Thank you for the information!
Yes, the
authjoomla3 plugin does all the configuration and authentication, the same way as by setting AuthPDO.
But for security reasons setting AuthPDO can be better, because unlike authjoomla3 it doesn't access Joomla directory. So we can limit the PHP access of each web sites to each other, with open_basedir.
For example, using NGINX:
location ~ \.php$ {
try_files $uri $uri/ /doku.php;
fastcgi_pass unix:/run/php-fpm/php-fpm.sock;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PHP_VALUE open_basedir="/usr/share/nginx/www/dokuwiki/:/tmp/";
include fastcgi_params;
}
So DokuWiki site would have access only to its folder, not to Joomla files. And the user for the database can have very limited rights too, just to read users information.