin Security Suite000000000000Check Modules for Upgrades0000External Authentication000000Group Auto-Email00000.00000Private Message Alerts
000000000Attachment Download Counter0000Custom Attachment Icons000ll.ll00Favorite Forums000000.00000Highlighted Search Terms0000Self-Delete Posts Option
000000000Attachment Watermarks0l00000000Custom Language Database00l.l.0Forum Lockdown00000.00000Ignore Forums0000000000000Threaded Tree View
000000000Automatic Message Pruning00.llll.00Easy Color Scheme Manager0l.l00Forum Subscriptions0000lll000Moderated User Group
Templates:lGeneric Integration000000000 0000Simple Rounded000000 00000000Tabbed Emerald

Hi Joe,

Quote
Joe Curia
However, you should be able to use portions of the Base plugin to build your own plugin.

I just wrote the "plugin" in a couple of minutes. I have to test it further, but it is really very basic, because I just put $_SERVER['PHP_AUTH_USER'] and $_SERVER['PHP_AUTH_PW'] (running PHP as module) in an array and pass this information on to Phorum. So I guess there's not much that can go wrong (though I thought the same for MediaWiki there's actually a lot that can go wrong ... ;).

But I wondered that I'm not automatically logged in into the administration area. Integrating administrator login would be really nice. Is there a way to do this using the plugin?

Kind regards,
Götz

I am developing a new site containing a lot of custom components, and I want to add a forum, but I need something that is modular enough to allow me to use my own login solution. It basically needs to be flexible enough to run as an application in the MVC framework I am using, in this case CodeIgniter, so that one login through my current login application allows the user to access all of the protected areas of my site including a store app, profile app, viewing group-restricted content, and posting to group-restricted forum topics. Membership in those groups, which is approved by a group administrator, would allow the member to post to group-only forum topics, so everything needs to be able to work together very well as far as authentication goes.

Apart from developing my own forum, is there any chance this module could be modified to allow a more general way to connect to any external source rather than to only a few specific sources? Ideally, I would like to be able to call a method to display the Phorum content from within a custom forum app in CodeIgniter and set some configuration variables in Phorum to disable its own registration and login links and point to my own session cookie and database fields to verify an active login and group membership. If there is no active session (user not logged in), only public content would be displayed on the forums. Once the user logs in, all content for groups he has joined would also be displayed based on my own authentication info provided in these new Phorum config vars.

I know this isn't a really simple update, and I have a feeling that I'm going to have to write my own module/class to extend Phorum to do all of this assuming that it is even possible. I just really don't have the time to make my own custom full-featured forum seeing that the site is already a couple months behind schedule. Any help or suggestions would be much appreciated.

nmpress, I did not see your post before, but it sounds like you are essentially trying to do the exact same thing I want to do. Would you mind sharing the code you have written so far? I would like to take a look at it and see if there is anything I can do to contribute. After all, sometimes a fresh pair of eyes is all it takes.

The embed_phorum module could be what you are looking for, but it is not available for Phorum 5.2. That module takes integration one step further to make Phorum a forum-engine that is used to generate forum page output. This output could then be included in the framework in which it had to run.

But even with that one, it is neccessary to write glue code to explain the applications how to communicate. There's no such thing as a general way to connect to any source, since there is no RFC or so on application interoperability that describes how this would work.

---

Maurice Makaay
Phorum Development Team
my blog linkedin profile secret sauce

HI,

I have installed external authentication module. I have also installed apache_ldap_plugin.
When I go the Edit settings for the External Authentication module page
It does not give me the option to select the apache_ldap_plugin in Which external application will be the authentication master. PLease help

ITSS