开发者 | misterbisson |
---|---|
更新时间 | 2010年3月25日 23:28 |
捐献地址: | 去捐款 |
PHP版本: | 2.7 及以上 |
WordPress版本: | 2.7.1 |
The Central Authentication Service (CAS) is a single sign-on protocol for the web. Its purpose is to permit a user to log into multiple applications simultaneously and automatically. It also allows untrusted web applications to authenticate users without gaining access to a user's security credentials, such as a password. The name CAS also refers to a software package that implements this protocol.Users who attempt to login to WordPress are redirected to the central CAS sign-on screen. After the user's credentials are verified, s/he is then redirected back to the WordPress site. If the CAS username matches the WordPress username, the user is recognized as valid and allowed access. Authorization of that user's capabilities is based on native WordPress settings and functions. CAS only authenticates that the user is who s/he claims to be. If the CAS user does not have an account in the WordPress site, an administrator defined function can be called to provision the account or do other actions. By default, CAS users without WordPress accounts are simply refused access.
wp-content/plugins/
directory and activate it.wpcas-conf.php
file.wpcas-conf-sample.php
for an example. If a config file is used, it overrides any settings that might have been made via the settings page and that page is hidden.
Use of wpcas-conf.php
is recommended for WordPressMU installations, as doing so hides the settings menu from users.
WordPressMU Installation
wpcas.php
in your wp-content/mu-plugins/
directory.wpcas-conf-sample.php
, rename it wpcas-conf.php
, and put it in your wp-content/mu-plugins/
directory.I've only tested it with the 1.0 release available from ja-sig.
Users who attempt to login to WordPress are redirected to the central CAS sign-on screen. After the user's credentials are verified, s/he is then redirected back to the WordPress site. If the CAS username matches the WordPress username, the user is recognized as valid and allowed access. If the CAS username does not exist in WordPress, you can define a function that could provision the user in the site.
Each environment is different; each environment probably needs its own solution for this. I've posted my user provisioning script here, if you find something in there that works, leave a comment.
There is none.
You might be thinking of Stephen Schwink's CAS Authentication plugin. This plugin would be a lot different if I couldn't lean on Stephen's excellent work. My primary reasons for branching (under the the terms of the GPL) were that I wanted it to work better with WPMU and needed an easier way to hook-in functions to provision users and wanted to do that while also making it easy to upgrade using SVN (thus the config file).