[Moin-user] Authentication via CAS + authorization (ACL) via AD

[Thomas Waldmann]

Hi Wojtek,
> 
> I cannot, however, find a way to set up ACLs so that it is possible to
> assign a given set of permissions to an Active Directory group.
> I have not set up AD binding yet as all the examples I found are
> related to only authentication via LDAP/AD.
> 
Yes, we support auth against ldap/ad, but there is no official support
for ldap groups in moin.

There has been some work on ldap groups, though, but it wasn't finished,
needs more work and practical testing:

http://hg.moinmo.in/moin/1.9-ldap-kerberos-agrigorev/

To continue that stuff, it would need some people with real interest and
some python and ldap/ad knowledge and testing environment. I can help
with the moin specific stuff, but I can't help with ldap/ad as I don't
work in such an environment.

An alternative to that would be to define groups either in the wiki
config or on wiki pages, that's the usual way in moin and officially
supported.

Cheers,

Thomas