Hello,
I have set a fresh installation of mediawiki with ldap autentication. I have it working users can log in. Main problem is that groups are not been sync, If I uncomment the wfLoadExtension( 'LDAPGroups' ); or LDAPUserInfo one it shows an error:
[cff073f5068a68def791a7c3] 2020-01-08 07:43:39: Fatal exception of type MediaWiki\Extension\LDAPProvider\LDAPNoDomainConfigException
I have test with ShowUserGroups.php and seems to be working:
php extensions/LDAPProvider/maintenance/ShowUserGroups.php --domain ldap-midominio.es --username rpv68m
Full DNs:
cn=G_usu_dominildap,ou=usuarios,o=ldap
cn=wikiCPD,ou=CPD,ou=usuarios,o=ldap
cn=G_usu_wikiCPD_admin,ou=adminsrv,ou=Grupos,ou=usuarios,o=ldap
Short names:
g_usu_ldapctg
wikicpd
g_usu_wikicpd_admin
What I'm doing wrong? Here is my LocalSettings:
wfLoadExtension( 'PluggableAuth' );
#$wgPluggableAuth_EnableAutoLogin="true";
$wgPluggableAuth_EnableLocalLogin="true";
$wgPluggableAuth_ButtonLabelMessage="Dominio Novell";
wfLoadExtension( 'LDAPProvider' );
#wfLoadExtension( 'Auth_remoteuser' );
wfLoadExtension( 'LDAPGroups' );
wfLoadExtension( 'LDAPUserInfo' );
wfLoadExtension( 'LDAPAuthentication2' );
wfLoadExtension( 'LDAPAuthorization' );
$LDAPProviderDomainConfigProvider = function()
{
$config =
[
"ldap-midominio.es" =>
[
"connection" =>
[
"server" => "dominio-ldap.ldap-midominio.es",
"user" => "cn=wikicpd,ou=usuarios,ou=recursos,o=ldap",
"pass" => "lahfd.lsab34",
"basedn" => "ou=usuarios,o=ldap",
"groupbasedn" => "ou=usuarios,o=ldap",
"userbasedn" => "ou=usuarios,o=ldap",
"searchattribute" => "cn",
"searchstring" => "cn=USER-NAME,ou=CPD,ou=usuarios,o=ldap",
"usernameattribute" => "cn",
"realnameattribute" => "cn",
"emailattribute" => "mail",
"grouprequest" => "MediaWiki\\Extension\\LDAPProvider\\UserGroupsRequest\\GroupMember::factory" ],
"authorization" =>
[
"rules" =>
[
"groups" =>
[
"required" => [ "cn=G_usu_wikiCPD_admin,ou=adminsrv,ou=Grupos,ou=usuarios,o=ldap",
"cn=G_usu_wikiCPD_CPD,ou=adminsrv,ou=Grupos,ou=usuarios,o=ldap",
"cn=G_usu_wikiCPD_programadores,ou=adminsrv,ou=Grupos,ou=usuarios,o=ldap",
"cn=G_usu_wikiCPD_sistemas,ou=adminsrv,ou=Grupos,ou=usuarios,o=ldap",
"cn=G_usu_wikiCPD_soporte,ou=adminsrv,ou=Grupos,ou=usuarios,o=ldap",
"cn=G_usu_wikiCPD_usuarios,ou=adminsrv,ou=Grupos,ou=usuarios,o=ldap"
]
]
]
],
"groupsync" =>
[
"mechanism" => "mappedgroups",
"mapping" =>
[
"sysop" => "cn=G_usu_wikiCPD_admin,ou=adminsrv,ou=Grupos,ou=usuarios,o=ldap",
"bureaucrat" => "cn=G_usu_wikiCPD_admin,ou=adminsrv,ou=Grupos,ou=usuarios,o=ldap",
"CPD" => "cn=G_usu_wikiCPD_CPD,ou=adminsrv,ou=Grupos,ou=usuarios,o=ldap",
"programadores" => "cn=G_usu_wikiCPD_programadores,ou=adminsrv,ou=Grupos,ou=usuarios,o=ldap",
"sistemas" => "cn=G_usu_wikiCPD_sistemas,ou=adminsrv,ou=Grupos,ou=usuarios,o=ldap",
"soporte" => "cn=G_usu_wikiCPD_soporte,ou=adminsrv,ou=Grupos,ou=usuarios,o=ldap",
"users" => "cn=G_usu_wikiCPD_usuarios,ou=adminsrv,ou=Grupos,ou=usuarios,o=ldap"
]
],
"userinfo" =>
[
"email" => "mail",
"realname" => "cn",
"properties.gender" => "gender"
]
]
];
return new \MediaWiki\Extension\LDAPProvider\DomainConfigProvider\InlinePHPArray( $config );
};