Topic on Extension talk:LDAP Authentication

Issues with both LDAP/required groups as well as logging

1
Oleg.blecher (talkcontribs)

Hey all,

I've migrated Mediawiki 1.21 from one server to another with 1.31 running (nginx + PHP 7.0 on a virtual Debian machine). Everything seems to be fine, I've managed to get LDAP-logon to work, but not with wgLDAPRequiredGroups. Furthermore, unlike some people here in this community, I don't even get any errors in the logfile. What am I missing? As soon as I comment out

$wgLDAPRequiredGroups = array( 'internal.domain.com' => array( 'cn=employees,cn=users,dc=internal,dc=domain,dc=com' ));

everything is working as it should.

Here is my config:

require_once( "$IP/extensions/LdapAuthentication/LdapAuthentication.php" );

$wgAuth = new LdapAuthenticationPlugin();

$wgLDAPDomainNames = array(  'internal.domain.com');

$wgLDAPServerNames = array(  'internal.domain.com' => 'dc1.internal.domain.com');

$wgLDAPPort = array(      'internal.domain.com' => 389,  );

$wgLDAPProxyAgent = array(  'internal.domain.com' => 'CN=LDAP Read-only,CN=Users,DC=INTERNAL,DC=domain,dc=com',);

$wgLDAPProxyAgentPassword = array(  'internal.domain.com' => 'D7WBKQgsFEPcuajA3zHb',);

$wgLDAPSearchAttributes = array(  'internal.domain.com' => 'sAMAccountName');

$wgLDAPEncryptionType = array(    'internal.domain.com' => 'start_tls');

$wgLDAPGroupObjectclass = array( 'internal.domain.com'=>'group' );

$wgLDAPGroupAttribute = array( 'internal.domain.com'=>'member' );

$wgLDAPBaseDNs = array(  'internal.domain.com' => 'CN=Users,DC=internal,DC=domain,dc=com');

$wgLDAPGroupObjectclass = array(  'internal.domain.comt' => 'posixGroup');

$wgLDAPGroupNameAttribute = array(  'internal.domain.com' => 'cn');

$wgLDAPRequiredGroups = array( 'internal.domain.com' => array( 'cn=employees,cn=users,dc=internal,dc=domain,dc=com' ));

$wgLDAPGroupSearchNestedGroups = array("ad" => true);

$wgLDAPActiveDirectory = array( "ad" => true);

$wgLDAPDebug = 3;

$wgDebugLogGroups['ldap'] = "/tmp/mediawiki.log";

$wgShowExceptionDetails = true;

I've been trying a lot of different options here, nothing helps really. So any ideas are welcome, especially if I can get that logging going!

Thank you in advance

Reply to "Issues with both LDAP/required groups as well as logging"