Are you sure that the LdapAuthentication extension CAN create users?
We use the extension with Active Directory. We create all our users in Active Directory,
and have disabled the "create user" feature in MediaWiki for non-admins.
Also, are you using a very old version of LdapAuthentication? If "1.2e" is the
LdapAuthentication version, you are way out of date. It's up to 2.0d now.
DanB
From: mediawiki-l-bounces(a)lists.wikimedia.org
[mailto:mediawiki-l-bounces@lists.wikimedia.org] On Behalf Of Natxo Asenjo
Sent: Wednesday, March 18, 2015 10:52 AM
To: mediawiki-l(a)lists.wikimedia.org
Subject: [MediaWiki-l] ldap auth question
hi,
I have asked this
https://www.mediawiki.org/wiki/Thread:Extension_talk:LDAP_Authentication/ld…
in the ldap auth discussion site, but so far no answers.
So let me ask it here.
The tldr; version is:
How can I create a wiki user without a password in the mysql cli? That
would be a workaround for our problem.
Now the long version:
We have been using the ldap auth extension for quite a long time for our IT
admin group. The site is protected using apache basic auth (ldap and
restricted to users of a certain group). This works.
After logging in to the vhost, the extension starts to do its work with the
settings you can read on the link above.
Only for new users, no new db wiki user is being created as I can read in
the ldap_debug.log:
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Entering
Connect
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Connected
successfully
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Entering
getSearchString
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Doing a
proxy bind
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Entering
getUserDN
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Entering
getBaseDN
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e basedn is
not set
for this type of entry, trying to get the default basedn.
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Entering
getBaseDN
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e basedn is
dc=domain,dc=tld
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Fetched
username is
not a string (check your hook code...). This message can be safely
ignored if you do not have the SetUsernameAttributeFromLDAP hook
defined.
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Entering
getGroups
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Entering
checkGroups
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Entering
getPreferences
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e
Retrieving preferences
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Retrieved
realname
(bladibla) using attribute (displayname)
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Retrieved
nickname
(bladibla) using attribute (cn)
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Entering
synchUsername
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e
Authentication passed
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Entering
getCanonicalName
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Username
isn't empty.
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Munged
username: Bladibla
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e User
exists in LDAP;
finding the user by name (Bladibla) in MediaWiki.
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Got id
().
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e User does
not exist
in local database; creating.
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Entering
initUser
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Entering
updateUser
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Setting
user preferences.
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Setting
nickname.
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Setting
realname.
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Saving
user settings.
every time our new colleagues get a 500 response from apache. So why
is the extension not creating the users in the wiki db? The wiki is
working perfectly fine for the rest of the team, this problem only
happens to new hires.
As workaround: how can I create a wiki user from the cli without a password?
Thanks in advance.
--
--
Groeten,
natxo
_______________________________________________
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
________________________________
My email address has changed to danb(a)cimpress.com. Please update your address book.
Cimpress is the new name for Vistaprint NV, the world’s leader in mass customization. Read
more about Cimpress at
www.cimpress.com.
________________________________