Virtual LDAP server and virtual mediawiki host; can't login with users from LDAP

Ypebe · 06-05-2011, 01:05 PM

In the past I found some great help on this forum, so here goes. Bare with me because it's a long story. I'll try to be as complete as possible.

I've installed and configured OpenLdap on a virtual machine with ip 192.168.39.134. I've added 2 users via LAM. In the ou WikiUsers and the domain is wiki.local.

I've then created another host with ip 192.168.39.133 with mediawiki installed on it. Then I added the extension LDAPAuthenthication.
In the LdapAuthentication file I added this code (only the last paragraph is mine, I added the others to show it's location in the script):

Quote:

$path = array( $IP, "$IP/includes", "$IP/languages" );
set_include_path( implode( PATH_SEPARATOR, $path ) . PATH_SEPARATOR . get_include_path() );

require_once( "$IP/includes/DefaultSettings.php" );

require_once( "$IP/extensions/LdapAuthentication/LdapAuthentication.php" );
$wgAuth = new LdapAuthenticationPlugin();
$wgLDAPDomainNames = array( "wiki.local" );
$wgLDAPServerNames = array( "wiki.local"=>"192.168.39.134" );
$wgLDAPSearchStrings = array( "wiki.local"=>"uid=USER-NAME,ou=WikiUsers,dc=wiki,dc=local" );
$wgLDAPSearchAttributes = array( "wiki.local"=>"uid" );
$wgLDAPUseSSL = array( "wiki.local"=>"ssl" );
$wgMinimalPasswordLength = 1;

I know I'm close because I can't register any new users or accounts on the mediawiki site. Although I could before I added the LDAP service.

Any suggestions?
This is indeed all just to test and get to know how LDAP works. That's why it's all virtual in VMWare.
I did not really configure anything on the LDAP, i just installed it and chose a domain (wiki.local).

Any tips or suggestions are highly appreciated.

acid_kewpie · 06-05-2011, 01:19 PM

listing things as "virtual" is very confusing when it's totally irrelevant. It's just an ldap server. being a VM is not a point of concern.

so you sound like you're tryin to make far too many jumps in one go, or at least not telling us about the ones in between. Can you do an ldap search from the wiki server? If you can't do that I could care less about a mediawiki plugin... What do the openldap and mediawiki logs say about the ldap connections etc?

Ypebe · 06-05-2011, 01:32 PM

It might be irrelevant, but I tried to be as complete as my noob mind is be able too.

The ldapsearch from the wiki server would indeed be a great test to see if my initial setup is correct. I've googled it, but; how do I do that?

Sorry, I'm really new at this. Thus the reason why I don't have a list of log files to explain more. (would not even know how to extract such a list to be honest.)

acid_kewpie · 06-05-2011, 01:36 PM

well you should already have it installed, it'll be in a package called "openldap-tools" or "openldap-client" etc.

Ypebe · 06-05-2011, 01:53 PM

Indeed.

Ldapsearch (ldapsearch -x -b "dc=wiki,dc=local") from the wiki server gives:

Quote:

ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

This will be a long night

I'll have to figure out how to link those two hosts (the wiki and the ldap).

Ypebe · 06-07-2011, 08:01 PM

Succes. I got the basic setup working.
I can now login on the Wiki-client (Debian) with a uid from the LDAP-server.

Still, on the wikimedia page, I can not login with those accounts.

Any advice now I did my best to get the basic setup going?

Thx