I configured DokuWiki with NTLM (more precisely: Windows Authentication) on an IIS7 system. Then used a patched version of Krzysztof Kowalczyk's NTLM patch. Thus, the effect is:
Windows authentication works, everyone in the domain is automatically logged in with his own domain user, creating/editing of pages works.
But when a user uploads a media file (e.g. an image), the file can not be retrieved by any user except the one who uploaded it.
I checked the file permissions on both wiki pages and media files and the difference is that:
- wiki pages are owned by the creating user, but permissions are granted for the domain group DOMAIN\users too
- media file pages are owned by the creating user, but permissions are NOT granted for the domain group DOMAIN\users
So my question: where are the permissions set when uploading media files. It seems to be different than when creating wiki pages. Is this correct? Why is it? Has anybody a hint for me?
I provided the patched auth class on pastebin in case it is of help for you:
http://pastebin.com/syqpA7Nh (valid 1 month from now)
UPDATE: I think you can boil the whole issue down to one question: how can the group permission be set under Windows/IIS? If I could patch lib/exec/media.php to not just do a chmod (which has no effect under Windows apparently) but set the appropriate group, I suppose my problem could be solved.
Thanx in advance for any clues,
Alex