I really don't like that only one authenticator can be enabled at a time. This forces more specialized authenticators to explicitly inherit another type of authenticator that should also be supported (see for example NTLMAuthServiceImpl -> XWikiLDAPAuthServiceImpl -> XWikiAuthServiceImpl). Ideally, we should have only one root authenticator, which shouldn't be configurable at all, and which doesn't authenticate itself but delegates to a dynamic list of pluggable authenticators. But this would take a lot longer to design and implement, so I'm just going to vote +0 for your incremental improvement proposal. On 10/21/2016 02:57 AM, Alexandru Cotiuga wrote:
Hi devs,
I'm proposing to add this new property to the *XWikiPreferences* class since there are many authenticators, listed on http://platform.xwiki.org/xwiki/bin/view/Features/Authentication and most of them require the overriding of the *xwiki.authentication.authclass* property in the *WEB-INF/xwiki.cfg* file and the restart of the wiki. So the *authclass* is meant to keep the value of the *xwiki.authentication.authclass *property*.*
Please keep in mind that *xwiki.cfg* was the historical file containing the configuration options, we're moving away from it and this can be the moment to improve this functionality by removing the *restart wiki* step which is often a pain for the user.
Thanks, Alex
-- Sergiu Dumitriu http://purl.org/net/sergiu/