Topic on Project:Support desk

What's the situation now with Active Directory / LDAP authentication?

14
GiladH (talkcontribs)

Hi,

I just the latest MediaWiki version (1.30), and tried to install the LdapAuthentication extension.

Can't get the site to even start since the extension.json is missing from the LdapAuthentication directory. I understand that this extension is no longer supported...

Is there any other way get MediaWiki to authenticate to Active Directory?

2001:16B8:1034:A600:10E3:915B:B3F2:80D5 (talkcontribs)

Hi there!

The extension is working just fine. You need to do the inclusion in LocalSettings.php with require_once();! This information is somewhat hidden on Extension:LDAP Authentication/Examples...

For the status of this extension I know that there is going to be a replacement for it. However, I don't know of any code, that has already been written... See LDAP hub for information I found on this topic! T165270 contains a list of steps dated May 2017, which someone might want to do somewhen - however it does not seem like anything of this has already been done.

Osnard (talkcontribs)

There is active development going on for a new LDAP authentication stack by the MediaWiki Stakeholders' Group. But there is no officially announced release date yet.

If you just need "authentication" and not stuff like "group-restrictions" and "group-sync", you could try setting up your webserver for Kerberos or NTLM authentication and use Extension:Auth remoteuser for logging into the wiki.

GiladH (talkcontribs)

Thanks for the reply.

Still getting the following error:

PHP Fatal error:  Uncaught Exception: /var/www/html/extensions/LdapAuthentication/extension.json does not exist! in /var/www/html/includes/registration/ExtensionRegistry.php:99

Any ideas?

This post was hidden by 201.139.231.226 (history)
GiladH (talkcontribs)

Thanks for that, But I'm now getting the following error in the LDAP log file:

2018-02-06 11:38:28 192.168.8.149 mediawiki: 2.1.0 It looks like you are missing LDAP support; please ensure you have either compiled LDAP support in, or have enabled the module. If the authentication is working for you, the plugin isn't properly detecting the LDAP module, and you can safely ignore this message.

But I did install the PHP LDAP extension...

I've install php70w-ldap (I have PHP version 7.0.27), and according to the output from php -m the extension is loaded. Also, I'm checking with tcpdump, and it seems like the server is not even trying to connect to the AD with TCP/389.

Any ideas?

GiladH (talkcontribs)

Ok, I managed to get it working. Thanks a lot :)

Osnard (talkcontribs)

Can you share your solution?

190.45.71.89 (talkcontribs)

Can you share your solution? +1

This post was hidden by Namtr0 (history)
Namtr0 (talkcontribs)

Please share what you did @GiladH

193.190.253.145 (talkcontribs)

@Osnard

@Namtr0

I only use require_once( "$IP/extensions/LdapAuthentication/LdapAuthentication.php" );

Which works I think.

81.241.235.183 (talkcontribs)

Bump… any news on this ?

2001:16B8:109E:8F00:D5A8:B258:56DC:66C2 (talkcontribs)

The solution is already standing there for more than one year now:

> You need to do the inclusion in LocalSettings.php with require_once();!

This information is somewhat hidden on Extension:LDAP Authentication/Examples.

Reply to "What's the situation now with Active Directory / LDAP authentication?"