Hi,
Do you know whether nested group is supported on the latest version of Ldap Extension(1.1f or g)? I find that it only authenticates user members of the group but not the users under membergroups. I'm also getting errors on page after the successful logon.
Here is the Debug logs:
Entering authenticate Entering Connect Using TLS or not using encryption. Using servers: ldap://intranet.mydomain.com Connected successfully Entering getSearchString Doing a straight bind userdn is: intranet\zham Binding as the user Bound successfully Entering getUserDN Created a regular filter: (sAMAccountName=zham) Entering getBaseDN basedn is not set for this type of entry, trying to get the default basedn. Entering getBaseDN basedn is ou=users,ou=sgp,ou=apac,dc=intranet,dc=mydomain,dc=com Using base: ou=users,ou=sgp,ou=apac,dc=intranet,dc=mydomain,dc=com Fetched username is not a string (check your hook code...). This message can be safely ignored if you do not have the SetUsernameAttributeFromLDAP hook defined. Pulled the user's DN: CN=Rock, Zham (SGP),OU=Users,OU=SGP,OU=APAC,DC=INTRANET,DC=MYDOMAIN,DC=com Authentication passed Entering updateUser
Errors on the page after successful logon:
: 1 threads didn't exit PHP Notice: Undefined offset: 0 in D:\wiki\extensions\LdapAuthentication.php on line 1121
): 1 threads didn't exit
All help is much appreciated.
-zham
Authentication passed Entering updateUser
Errors on the page after successful logon:
: 1 threads didn't exit PHP Notice: Undefined offset: 0 in D:\wiki\extensions\LdapAuthentication.php on line 1121
): 1 threads didn't exit
updateUser is called after group restriction checking. Most likely, the plugin isn't configured correctly. Are you trying to do nested group restriction, or (nested group) synchronization? Notice that the latter isn't currently supported...
The error you are getting is a bug, but isn't really affecting anything you are trying (yet...). Notice however, that the error is still likely due to mis-configuration; the bug isn't affecting functionality, it is just failing to cause the plugin to fail gracefully.
Btw, always use the current stable version of the plugin (currently 1.1f), unless specifically pointed to the alpha/beta version for a bug fix.
V/r,
Ryan Lane
Thanks - just saw the error on my config:
$wgLDAPGroupSearchNestedGroups = array( "intranet"=>false );
it should be set to True, now it works fine except for the bug.
Is there a way to get rid of the errors after the successful login?
On 9/12/07, Lane, Ryan Ryan.Lane@ocean.navo.navy.mil wrote:
Authentication passed Entering updateUser
Errors on the page after successful logon:
: 1 threads didn't exit PHP Notice: Undefined offset: 0 in D:\wiki\extensions\LdapAuthentication.php on line 1121
): 1 threads didn't exit
updateUser is called after group restriction checking. Most likely, the plugin isn't configured correctly. Are you trying to do nested group restriction, or (nested group) synchronization? Notice that the latter isn't currently supported...
The error you are getting is a bug, but isn't really affecting anything you are trying (yet...). Notice however, that the error is still likely due to mis-configuration; the bug isn't affecting functionality, it is just failing to cause the plugin to fail gracefully.
Btw, always use the current stable version of the plugin (currently 1.1f), unless specifically pointed to the alpha/beta version for a bug fix.
V/r,
Ryan Lane
MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Thanks - just saw the error on my config:
$wgLDAPGroupSearchNestedGroups = array( "intranet"=>false );
it should be set to True, now it works fine except for the bug.
Glad to hear it.
Is there a way to get rid of the errors after the successful login?
I'm going to fix this next release.
V/r,
Ryan Lane
mediawiki-l@lists.wikimedia.org