Topic on Extension talk:LDAPAuthentication2

trying to get ldap authentication working

8
Seth2740 (talkcontribs)

I have mediawiki 1.34.2 on fedora 32 with apache 2.4.43, mysql 8.0.21 and php 7.4.8. I installed ldapprovider, pluggableauth and ldapauthentication2; autocreate account set to true and have a json file with my ldap config (domain controller, base dn, etc. and hope it's correct). when trying to login, it says it can't authenticate credentials against the domain. I tried to set debug logging for the extension to a log file but didn't create a file. i'm just trying to authenticate against a domain controller. I have pluggableauth, ldapauthentication2, ldapprovider, ldapuserinfo, ldapgroups. not sure if all of those are required for this but seems the documentation is confusing only because there are so many extensions and not sure if all of them are required for this. maybe getting the logging to work to get some debugging or more info as to why it throws that error would be a start

Osnard (talkcontribs)

Have you tried authenticating using the LDAPProvider/maintenance/CheckLogin.php script? Can you please share your configuration? LDAP_hub#Migrating_from_old_LdapAuthentication should give you a clear idea of what extensions you need from the stack.

Seth2740 (talkcontribs)

checklogin.php returns FAILED though showuserinfo.php pulls all the info of my account. i do have ldapprovider, ldapauthentication2 and pluggableauth so that should be fine

Osnard (talkcontribs)

Okay, so the general connection and is configured properly. Can you confirm that your LDAP backend even allows "binding" for the concrete user?

Seth2740 (talkcontribs)

yes the account being used is also used by other applications for ldap lookups

Osnard (talkcontribs)

Can you please share the exact commandline of CheckLogin.php (with arguments) and your domain config?

Seth2740 (talkcontribs)

php CheckLogin.php --domain domain.com --username user

what domain config?

Osnard (talkcontribs)

The JSON of PHP file that contains the LDAP credentials and other config.

Reply to "trying to get ldap authentication working"