Thread:Extension talk:LDAP Authentication/Cannot change users password

When a user tries to change their password the user gets "There was either an authentication database error or you are not allowed to update your external account." Here is my config

and here is the debug.log 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering allowPasswordChange 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering authenticate for username userName 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Configuration set to lowercase username. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering Connect 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Using TLS or not using encryption. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Using non-standard port: 389 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Using servers: ldap://88.88.88.75:389 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Using TLS 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e PHP's LDAP connect method returned true (note, this does not imply it connected to the server). 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getSearchString 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getUserDN 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Doing a proxy bind 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Created a regular filter: (uid=userName) 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getBaseDN 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e basedn is ou=people,dc=my-domain,dc=com 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Using base: ou=people,dc=my-domain,dc=com 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Setting the LDAPUsername based on fetched wgLDAPSearchAttributes: userName 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e userdn is: uid=userName,ou=Technical,ou=people,dc=my-domain,dc=com 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Binding as the user 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Bound successfully 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getGroups 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Retrieving LDAP group membership 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Using memberOf 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Got the following groups: cn=bug,ou=groups,dc=my-domain,dc=com::cn=wiki,ou=wiki groups,ou=groups,dc=my-domain,dc=com::cn=wiki-admin,ou=wiki groups,ou=groups,dc=my-domain,dc=com::cn=vpn,ou=groups,dc=my-domain,dc=com::cn=linux,ou=groups,dc=my-domain,dc=com::cn=nagios,ou=groups,dc=my-domain,dc=com::cn=administrators,ou=groups,dc=my-domain,dc=com 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering checkGroups 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Checking for (new style) group membership 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Required groups: cn=wiki,ou=wiki groups,ou=groups,dc=my-domain,dc=com 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Checking against: cn=bug,ou=groups,dc=my-domain,dc=com 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Checking against: cn=wiki,ou=wiki groups,ou=groups,dc=my-domain,dc=com 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Found user in a group. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getPreferences 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Retrieving preferences 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Retrieved email (userName@my-domain.com) using attribute (mail) 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Retrieved realname (Real Name) using attribute (cn) 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Retrieved nickname (userName) using attribute (uid) 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Authentication passed 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering allowPasswordChange 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering setPassword 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Entering getDomain 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Pulling domain from session. 2013-07-17 11:25:11 88.88.88.75 wiki-csw_: 2.0e Wiki doesn't have wgLDAPWriterDN set

Any ideas on how to fix this?