[Mediawiki-l] Problem with LDAP Authentication plugin

[Jack Eapen C]

Hi,

Thanks for the reply. Yes, I did all those stuff already, and what I
found was that, though I'm getting the error if the user don't exist in
MW table, if I refresh the browser, everything is ok and I can log in. 

Also, when you say ldap group synchronization, preference pulling,etc.,
Does it mean that in the userright page we'll get the user groups that
exist in AD to select for a user to add to? Or the user_group table will
be populated with the usernames and groups as in AD?

What are correct setting for that? Mine is MW 193

Regards,
 
Jack
 

-----Original Message-----
From: mediawiki-l-bounces at lists.wikimedia.org
[mailto:mediawiki-l-bounces at lists.wikimedia.org] On Behalf Of Lane, Ryan
Sent: Wednesday, June 13, 2007 10:32 PM
To: MediaWiki announcements and site admin list
Subject: Re: [Mediawiki-l] Problem with LDAP Authentication plugin

> I'm using LDAP authentication plugin with MW 193. If a 
> username does not exist in the MW user table, when that user 
> logs in, he/she can't. The error displayed is 
> 
> "There was either an external authentication database error 
> or you are not allowed to update your external account"
> 
> So I have to add all the users existing in the AD to MW table 
> as well. But this is not practical as new users are added to 
> AD quite often. 

I'm guessing you are using MediaWiki 1.9.x? If so, please look here:
http://www.mediawiki.org/wiki/Extension_talk:LDAP_Authentication#Officia
l_workaround

A small change needs to be made for the plugin to work with MediaWiki
1.9. Upgrading to MediaWiki 1.10 should also fix the problem.

> 
> Here's my settings for ldapauthentication plugin:

[snip]

> $wgLDAPUseLocal = true;

You probably don't want this. This is meant mostly for transitional
periods, where you originally had a local database, and you are moving
to an LDAP backend. This has security hazards associated with it, such
as possibly storing your LDAP account passwords in the local database.

[snip]

> $wgLDAPDebug = 0;

0 is actually the default, so you don't really need to define this one.

V/r,

Ryan Lane

_______________________________________________
MediaWiki-l mailing list
MediaWiki-l at lists.wikimedia.org
http://lists.wikimedia.org/mailman/listinfo/mediawiki-l


This electronic mail (including any attachment thereto) may be confidential and privileged and is intended only for the individual or entity named above. Any unauthorized use, printing, copying, disclosure or dissemination of this communication may be subject to legal restriction or sanction. Accordingly, if you are not the intended recipient, please notify the sender by replying to this email immediately and delete this email (and any attachment thereto) from your computer system...Thank You