Hi, all,
When we first launched our wiki, I had users create their own accounts. I set an account, Wikiadmin, as a Bureaucrat and Sysop. Then, I implemented the LDAP login. Problem is, I can't remember that Wikiadmin account password now, and none of the password reset methods (using the changePassword.php script or directly editing it in MySQL) will work. The user Wikiadmin does not exist in our LDAP/AD environment-although we could create it-and stupidly, it was the only account to which I gave elevated permissions before setting up LDAP.
The only thing I can think of to try is to take off LDAP authentication temporarily, reset the Wikiadmin password, and then put LDAP back. I'm nervous about causing harm by doing this; thoughts?
Thanks in advance,
Nina
Hello,
I'm not sure if this would work for you also but we use a extension so we can change passwords on request.
http://www.mediawiki.org/wiki/Extension:EditUser
But I have never tried it in a case link you.
Best regards,
When we first launched our wiki, I had users create their own accounts. I set an account, Wikiadmin, as a Bureaucrat and Sysop. Then, I implemented the LDAP login. Problem is, I can't remember that Wikiadmin account password now, and none of the password reset methods (using the changePassword.php script or directly editing it in MySQL) will work. The user Wikiadmin does not exist in our LDAP/AD environment-although we could create it-and stupidly, it was the only account to which I gave elevated permissions before setting up LDAP.
The only thing I can think of to try is to take off LDAP authentication temporarily, reset the Wikiadmin password, and then put LDAP back. I'm nervous about causing harm by doing this; thoughts?
There is an FAQ entry for this:
http://www.mediawiki.org/wiki/Extension:LDAP_Authentication/FAQ#I_installed_...
From the FAQ:
"There are a few ways of doing this; however, the easiest method is:
1. Log in with your regular account (to ensure your account is created) 2. Disable the extension 3. Log in as WikiSysop 4. Go to Special:Userrights and add the sysop group to your regular account 5. Re-enable the extension"
You can't use the WikiSysop user if it isn't in LDAP, and you don't need to have one if you give rights to a user in AD.
V/r,
Ryan Lane
Hi Nina,
You can give admin privileges to the admin level LDAP groups. You just need to add the privs you need to your LDAP config file.
However, if you really want to get back in to your Wikiadmin account, it won't hurt anything to turn off your LDAP extension. We have had to do that several times and have had no ill effects except confusing users.
-Courtney
-----Original Message----- From: mediawiki-l-bounces@lists.wikimedia.org [mailto:mediawiki-l-bounces@lists.wikimedia.org] On Behalf Of McHale, Nina Sent: Saturday, April 24, 2010 3:14 AM To: mediawiki-l@lists.wikimedia.org Subject: [Mediawiki-l] Resetting admin password, LDAP enabled
Hi, all,
When we first launched our wiki, I had users create their own accounts. I set an account, Wikiadmin, as a Bureaucrat and Sysop. Then, I implemented the LDAP login. Problem is, I can't remember that Wikiadmin account password now, and none of the password reset methods (using the changePassword.php script or directly editing it in MySQL) will work. The user Wikiadmin does not exist in our LDAP/AD environment-although we could create it-and stupidly, it was the only account to which I gave elevated permissions before setting up LDAP.
The only thing I can think of to try is to take off LDAP authentication temporarily, reset the Wikiadmin password, and then put LDAP back. I'm nervous about causing harm by doing this; thoughts?
Thanks in advance,
Nina _______________________________________________ MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
mediawiki-l@lists.wikimedia.org