Are you sure that the LdapAuthentication extension CAN create users?

We use the extension with Active Directory. We create all our users in Active 
Directory, and have disabled the "create user" feature in MediaWiki for 
non-admins.

Also, are you using a very old version of LdapAuthentication? If "1.2e" is the 
LdapAuthentication version, you are way out of date. It's up to 2.0d now.

DanB

From: [email protected] 
[mailto:[email protected]] On Behalf Of Natxo Asenjo
Sent: Wednesday, March 18, 2015 10:52 AM
To: [email protected]
Subject: [MediaWiki-l] ldap auth question

hi,

I have asked this
https://www.mediawiki.org/wiki/Thread:Extension_talk:LDAP_Authentication/ldap_auth_works_fine_for_existing_except_for_new_users
in the ldap auth discussion site, but so far no answers.

So let me ask it here.

The tldr; version is:

How can I create a wiki user without a password in the mysql cli? That
would be a workaround for our problem.

Now the long version:

We have been using the ldap auth extension for quite a long time for our IT
admin group. The site is protected using apache basic auth (ldap and
restricted to users of a certain group). This works.

After logging in to the vhost, the extension starts to do its work with the
settings you can read on the link above.

Only for new users, no new db wiki user is being created as I can read in
the ldap_debug.log:

2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Entering Connect
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Connected successfully
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Entering getSearchString
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Doing a proxy bind
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Entering getUserDN
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Entering getBaseDN
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
basedn is not set
for this type of entry, trying to get the default basedn.
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Entering getBaseDN
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
basedn is dc=domain,dc=tld
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Fetched username is
not a string (check your hook code...). This message can be safely
ignored if you do not have the SetUsernameAttributeFromLDAP hook
defined.
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Entering getGroups
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Entering checkGroups
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Entering getPreferences
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Retrieving preferences
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Retrieved realname
(bladibla) using attribute (displayname)
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Retrieved nickname
(bladibla) using attribute (cn)
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Entering synchUsername
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Authentication passed
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Entering getCanonicalName
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Username isn't empty.
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Munged username: Bladibla
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e User 
exists in LDAP;
finding the user by name (Bladibla) in MediaWiki.
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e Got 
id ().
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e User 
does not exist
in local database; creating.
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Entering initUser
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Entering updateUser
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Setting user preferences.
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Setting nickname.
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Setting realname.
2015-03-11 09:13:17 wiki.iriszorg.nl<http://wiki.iriszorg.nl> wikidb: 1.2e 
Saving user settings.

every time our new colleagues get a 500 response from apache. So why
is the extension not creating the users in the wiki db? The wiki is
working perfectly fine for the rest of the team, this problem only
happens to new hires.

As workaround: how can I create a wiki user from the cli without a password?

Thanks in advance.
--
--
Groeten,
natxo
_______________________________________________
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

________________________________
My email address has changed to [email protected]. Please update your address 
book.

Cimpress is the new name for Vistaprint NV, the world’s leader in mass 
customization. Read more about Cimpress at www.cimpress.com.
________________________________
_______________________________________________
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Reply via email to