Thread:Extension talk:LDAP Authentication/Proxy Bind fails with SSL

I am running mediawiki 1.16.2 and ldap authentication r61987. My configuration (below) works perfect but only if encryption is set to clear. In an ideal situation I would like to use SSL. Configuration and debug code with SSL encryption pasted below. (Most information replaced with generic replacements).

Configuration

$wgLDAPDebug = 5;

$wgDebugLogGroups["ldap"] = "/tmp/debug.log" ;

$wgLDAPDomainNames = array( 'Domain' );

$wgLDAPServerNames = array ( 'Domain' => 'server address here' );

$wgLDAPEncryptionType = array( 'Domain' => 'ssl' );

$wgLDAPProxyAgent = array( 'Domain' => 'account_name,OU=Processes,...

$wgLDAPProxyAgentPassword = array( 'Domain' => 'passwordgoeshere' );

$wgLDAPSearchAttributes = array( 'Domain' => "sAMAccountName" );

$wgMinimalPasswordLength = 1;

$wgLDAPBaseDNs = array( 'Domain'=>'dc=example,dc=Domain,dc=com' );

$wgLDAPGroupBaseDNs = array( 'Domain'=>'ou=Accounts,dc=example,dc=Domain,dc=com'  );

$wgLDAPUserBaseDNs = array( 'Domain'=>'ou=Accounts,dc=example,dc=Domain,dc=com'  );

$wgLDAPDisableAutoCreate = array( 'Domain'=>false );

Debug.log

2011-03-30 19:52:50 testwikidb: Entering validDomain

2011-03-30 19:52:50 testwikidb: User is using a valid domain.

2011-03-30 19:52:50 testwikidb: Setting domain as: Domain

2011-03-30 19:52:50 testwikidb: Entering getCanonicalName

2011-03-30 19:52:50 testwikidb: Username isn't empty.

2011-03-30 19:52:50 testwikidb: Munged username: test

2011-03-30 19:52:50 testwikidb: Entering authenticate

2011-03-30 19:52:50 testwikidb:

2011-03-30 19:52:50 testwikidb: Entering Connect

2011-03-30 19:52:50 testwikidb: Using SSL

2011-03-30 19:52:50 testwikidb: Using servers:  ldaps://server_address

2011-03-30 19:52:50 testwikidb: Connected successfully

2011-03-30 19:52:50 testwikidb: Entering getSearchString

2011-03-30 19:52:50 testwikidb: Doing a proxy bind

2011-03-30 19:52:50 testwikidb: Failed to bind as cn=account_name,OU=Processes....

2011-03-30 19:52:50 testwikidb: with password: passwordgoeshere

2011-03-30 19:52:50 testwikidb: Failed to bind

2011-03-30 19:52:50 testwikidb: User DN is blank

2011-03-30 19:52:50 testwikidb: Entering strict.

2011-03-30 19:52:50 testwikidb: Returning true in strict.

2011-03-30 19:52:50 testwikidb: Entering allowPasswordChange

2011-03-30 19:52:50 testwikidb: Entering modifyUITemplate