Thread:Extension talk:LDAP Authentication/Fail to bind

Hello, 

 I start over and over and keep failing to connect my MediaWiki instance to my LDAP server. 

 I always get an 'Invalid password' message. 

 I am using MediaWiki 1.21 and LDap extension 2.0d. 

 Please find below the information I need to connect to the LDAP server using JXplorer on the Ubuntu server where the wiki instance is running, the config file and the logs issued when attempting a connection. 

 You can see that I obviously connect to the LDAP server since I retrieve details I try to log in with (Pierre Cart-Grandjean) in MediaWiki. But it still fails to authenticate it. Of course I am sure to type the right password. Any help will be most welcome.   Thanks   JXplorer 

 Host: iis.amadeus.net </BR> Protocal: LDAP v3 </BR> DSML Service: </BR> Base DN: DC=iis,DC=amadeus,DC=net </BR> Level: User + Password </BR> User DN: app-ncemagicdraw </BR> Password: ******* </BR>

</BR> LocalConfig.php: </BR>

</BR> require_once( "$IP/extensions/LdapAuthentication/LdapAuthentication.php" ); </BR> $wgAuth = new LdapAuthenticationPlugin; </BR> $wgLDAPDomainNames = array( </BR> 'AMAIISDOM', </BR> ); </BR> $wgLDAPServerNames = array( </BR> 'AMAIISDOM' => 'iis.amadeus.net', </BR> ); </BR> $wgLDAPUseLocal = false; </BR> $wgLDAPEncryptionType = array( </BR> 'AMAIISDOM' => 'clear', </BR> ); </BR> $wgLDAPProxyAgent = array( </BR> 'AMAIISDOM' => 'app-ncemagicdraw', </BR> ); </BR> $wgLDAPProxyAgentPassword = array( </BR> 'AMAIISDOM' => 'xxxxxx', </BR> ); </BR> $wgLDAPBaseDNs = array( </BR> 'AMAIISDOM' => 'DC=iis,DC=amadeus,DC=net', </BR> ); </BR> $wgLDAPSearchAttributes = array( </BR> 'AMAIISDOM' => 'sAMAccountName', </BR> ); </BR> $wgLDAPDebug = 3; </BR> $wgDebugLogGroups['ldap'] = '/tmp/ldapdebug.log'; </BR>

</BR> Log: </BR>

</BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering validDomain </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d User is using a valid domain (AMAIISDOM). </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Setting domain as: AMAIISDOM </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getCanonicalName </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Username is: Pcartgrandjean </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Munged username: Pcartgrandjean </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering authenticate for username Pcartgrandjean </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering Connect </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Using TLS or not using encryption. </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Using servers: ldap://iis.amadeus.net:389 </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d PHP's LDAP connect method returned true (note, this does not imply it connected to the server). </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getSearchString </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getUserDN </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Doing a proxy bind </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Created a regular filter: (sAMAccountName=Pcartgrandjean) </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getBaseDN </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d basedn is not set for this type of entry, trying to get the default basedn. </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getBaseDN </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:40 cubitus specificationswiki-mw_: 2.0d Using base: DC=iis,DC=amadeus,DC=net </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d userdn is: CN=Pierre CART-GRANDJEAN,OU=Staff,OU=Office,OU=Users,OU=NCE,DC=iis,DC=amadeus,DC=net </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Binding as the user </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Failed to bind as CN=Pierre CART-GRANDJEAN,OU=Staff,OU=Office,OU=Users,OU=NCE,DC=iis,DC=amadeus,DC=net </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Entering strict. </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Returning true in strict. </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Entering allowPasswordChange </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Entering modifyUITemplate </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Entering getDomain </BR> 2013-09-12 09:29:41 cubitus specificationswiki-mw_: 2.0d Pulling domain from session. </BR>