Thread:Extension talk:LDAP Authentication/LDAPv3 with Kerberos Authentication

Hi, We are using Mediawiki 1.26wmf1 with LdapAuthentication 1.24. Centos 6.2. We are trying to authenticate against a Kerberos realm, pulling users from a LDAP v3 directory. Server apache Kerberos setup is OK. Configuration /debug follows. The wiki will not authenticate at all. Must be missing something. Any help appreciated. FYI have tried other encryption types. Best regards, Tim. require_once "$IP/extensions/LdapAuthentication/LdapAutoAuthentication.php"; require_once "$IP/extensions/LdapAuthentication/LdapAuthentication.php"; $wgAuth = new LdapAuthenticationPlugin; $wgLDAPDomainNames = array( "rushesfx" ); $wgLDAPServerNames = array( "rushesfx" => "ldap0.rushesfx.co.uk" ); $wgLDAPSearchStrings = array( "rushesfx" => "uid=USER-NAME,ou=people,dc=rushesfx,dc=rushesfx,dc=co,dc=uk" ); $wgLDAPSearchAttributes = array("rushesfx"=>"uid"); $wgLDAPBaseDNs = array("rushesfx"=>"DC=rushesfx,DC=co,DC=uk"); $wgLDAPEncryptionType = array( "rushesfx" => "clear" );

2015-04-09 18:55:15 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 User is not using a valid domain. 2015-04-09 18:55:15 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getDomain 2015-04-09 18:55:15 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Setting domain as: rushesfx 2015-04-09 18:55:15 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering allowPasswordChange 2015-04-09 18:55:15 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getDomain 2015-04-09 18:55:15 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getDomain 2015-04-09 18:55:15 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering modifyUITemplate 2015-04-09 18:55:15 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getDomain 2015-04-09 18:55:15 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getDomain 2015-04-09 18:55:15 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getDomain 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering validDomain 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 User is using a valid domain (rushesfx). 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Setting domain as: rushesfx 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getCanonicalName 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Username is: Twharton 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getDomain 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Munged username: Twharton 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getCanonicalName 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Username is an IP, not munging. 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getCanonicalName 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Username is an IP, not munging. 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getDomain 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering userExists 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getDomain 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getDomain 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering authenticate for username Twharton 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getDomain 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getDomain 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getDomain 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering Connect 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 It looks like you are missing LDAP support; please ensure you have either compiled LDAP support in, or have enabled the module. If the authentication is working for you, the plugin isn't properly detecting the LDAP module, and you can safely ignore this message. 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering allowPasswordChange 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getDomain 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getDomain 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering modifyUITemplate 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getDomain 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getDomain 2015-04-09 18:55:27 mediawiki.rushesfx.co.uk mediawiki: 2.1.0 Entering getDomain