MediaWiki LDAP AD authentication

[plexer]

Has anyone here got MediaWiki working with LDAP auth against AD?

I'm trying to set it up for use as our intranet as I figure an easy to update system for posting information and links for students etc... would be handier than other cms systems.

Just can't get ldap to work.

I'll post some configuration if needed.

Ben

[Geoff]

This blog posting will help you out.

http://www.librarywebchic.net/wordpr...ing-mediawiki/

[plexer]

Looked at some info from that site allready.

Followed the mediawiki docs on ldap and got current version of plugin 1.1d

I'm not sure if I've grasped how ldpa auth works with media wiki.

Is it:

Supply AD credentials
If user lookup and bind succeeds add user to local mediawiki database
allow login

or just:

Supply AD credentials
If user lookup and bind succeeds allow edit access to mediawiki

???

Ben

[Geoff]

It does exactly what it says. If the AD authentication is successful, either allow login or allow login + editing.

[plexer]

Thats where I am getting stuck becuase with logging enabled I can it doing the lookup and the bind successfully but then I just get a "user does not exist" message.

Ben

[plexer]

Oh well for the moment it's gone live as our student intranet with me being the only login to the local database and anonymous edits disabled as well as the ability for anyone else to register.

Ben

[PaulBM]

Thats where I am getting stuck becuase with logging enabled I can it doing the lookup and the bind successfully but then I just get a "user does not exist" message.

That sounds like it's possible your search isn't quite right. Download this LDAP browser and double check the containers etc that you're searching.
It helped me fix a similar issue I had.

[plexer]

Sorry the user doesn't exist message is one from MediaWiki presumably becuase the user doesn't exist in the local database.

From the log it does an ldap lookup with the account I've set up specifically for them and when it finds the user I've entered it does a look up as that user with the password you type in. That all works fine.

Ben