History: External Authentication

View published page Collapse Into Edit Sessions

Source of version: 49

! Login & External Authentication

!! Overview of Login Methods
Tiki allows you to use several different login authentication methods.  For standalaone sites (not connected to a central authentication server), you can use "Just Tiki" or "Web Server".  For sites that are part of a larger environment Tiki offers Apache (basic HTTP auth), LDAP (Active Directory), CAS, and Shibboleth authentication. 

The installation environment plays a role in determining the authentication method to be used.  On a fully accessible server, an administrator has a choice of any/all of the authentication methods listed on this page.    

!!Authentication With Shared Hosting
In a shared hosting environment (FTP access only) the authentication options become severely limited.   While it is possible to setup an OpenID server with FTP access (Community-ID is one such project) it is not well documented.  As of 4/09, setting up OpenLDAP, Shibboleth, or CAS are effectively impossible with FTP access only and may be impossible (depending on access rights) with a shell access account.

!! Just Tiki
The __Just Tiki__ authentication method uses the usernames and passwords stored in the tiki database for authentication.  This is best used for sites that are not part of a larger intranet.

!! OpenId and Tiki
OpenID authentication has been introduced in ((Tiki 2.0)). OpenID is an open and decentralized identity system, designed "not to crumble if one company turns evil or goes out of business".  
  Selecting OpenID in Tiki 3.0 will ad an OpenID login module below the regular login module.
More information on ((OpenID))

!! Web Server (HTTP)
A common way of protecting webpages is through Basic HTTP authentication. The web server sends a "401 Authentication Required" header when a protected page is requested. The browser would then prompt the user for a username and password. Access is allowed if the username password pair are valid; else, the web server sends a HTTP 401 error, meaning "access denied." HTTP authentication is usually used by creating a .htaccess file. (Only in Apache?)

Tiki is able to detect when a visitor to the site is currently logged in using Basic HTTP Authentication. If the username of the user matches a username within Tiki's database, Tiki will automatically log the user in and, of course, grant all the assigned permissions.

Using Web Server authentication can be convenient for a shared hosting installation of Tiki. User management becomes more of a challenge if multiple Tiki's are to be installed. However, in Tiki 3.0 group information and users will still need to be added to each and every sub-Tiki inside the authorized domain.

!! Options

!!! LDAP (Active Directory)
((LDAP authentication))

!!! IMAP
((IMAP Authentication))

!!! POP3
POP3 Authentication

!!! Vpopmail
Vpopmail Authentication

!! Tiki and Pam
((PAM authentication))

!! CAS
((CAS Authentication))

!! Shibboleth
((Shibboleth Authentication))

!!phpBB
((phpBB Authentication))

!!Future Plans (please help!)
*[https://browserid.org/|BrowserID]
*[https://secure.cacert.org/index.php?id=4|CACert (or other) Client Certificates]
*[http://www.gnupg.org/|GPG]/PGP PKI, including tools such as WebPG ([https://chrome.google.com/ webstore/ detail/ hhaopbphlojhnmbomffjcbnllcenbnih|here] and [https://github.com/kylehuff/webpg-chrome|here])
*2-Factor authentication, such as [http://code.google.com/p/google-authenticator/|Google Authenticator] or [http://stackoverflow.com/questions/5785781/two-factor-authentication-system|SMS]
*Post-Login Security Question?  Like when logging into a bank website.

!!Future Delusions
*[http://www.yubico.com/yubikey|YubiKey] or, egads, [https://store.yubico.com/store/catalog/product_info.php?products_id=56&osCsid=fbc8790cd428b8e949bdf4497c53145b|YubiHSM!]
*[http://directory.apache.org/triplesec/|Apache TripleSec]
-=From here=-
{toc}



-=alias=-
* (alias(Login Authentication Methods))
* (alias(Login Authentication Method))

History

Enable pagination rows per page

Advanced

Information	Version
Wed 30 Nov, 2022 19:22 GMT-0000 Marc Laporte	54
Sat 08 Oct, 2022 14:51 GMT-0000 Marc Laporte	53
Thu 17 Feb, 2022 17:54 GMT-0000 Marc Laporte Cleaning up	52
Thu 17 Feb, 2022 16:07 GMT-0000 Marc Laporte	51
Fri 28 Feb, 2020 22:32 GMT-0000 Marc Laporte	50
Fri 28 Feb, 2020 22:31 GMT-0000 Marc Laporte	49
Fri 28 Feb, 2020 22:28 GMT-0000 Marc Laporte	48
Fri 26 Jul, 2019 13:13 GMT-0000 Yves Kipondo	47
Thu 28 Jun, 2012 15:55 GMT-0000 E.W. Peter Jalajas	46
Thu 28 Jun, 2012 15:49 GMT-0000 E.W. Peter Jalajas	45
Thu 28 Jun, 2012 15:48 GMT-0000 E.W. Peter Jalajas petjal added Yubi	44
Thu 28 Jun, 2012 15:39 GMT-0000 E.W. Peter Jalajas petjal add SMS, Security Question	43
Thu 28 Jun, 2012 15:35 GMT-0000 E.W. Peter Jalajas petjal added 2-factor	42
Thu 28 Jun, 2012 15:04 GMT-0000 E.W. Peter Jalajas petjal added PKI, WebPG	41
Thu 28 Jun, 2012 15:01 GMT-0000 E.W. Peter Jalajas petjal added future, browserid, cacert client certs	40
Wed 18 May, 2011 20:08 GMT-0000 Marc Laporte	39
Fri 25 Dec, 2009 22:21 GMT-0000 Marc Laporte	37
Fri 25 Dec, 2009 22:20 GMT-0000 Marc Laporte	36
Fri 25 Dec, 2009 21:55 GMT-0000 Marc Laporte	35
Fri 25 Dec, 2009 21:55 GMT-0000 Marc Laporte	34
Fri 25 Dec, 2009 21:50 GMT-0000 Marc Laporte	33
Fri 25 Dec, 2009 21:49 GMT-0000 Marc Laporte	32
Fri 28 Aug, 2009 11:11 GMT-0000 Marc Laporte	28
Mon 04 May, 2009 04:30 GMT-0000 lindon changed wanted pages into regular text	27
Sat 02 May, 2009 22:55 GMT-0000 mizraith	26
Sat 02 May, 2009 22:54 GMT-0000 mizraith	25
Sat 02 May, 2009 22:51 GMT-0000 mizraith	24
Sat 02 May, 2009 22:47 GMT-0000 mizraith	23
Sat 02 May, 2009 22:46 GMT-0000 mizraith	22
Sat 02 May, 2009 22:45 GMT-0000 mizraith	21
Sat 18 Apr, 2009 23:03 GMT-0000 lindon removed double colons which was causing the left column to disappear	20
Sat 19 Jul, 2008 09:17 GMT-0000 Marc Laporte	19
Sun 22 Jun, 2008 22:52 GMT-0000 Marc Laporte	18
Thu 10 Apr, 2008 12:56 GMT-0000 Xavier de Pedro	17
Thu 10 Apr, 2008 12:54 GMT-0000 Xavier de Pedro	16
Thu 10 Apr, 2008 12:52 GMT-0000 Xavier de Pedro	15
Wed 20 Feb, 2008 04:50 GMT-0000 Marc Laporte were missing pop3 and Vpopmail	14
Mon 28 Jan, 2008 06:20 GMT-0000 Marc Laporte	13
Sun 05 Aug, 2007 04:33 GMT-0000 Marc Laporte refactoring	12
Sun 05 Aug, 2007 04:29 GMT-0000 Marc Laporte refactoring	11
Sun 05 Aug, 2007 04:22 GMT-0000 Marc Laporte	10
Sun 05 Aug, 2007 04:18 GMT-0000 Marc Laporte moved to LDAP page	9
Sun 20 May, 2007 13:12 GMT-0000 dthacker Update of PearAuth form and explanations of table	8
Sat 19 May, 2007 22:42 GMT-0000 dthacker added Shibboleth	7
Sat 19 May, 2007 21:08 GMT-0000 dthacker moved Pear::Auth	6
Sat 19 May, 2007 21:03 GMT-0000 dthacker re-arrange items	5
Sat 19 May, 2007 21:00 GMT-0000 dthacker Added CAS	4
Sat 19 May, 2007 20:53 GMT-0000 dthacker	3
Sat 19 May, 2007 20:35 GMT-0000 dthacker save work in progress	2
Sat 19 May, 2007 20:24 GMT-0000 dthacker page created	1

Keywords

Keywords serve as "hubs" for navigation within the Tiki documentation. They correspond to development keywords (bug reports and feature requests):

Accessibility (WAI and 508)
Accounting
Articles and Submissions
Backlinks
Banners
Batch
BigBlueButton audio/video/chat/screensharing
Blog
Bookmark
Browser Compatibility
Link Cache
Calendar
Category
Chat
Clean URLs
Comments
Communication Center
Compression (gzip)
Contacts (Address Book)
Contact us
Content Templates
Contribution
Cookie
Copyright
Credit
Custom Home and Group Home Page
Date and Time
Debugger Console
Directory of hyperlinks
Documentation link from Tiki to doc.tiki.org (Help System)
Docs
Draw
Dynamic Content
Dynamic Variable
External Authentication
FAQ
Featured links
File Gallery
Forum
Friendship Network (Community)
Gmap Google maps
Groups
Hotword
HTML Page
i18n (Multilingual, l10n)
Image Gallery
Import-Export
Install
Integrator
Interoperability
Inter-User Messages
InterTiki
Kaltura video management
Karma
Live Support
Login
Logs (system & action)
Look and Feel
Mail-in
Map with Mapserver
Menu
Meta Elements
Mobile Tiki and Voice Tiki
Module
MultiTiki
MyTiki
Newsletter
Notepad
Payment
Performance Speed / Load
Permissions
Platform independence (Linux-Apache, Windows/IIS, Mac, BSD)
Polls
Profiles
Profile Manager
Report
Toolbar
Quiz
Rating
Feeds
Score
Search engine optimization
Search
Search and Replace
Security
Semantic links
Shadowbox
Shadow Layers
Share
Shopping cart
Shoutbox
Slideshow
Smiley
Social Networks
Spam protection (Anti-bot CATPCHA)
Spellcheck
Spreadsheet
Stats
Surveys
Tags
Task
Tell a Friend, alert + Social Bookmarking
TikiTests
Theme CSS & Smarty
Tiki Manager
Trackers
Transitions
User Administration including registration and banning
User Files
User Menu
Watch
WebDAV
Webmail
Web Services
Wiki History, page rename, etc
Wiki Syntax
Wiki structure (book and table of content)
Workspace
WSOD
WYSIWYCA
WYSIWYG
XMLRPC

Latest Changes

...more

Tiki Newsletter

Delivered fresh to your email inbox!

Don't miss major announcements and other news!

History: External Authentication

Source of version: 49

History

doc.tiki.org

Keywords

Latest Changes

Featured Links

Tiki Newsletter

About Tiki

Support

Community

Documentation

Development

Legal

Tiki Project Sites

Networks