Hi Ryan, Well, upon closer inspection of my old plugin the login wasn't actually working as expected. I'll have a look at the link you've provided and see how I get on
Thanks, David On Tue, Feb 1, 2011 at 9:46 PM, Ryan Lane <[email protected]> wrote: > Go back to using your original config, it was correctly set up for > auto-login. Also, I'm betting that SSL isn't working. It's the most > common problem with configuring the plugin: > > http://www.mediawiki.org/wiki/Extension:LDAP_Authentication/Requirements#Windows_Server_2003_and_2008 > > - Ryan Lane > > On Tue, Feb 1, 2011 at 3:33 PM, David Holder <[email protected]> wrote: >> Hi Ryan, >> >> Thanks for that, shortly realised afterwards my mistake. >> >> It seems that my ldap config isn't searching before binding: >> >> Config: >> >> require_once ('extensions/LdapAuthentication.php'); >> >> $wgAuth = new LdapAuthenticationPlugin(); >> $wgLDAPDebug = 3; >> $wgDebugLogGroups["ldap"] = "C:\NewDebug.log" ; >> >> $wgLDAPDomainNames = array( >> 'localdomain.local' >> ); >> >> $wgLDAPServerNames = array( >> 'localdomain.local' => 'DC1.localdomain.local DC2.localdomain.local' >> ); >> >> $wgLDAPSearchStrings = array( >> 'localdomain.local' => 'uid=USER-NAME,OU=Users,DC=localdomain,DC=local' >> ); >> >> $wgLDAPEncryptionType = array( >> 'localdomain.local' => 'ssl' >> ); >> >> $wgMinimalPasswordLength = 1; >> >> $wgLDAPProxyAgent = array( >> 'localdomain.local' => >> 'cn=MediaWikiLDAPSearcher,ou=Users,dc=localdomain,dc=local' >> ); >> >> $wgLDAPProxyAgentPassword = array( >> 'localdomain.local' => 'MyLDAPSearcherPassword' >> ); >> >> Debug: >> >> 2011-02-01 21:11:11 wikidb: Entering validDomain >> 2011-02-01 21:11:11 wikidb: User is using a valid domain. >> 2011-02-01 21:11:11 wikidb: Setting domain as: localdomain.local >> 2011-02-01 21:11:11 wikidb: Entering getCanonicalName >> 2011-02-01 21:11:11 wikidb: Username isn't empty. >> 2011-02-01 21:11:11 wikidb: Munged username: someuser >> 2011-02-01 21:11:11 wikidb: Entering userExists >> 2011-02-01 21:11:11 wikidb: >> 2011-02-01 21:11:11 wikidb: Entering authenticate >> 2011-02-01 21:11:11 wikidb: >> 2011-02-01 21:11:11 wikidb: Entering Connect >> 2011-02-01 21:11:11 wikidb: Using SSL >> 2011-02-01 21:11:11 wikidb: Using servers: >> ldaps://DC1.localdomain.local ldaps://DC2.localdomain.local >> 2011-02-01 21:11:11 wikidb: Connected successfully >> 2011-02-01 21:11:11 wikidb: Entering getSearchString >> 2011-02-01 21:11:11 wikidb: Doing a straight bind >> 2011-02-01 21:11:11 wikidb: userdn is: >> uid=someuser,OU=Users,DC=localdomain,DC=local >> 2011-02-01 21:11:11 wikidb: >> 2011-02-01 21:11:11 wikidb: Binding as the user >> 2011-02-01 21:11:11 wikidb: Failed to bind as >> uid=someuser,OU=Users,DC=localdomain,DC=local >> 2011-02-01 21:11:11 wikidb: Entering allowPasswordChange >> 2011-02-01 21:11:11 wikidb: Entering modifyUITemplate >> >> On Tue, Feb 1, 2011 at 9:12 PM, Ryan Lane <[email protected]> wrote: >>>> $wgLDAPDebug = 3; >>>> $wgDebugLogFile = 'C:\LDAPDebug.log'; >>>> require_once ('extensions/LdapAuthentication.php'); >>>> >>>> $wgAuth = new LdapAuthenticationPlugin(); >>>> //LDAP Code from "Single Domain Requiring Search Before Binding" >>>> Including proxy settings. >>>> >>> >>> Please see: >>> http://www.mediawiki.org/wiki/Extension:LDAP_Authentication/Options#Debugging_options >>> >>> I use a specific log group so that the logs will be separated out: >>> >>> $wgDebugLogGroups["ldap"] = "C:\LDAPDebug.log"; >>> >>> Also, place options after the $wgAuth line, not before it. >>> >>> - Ryan Lane >>> >>> _______________________________________________ >>> MediaWiki-l mailing list >>> [email protected] >>> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l >>> >> >> _______________________________________________ >> MediaWiki-l mailing list >> [email protected] >> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l >> > > _______________________________________________ > MediaWiki-l mailing list > [email protected] > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l > _______________________________________________ MediaWiki-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
