Yeah, that is where it seemed to be failing. I got php compiled with the --with-ldap switch and now I actually get a screen back telling me that I have an invalid username / password...so that is progress I guess. I think it is still failing at the same spot you mentioned before because now I get this message ...
Warning: ldap_set_option(): supplied argument is not a valid ldap link resource in /export/home/web/docs/wiki_gen/includes/LdapAuthentication.php on line 126
I am still getting these messages on the login screen too.... Entering validDomain User is not using a valid domain, failing
I found that debug statement and added ($domain) to the line and got nothing... User is not using a valid domain (), failing
Is this a problem? Does this mean that it can't figure out what domain I'm on? Don't I have to pick my domain from the pulldown anyway?
Thanks, ~Eric
-----Original Message----- From: mediawiki-l-bounces@Wikimedia.org [mailto:mediawiki-l-bounces@Wikimedia.org] On Behalf Of Lane, Ryan Sent: Tuesday, July 25, 2006 10:59 AM To: MediaWiki announcements and site admin list Subject: Re: [Mediawiki-l] LDAP Help
I'd say it is pretty likely you do not have LDAP support compiled in. It looks like the plugin is failing at "$ldapconn = @ldap_connect( $servers );".
I'm not sure how well this is going to work on a Solaris system. Solaris has a proprietary LDAP client, and I haven't tested the plugin on a Solaris system with PHP compiled against Solaris's LDAP client. You can probably install the openldap client from sunfreeware.com, and compile PHP against that though (I'd recommend this approach in fact).
Usually most things work fine in Solaris's LDAP client, but I've noticed TLS/SSL usually is broken completely (at least it was when I tried it with sudo and samba).
V/r,
Ryan Lane
-----Original Message----- From: mediawiki-l-bounces@Wikimedia.org [mailto:mediawiki-l- bounces@Wikimedia.org] On Behalf Of Frederich, Eric P2173 Sent: Tuesday, July 25, 2006 9:33 AM To: MediaWiki announcements and site admin list Subject: Re: [Mediawiki-l] LDAP Help
Thanks, I tried using $wgLDAPDebug = 3; and got the following on the login screen.
Entering validDomain User is not using a valid domain, failing.
Then when I try to log in I get the following.
Entering validDomain User is using a valid domain Entering getCanonicalName Munged username: Frede00e Entering userExists Entering Connect Entering Connect Using servers: ldap://xxxxxxxx.xxxxx.siemens.net
-----Original Message----- From: mediawiki-l-bounces@Wikimedia.org [mailto:mediawiki-l-bounces@Wikimedia.org] On Behalf Of Lane, Ryan Sent: Monday, July 24, 2006 3:20 PM To: MediaWiki announcements and site admin list Subject: Re: [Mediawiki-l] LDAP Help
You can't just copy and paste exactly. You'll have to enter values appropriate to your site. In the newest version of the plugin, I've added in debugging code. You can enable it with:
$wgLDAPDebug = 1; #1-3, look at the meta page for what the levels are.
If you don't know what values to use, talk to your LDAP admin. He/she should know. If you need more help, please post to the discussion section of the LDAP Authentication page in meta.
V/r,
Ryan Lane
-----Original Message----- From: mediawiki-l-bounces@Wikimedia.org [mailto:mediawiki-l- bounces@Wikimedia.org] On Behalf Of Frederich, Eric P2173 Sent: Monday, July 24, 2006 1:52 PM To: MediaWiki announcements and site admin list Subject: [Mediawiki-l] LDAP Help
I am trying to get the LDAP Plugin working for use on a corporate
site
here. I now see a "your domain" pull down on the log in screen which tells
me
I have done something correct.
My problem is that when I try logging in nothing happens. I don't
see
any errors. I am at a blank page that says. The address bar has
http://my_server/my_wiki/index.php?title=Special:Userlogin&action=submit
login&type=login&returnto=Main_Page
All I did was copy the code from http://bugzilla.wikipedia.org/attachment.cgi?id=2050&action=view
into
my
includes directory and then paste the lines from the configuration example here...
http://meta.wikimedia.org/wiki/LDAP_Authentication_Configuration_Example
s#Configuration_for_an_AD_Server
I tried disabling the use of SSL by turning $wgLDAPUseSSL to false
in
LocalSettings.php.
Any ideas on how to debug this problem?
Thanks in advance, ~Eric
MediaWiki-l mailing list MediaWiki-l@Wikimedia.org http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
MediaWiki-l mailing list MediaWiki-l@Wikimedia.org http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
MediaWiki-l mailing list MediaWiki-l@Wikimedia.org http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
_______________________________________________ MediaWiki-l mailing list MediaWiki-l@Wikimedia.org http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
Yeah, that is where it seemed to be failing. I got php compiled with the --with-ldap switch and now I actually get
a
screen back telling me that I have an invalid username / password...so that is progress I guess. I think it is still failing at the same
spot
you mentioned before because now I get this message ...
Warning: ldap_set_option(): supplied argument is not a valid ldap link resource in /export/home/web/docs/wiki_gen/includes/LdapAuthentication.php on line 126
I am still getting these messages on the login screen too.... Entering validDomain User is not using a valid domain, failing
I found that debug statement and added ($domain) to the line and got nothing... User is not using a valid domain (), failing
Is this a problem? Does this mean that it can't figure out what
domain
I'm on? Don't I have to pick my domain from the pulldown anyway?
Those errors show when you go to the login screen. I'm not sure why it happens when the user hasn't submitted anything yet; I wondered the same thing the first time I saw it. That seems to happen even on a wiki that is properly authenticating.
Let's continue this on the talk page for LDAP Authentication on meta. This could take quite a few emails, and I hate spamming people. Post a new section, and give a summary of what we've discussed, and add to the end the new debug output after trying to log in (make sure to snip out the sensitive stuff).
V/r,
Ryan Lane
mediawiki-l@lists.wikimedia.org