[Mediawiki-l] LDAP- and File-Authentication

Marc Patermann hans.moser at ofd-sth.niedersachsen.de
Fri Mar 6 11:33:46 UTC 2009


Hi,

I first set up Mediawiki with LdapAuthentication extension, which worked 
fine against my OpenLDAP server.

On another wiki I had to include file based user authentication (or 
"non-ldap" authentication).

The is a WebDAV dir next to the wiki, so there is Apache httpd basic 
auth implemented on the server. The basic auth uses ldap and as a 
fallback file auth and - as far as I can see for now - works.


So I switched to Auth_remoteuser instead of LdapAuthentication.
This works for the ldap users. But it does not for the file users.
I can see the authenticated user in Apache's access log. But if try to 
make any changes (which require auth) with a file user, I get the http 
auth dialog in the browser, cannot auth again and cannot save the wiki 
changes.


ldap user "bar" submit:
10.49.9.139 - bar at ofd-sth.niedersachsen.de [06/Mar/2009:11:26:05 +0100] 
"GET /wiki/index.php5/Diskussion:Hauptseite HTTP/1.1" 200 12005 
"http://xxxs165/wiki/index.php5?title=Diskussion:Hauptseite&action=submit" 
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 
1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)"

file user "foo" is logged in:
10.49.9.139 - foo [06/Mar/2009:11:45:13 +0100] "GET 
/wiki/skins/common/images/button_sig.png HTTP/1.1" 304 - 
"http://xxxs165/konsens_I/wiki/index.php5?title=Diskussion:Hauptseite&action=edit" 
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 
1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)"

file user "foo" can not edit:
[Fri Mar 06 11:45:18 2009] [warn] [client 10.49.9.139] [32120] auth_ldap 
authenticate: user foo authentication failed; URI /wiki/index.php5 [User 
not found][No such object], referer: 
http://xxxs165/wiki/index.php5?title=Diskussion:Hauptseite&action=edit


How do I get ldap and file user auth work side by side?



Marc



More information about the MediaWiki-l mailing list