Are you sure that the LdapAuthentication extension CAN create users?
We use the extension with Active Directory. We create all our users in Active Directory, and have disabled the "create user" feature in MediaWiki for non-admins.
Also, are you using a very old version of LdapAuthentication? If "1.2e" is the LdapAuthentication version, you are way out of date. It's up to 2.0d now.
DanB
From: mediawiki-l-bounces@lists.wikimedia.org [mailto:mediawiki-l-bounces@lists.wikimedia.org] On Behalf Of Natxo Asenjo Sent: Wednesday, March 18, 2015 10:52 AM To: mediawiki-l@lists.wikimedia.org Subject: [MediaWiki-l] ldap auth question
hi,
I have asked this https://www.mediawiki.org/wiki/Thread:Extension_talk:LDAP_Authentication/lda... in the ldap auth discussion site, but so far no answers.
So let me ask it here.
The tldr; version is:
How can I create a wiki user without a password in the mysql cli? That would be a workaround for our problem.
Now the long version:
We have been using the ldap auth extension for quite a long time for our IT admin group. The site is protected using apache basic auth (ldap and restricted to users of a certain group). This works.
After logging in to the vhost, the extension starts to do its work with the settings you can read on the link above.
Only for new users, no new db wiki user is being created as I can read in the ldap_debug.log:
2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Entering Connect 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Connected successfully 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Entering getSearchString 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Doing a proxy bind 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Entering getUserDN 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Entering getBaseDN 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e basedn is not set for this type of entry, trying to get the default basedn. 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Entering getBaseDN 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e basedn is dc=domain,dc=tld 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Fetched username is not a string (check your hook code...). This message can be safely ignored if you do not have the SetUsernameAttributeFromLDAP hook defined. 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Entering getGroups 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Entering checkGroups 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Entering getPreferences 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Retrieving preferences 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Retrieved realname (bladibla) using attribute (displayname) 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Retrieved nickname (bladibla) using attribute (cn) 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Entering synchUsername 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Authentication passed 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Entering getCanonicalName 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Username isn't empty. 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Munged username: Bladibla 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e User exists in LDAP; finding the user by name (Bladibla) in MediaWiki. 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Got id (). 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e User does not exist in local database; creating. 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Entering initUser 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Entering updateUser 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Setting user preferences. 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Setting nickname. 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Setting realname. 2015-03-11 09:13:17 wiki.iriszorg.nlhttp://wiki.iriszorg.nl wikidb: 1.2e Saving user settings.
every time our new colleagues get a 500 response from apache. So why is the extension not creating the users in the wiki db? The wiki is working perfectly fine for the rest of the team, this problem only happens to new hires.
As workaround: how can I create a wiki user from the cli without a password?
Thanks in advance. -- -- Groeten, natxo _______________________________________________ MediaWiki-l mailing list To unsubscribe, go to: https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
________________________________ My email address has changed to danb@cimpress.com. Please update your address book.
Cimpress is the new name for Vistaprint NV, the world’s leader in mass customization. Read more about Cimpress at www.cimpress.com. ________________________________