Hi all,
I migrated recently from mediawiki 1.32 to 1.34 and so I was forced to change from LDAPAuthentication to LDAPHub, my version and configuration are :
| MediaWiki | 1.34.0 |
| PHP | 7.3.11-1~deb10u1 (fpm-fcgi) |
| MariaDB | 10.3.21-MariaDB-1:10.3.21+maria~buster-log |
| ICU | 63.1 |
Plugins :
PluggableAuth : 5.7
LDAPAuthentication2 : 1.0.1
LDAPProvider : 1.0.1
LDAPAuthorization : 1.0.0
#### new ldap conf
wfLoadExtension( 'LDAPProvider' );
$LDAPProviderDomainConfigs = "extensions/LDAPProvider/ldapprovider.json";
wfLoadExtension( 'PluggableAuth' );
$wgPluggableAuth_EnableLocalLogin = true;
$wgGroupPermissions['user']['autocreateaccount'] = true;
$wgGroupPermissions['user']['createaccount'] = true;
wfLoadExtension( 'LDAPAuthorization' );
wfLoadExtension( 'LDAPAuthentication2' );
$LDAPAuthentication2UsernameNormalizer = 'strtolower';
$LDAPAuthentication2AllowLocalLogin = true;
the json is :
{
"localdomain.tld": {
"connection": {
"server": "ldap.localdomain.tld",
"options": {
"LDAP_OPT_DEREF": 1
},
"port": 389,
"enctype": "tls",
"basedn": "dc=localdomain,dc=tld",
"userbasedn": "ou=people,dc=localdomain,dc=tld",
"searchattribute": "uid",
"usernameattribute": "uid",
"realnameattribute": "cn",
"emailattribute": "mail",
"searchstring": "ou=people,uid=USER-NAME,dc=localdomain,dc=tld",
"groupbasedn": "ou=group,dc=localdomain,dc=tld",
"groupobjectclass": "posixgroup",
"groupattribute": "memberuid",
"grouprequest": "MediaWiki\\Extension\\LDAPProvider\\UserGroupsRequest\\Configurable::factory"
},
"authorization": {
"rules": {
"groups": {
"required": [
"cn=tsism,ou=group,dc=localdomain,dc=tld"
]
}
}
}
}
}
when I try to login using the web form I get :
"Could not authenticate credentials against domain "localdomain.tld"
If I use ShowUserInfo.php utility I get correct information, but CheckLogin.php fails,
do you have a suggestion on how to cehck/debug this issue ?
I guess it's something wrong my configuration, but I dont' understand how to start the
troubleshoot.
thank you
M.