[pmwiki-users] Simple AuthUser site

[cl at isbd.net]

On Mon, Aug 07, 2006 at 09:51:37AM -0500, Patrick R. Michaud wrote:
> On Mon, Aug 07, 2006 at 01:48:00PM +0100, cl at isbd.net wrote:
> > I have set up PMWiki on my home Linux box as an alternative to TWiki.
> > Installation was easy and so far I'm happy with what it can do.
> > 
> > I'm a little 'out of tune' with the authorisation/password side of
> > things though.  I basically want to require that all users who can
> > edit pages must log in with name/password but that pages are all
> > readable by the world by default.
> 
> Do you really need them to log in with a name and password, or
> would just having a password be sufficient?
> 
> If just a password is sufficient, then all you need to do is
> 
>     $DefaultPassword['edit'] = crypt('the_password');
> 
> and then tell everyone who is authorized to edit the password.
> In general I find this works much easier than managing separate
> name+password pairs.
> 
> However, if you really need name+password authentication, then yes, 
> you'll want to use authuser.php.  In the configuration file, use:
> 
>     $DefaultPassword['edit'] = 'id:*';
>     include_once("$FarmD/scripts/authuser.php");
> 
> The $DefaultPassword line is the one that restricts editing to
> authors that have successfully authenticated with a name+password.
> 
> Once this is set up, you'll need to create accounts for each
> author -- to do that, edit the page Site.AuthUser and add
> lines for each author:
> 
>     alice: (:encrypt alice_password:)
>     bob:   (:encrypt bob_password:)
>     carol: (:encrypt carol_password:)
>     ...
> 
> Hope this helps -- if not, feel free to ask more questions.
> 
That's perfect, thanks.  It's now just up to me to decide whether to
go for per-user passwords or not.

-- 
Chris Green (chris at halon.org.uk)