Thicket data repository for the EEG
anil.recoil.org
1{
2 "id": "https://www.tunbury.org/2025/05/07/otter-wiki-with-raven",
3 "title": "Otter Wiki with Raven Authentication",
4 "link": "https://www.tunbury.org/2025/05/07/otter-wiki-with-raven/",
5 "updated": "2025-05-07T12:00:00",
6 "published": "2025-05-07T12:00:00",
7 "summary": "We’d like to have a go using Otter Wiki, but rather than having yet more usernames and passwords, we would like to integrate this into the Raven authentication system. There is guide on using SAML2 with Apache",
8 "content": "<p>We’d like to have a go using <a href=\"https://otterwiki.com\">Otter Wiki</a>, but rather than having yet more usernames and passwords, we would like to integrate this into the Raven authentication system. There is <a href=\"https://docs.raven.cam.ac.uk/en/latest/apache-saml2/\">guide on using SAML2 with Apache</a></p>\n\n<p>The steps are:</p>\n<ol>\n <li>Start the provided container.</li>\n <li>Visit http://your-container/Shibboleth.sso/Metadata and download the <code>Metadata</code>.</li>\n <li>Go to <a href=\"https://metadata.raven.cam.ac.uk\">https://metadata.raven.cam.ac.uk</a> and create a new site by pasting in the metadata.</li>\n <li>Wait one minute and try to connect to http://your-container</li>\n</ol>\n\n<p>Otter Wiki, when started with the environment variable <code>AUTH_METHOD=PROXY_HEADER</code>, reads HTTP header fields <code>x-otterwiki-name</code>, <code>x-otterwiki-email</code> and <code>x-otterwiki-permissions</code>. See <a href=\"https://github.com/redimp/otterwiki/blob/main/docs/auth_examples/header-auth/README.md\">this example</a></p>\n\n<p>Apache can be configured to set these header fields based upon the SAML user who is authenticated with Raven:</p>\n\n<div><div><pre><code>ShibUseEnvironment On\nRequestHeader set x-otterwiki-name %{displayName}e\nRequestHeader set x-otterwiki-email %{REMOTE_USER}s\nRequestHeader set x-otterwiki-permissions \"READ,WRITE,UPLOAD,ADMIN”\n</code></pre></div></div>\n\n<p>I have created a <code>docker-compose.yml</code> file, which incorporates Apache running as a reverse proxy, an Otter Wiki container and includes HTTPS support with a Let’s Encrypt certificate. The files are available on <a href=\"https://github.com/mtelvers/doc-samples/commit/5ca2f8934a4cf1269e60b2b18de563352f764f66\">GitHub</a></p>\n\n<p>The test site is <a href=\"https://otterwiki.tunbury.uk\">https://otterwiki.tunbury.uk</a>.</p>",
9 "content_type": "html",
10 "author": {
11 "name": "Mark Elvers",
12 "email": "mark.elvers@tunbury.org",
13 "uri": null
14 },
15 "categories": [
16 "Otter,Raven",
17 "tunbury.org"
18 ],
19 "source": "https://www.tunbury.org/atom.xml"
20}