1

(151 replies, posted in PunBB 1.3 extensions)

Smartys wrote:

gautam.madeshia: It would be great if you could look at the actual code before requesting hooks. I just glanced through your post, but I think most of the hooks you suggest have already been put in.

Yup, i was going through the code smile

It seems that you people have placed lots of hooks .... almost every place has got some kind of hook.

It's nice to see punbb devs taking such interest in making punbb expandable using hooks and plugins big_smile

I will let you know if some specific place may need any kind of hook as soon as soon as I finish browsing the code.

Thanks for your prompt replys Smartys.

2

(151 replies, posted in PunBB 1.3 extensions)

hi,

the current 1.3 beta seems to have lots of hooks for sso big_smile

Are there any docs for the new APIs ??

the dev page http://punbb.org/docs/dev.html dont have any info ...

3

(151 replies, posted in PunBB 1.3 extensions)

Last time i had to integrate punbb with my intranet, i had to edit the punbb source files. I dont know how much things have change since then.

However, for an external auth system to work properly, following hooks may be neccesary:

1. a hook just before the actual login is performed. users may sync user accounts just before the actual login process. ( like wordpress's wp_authenticate hook )

2. a simple sample plugin should be included with new releases, for performing authentication against external database and ldap. These are the most common scenario, and will serve most people.

we can provide easy options for users to fill up:

database connection params, external db table name, name of user field, name of pass field, password hash scheme ( must support atleast md5 and sha1 )

If the external db is using different password encryption scheme ( for example , django uses random salt + sha1 hash ), user must be able to provide a custom fucntion to verify the passwords.

Invision board provides an easy to use sample plugin, that I modified a little bit for integration with django user database.

3. some more hooks to for proper user interface integration in case of external sso:

a. hook to enable / disable password update field within punbb ( just  like wordpress's "show_password_fields" hook )

b. hook to get custom registration url, to show on top menu bar. ( to redirect user to external registration system , instead of redirecting to punbb's registration page )

c. hook to enable/disable password retrieve and reset function in punbb ( just like wordpress's "retrieve_password" and 'password_reset' hooks )

In short, SSO is not "just" user integration. Its about user interface too. And a forum should not try to be the CMS, but try to accompany a CMS. It's destined to work with external systems, so its SSO system should be really flexible.

And please take a look at wodpress's hooks. they seem to have covered almost everything imagineable...from output filters to sso... smile

And as much as i hate invision board, i had to use it this time, because i was able to get it working with django user db in just 10-15 minutes ...

But i am so much in love with punbb's slick interface, that I cant wait to replace it with punbb... wink

4

(151 replies, posted in PunBB 1.3 extensions)

may i request a hook for handling external authentication ?

Most succesfull forums like vbulletin and invision power board handle external authentication quite well. I particulary like invision boards authentication system.

Most of the time, a forum is supposed to work with another cms like a blog, or a portal like mambo etc...

but integrating punbb with other systems is really painfull....hope this situation will change with future releases.