User authentication via LDAP or (!) local users? - MediaWiki-l

Chris Steipp

22 Oct 22 Oct

2:37 p.m.

There is a fallback to local wiki authentication, if your LDAP config doesn't prevent it. Iirc by default the LDAP extension does disable it however. For a quick fix, you can disable the extension (comment it the include in you LocalSettings.php), then login with any account in you database that you know the password to. On Oct 22, 2013 6:58 AM, "Michael Renner" <michael.renner(a)gmx.de> wrote:

...

Moin, we use user authentication via LDAP. But the question is: what, if the LDAP fails? The documentation how to setup or repair the LDAP server is inside our wiki. So I wonder if it's possible to use LDAP for "mormal" users, but a local user (let's call him "admin") with authentication against the database? Thanks -- |Michael Renner E-mail: michael.renner(a)gmx.de | |81541 Munich skype: michael.renner.gmx.de | |Germany Don't drink as root! ESC:wq ______________________________**_________________ MediaWiki-l mailing list MediaWiki-l(a)lists.wikimedia.**org <MediaWiki-l(a)lists.wikimedia.org> https://lists.wikimedia.org/**mailman/listinfo/mediawiki-l<https://lists…

Reply

jargon

23 Oct 23 Oct

7:20 a.m.

Hi, If there is no local user, but users can login with valid LDAP credentials how does one go about creating a local user? Thanks Dayo On 10/22/2013 04:54 PM, Markus Glaser wrote:

...

Hi Michael, if you set $wgLDAPUseLocal = true; in LocalSettings.php, you should see 'local' in the list of domains on the login screen. Set this to local and you can use any database account to log in. Best, Markus (mglaser) -----Ursprüngliche Nachricht----- Von: mediawiki-l-bounces(a)lists.wikimedia.org [mailto:mediawiki-l-bounces@lists.wikimedia.org] Im Auftrag von Chris Steipp Gesendet: Dienstag, 22. Oktober 2013 16:38 An: MediaWiki-l Betreff: Re: [MediaWiki-l] User authentication via LDAP or (!) local users? There is a fallback to local wiki authentication, if your LDAP config doesn't prevent it. Iirc by default the LDAP extension does disable it however. For a quick fix, you can disable the extension (comment it the include in you LocalSettings.php), then login with any account in you database that you know the password to. On Oct 22, 2013 6:58 AM, "Michael Renner" <michael.renner(a)gmx.de> wrote:

Moin, we use user authentication via LDAP. But the question is: what, if the LDAP fails? The documentation how to setup or repair the LDAP server is inside our wiki. So I wonder if it's possible to use LDAP for "mormal" users, but a local user (let's call him "admin") with authentication against the database? Thanks -- |Michael Renner E-mail: michael.renner(a)gmx.de | |81541 Munich skype: michael.renner.gmx.de | |Germany Don't drink as root! ESC:wq ______________________________**_________________ MediaWiki-l mailing list MediaWiki-l(a)lists.wikimedia.**org <MediaWiki-l(a)lists.wikimedia.org> https://lists.wikimedia.org/**mailman/listinfo/mediawiki-l<https://lis ts.wikimedia.org/mailman/listinfo/mediawiki-l>

_______________________________________________ MediaWiki-l mailing list MediaWiki-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l _______________________________________________ MediaWiki-l mailing list MediaWiki-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Reply

jargon

9:55 a.m.

Hi Markus That worked. Thanks! Dayo On 10/23/2013 10:23 AM, Markus Glaser wrote:

...

Hi Dayo,

If there is no local user, but users can login with valid LDAP credentials how does one go about creating a local user?

Go to Special:Userlogin and click on "create new user". That should do the trick. Best, Markus _______________________________________________ MediaWiki-l mailing list MediaWiki-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Reply

Michael Renner

25 Oct 25 Oct

11:34 a.m.

On 22.10.2013 16:54, Markus Glaser wrote:

...

Hi Michael,

Moin,

...

if you set $wgLDAPUseLocal = true;

thak works perfect. Thanks

...

in LocalSettings.php, you should see 'local' in the list of domains on the login screen. Set this to local and you can use any database account to log in. Best, Markus (mglaser) -----Ursprüngliche Nachricht----- Von: mediawiki-l-bounces(a)lists.wikimedia.org [mailto:mediawiki-l-bounces@lists.wikimedia.org] Im Auftrag von Chris Steipp Gesendet: Dienstag, 22. Oktober 2013 16:38 An: MediaWiki-l Betreff: Re: [MediaWiki-l] User authentication via LDAP or (!) local users? There is a fallback to local wiki authentication, if your LDAP config doesn't prevent it. Iirc by default the LDAP extension does disable it however. For a quick fix, you can disable the extension (comment it the include in you LocalSettings.php), then login with any account in you database that you know the password to. On Oct 22, 2013 6:58 AM, "Michael Renner" <michael.renner(a)gmx.de> wrote:

Moin, we use user authentication via LDAP. But the question is: what, if the LDAP fails? The documentation how to setup or repair the LDAP server is inside our wiki. So I wonder if it's possible to use LDAP for "mormal" users, but a local user (let's call him "admin") with authentication against the database? Thanks -- |Michael Renner E-mail: michael.renner(a)gmx.de | |81541 Munich skype: michael.renner.gmx.de | |Germany Don't drink as root! ESC:wq ______________________________**_________________ MediaWiki-l mailing list MediaWiki-l(a)lists.wikimedia.**org <MediaWiki-l(a)lists.wikimedia.org> https://lists.wikimedia.org/**mailman/listinfo/mediawiki-l<https://lis ts.wikimedia.org/mailman/listinfo/mediawiki-l>

_______________________________________________ MediaWiki-l mailing list MediaWiki-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Reply