Difference between revisions of "CNM MediaWiki IAM"

From CNM Wiki
Jump to: navigation, search
Line 1: Line 1:
[[CNM MediaWiki IAM]] is the system that empowers [[identity and access management]] ([[identity and access management|IAM]]) of [[CNM MediaWiki]] (hereinafter, ''Soft''). [[CNM LDAP]] provides the ''Soft'' with user credentials.
+
[[CNM MediaWiki IAM]] is the system that empowers [[identity and access management]] ([[identity and access management|IAM]]) of [[CNM MediaWiki]] (hereinafter, ''Soft''). Within [[CNM Cloud]], user credentials are stored at [[CNM LDAP]].
  
  

Revision as of 18:53, 22 July 2023

CNM MediaWiki IAM is the system that empowers identity and access management (IAM) of CNM MediaWiki (hereinafter, Soft). Within CNM Cloud, user credentials are stored at CNM LDAP.


Known issues

For a few years, the stable version of the Soft has not been updated due to new versions' conflict with CNM LDAP. Currently, the Soft uses an outdated, 1.26.4 version of MediaWiki, because the extension used to connect to its OpenLDAP does not support newer versions. At some period of time, CNM Technology Board considered three options: (1) to find or create a new extension, (2) to find another way to connect without using the extension, or (3) keep things as they are.

  • At that time, the Board decided to keep things as they were since the current architecture was temporary. The Board believed that when a new private cloud based on OpenStack would be launched in the fourth phase of CNM Cloud Project, its Keystone solution would be used for authentications and authorizations. Plus, the Soft never contained any private information; all of its users' data was stored in Opplet.net.
  • Later, the Board also considered migration to the WSO2 IS-based integration and wasn't sure whether LDAP would remain necessary.
  • However, some when in early 2023, the even historic LDAP integration stopped functioning properly, possibly, because of outdated PHP-support. Here is a screenshot of the current issue:
    Error wiki.png
Symfony\Component\Ldap\Entry Object ( [dn:Symfony\Component\Ldap\Entry:private] => cn=natly0909_rou=applet,dc=career prize,dc=com
[attributes:Symfony\Component\Ldap\Entry:private] => Array ( [uid] => Array ([0] => natly0909_r ) [0] => Array ( [0] => Zina ) [I] => Array ( [0] => Sinih ) [gecos] => Array
[0] na...@gmail.com )))
So, the urgent solution should allow for smooth work with our OpenLDAP-powered CNM LDAP. The team will provide the hired expert with full access to the virtual machine on which Soft's instance is installed and look for complete documentation on what have been done.
In the future, the team would also love to integrate it with a WSO2 IS-powered system as a separate project.