imported>Leaf at 21:11, 3 December 2018

2018-12-03T21:11:20Z

New page

# How to Authenticate using the LDAP Server

The domain for LDAP authentication is **example.io**. The search string for a user **leaf** is **uid=leaf,ou=people,dc=example,dc=io**. Here are the settings used by mediawiki to perform LDAP authentication:

```
$wgLDAPDomainNames = array('example.io');
$wgLDAPServerNames = array('example.io' => 'zmail1.example.io');

$wgLDAPUseLocal = false;
$wgLDAPEncryptionType = array('example.io' => 'tls');
$wgLDAPPort = array('example.io' => 389);

$wgLDAPSearchStrings = array(
'example.io' => 'uid=USER-NAME,ou=people,dc=example,dc=io'
);

$wgLDAPBaseDNs = array('example.io' => 'dc=example,dc=io');
$wgLDAPUserBaseDNs = array('example.io' => 'ou=people,dc=example,dc=io');
$wgLDAPGroupBaseDNs = array('example.io' => 'ou=group,dc=example,dc=io');</nowiki>
```

## Some Notes on Querying LDAP

You may consider [using the LDAP Utilities](https://wiki.debian.org/LDAP/LDAPUtils) to verify that you can connect to the LDAP server, query it, etc. This is useful for debugging issues before trying to configure your application, e.g. MediaWiki, to perform LDAP authentication.

## Some Notes on Mediawiki's LDAP Plugin

With 1.27, some of the features of the plugin were broken. In addition to the configuration stored in **LocalSettings.php**, it was also necessary to [follow the instructions here](https://www.mediawiki.org/wiki/Topic:Tgdofnhfke1w3w7e). Specifically, it was necessary to comment out the **saveDomain** line as described and to give the **autocreateaccount** permission.

Background on why this is necessary [can be found here](https://www.mediawiki.org/wiki/Topic:T6s2lkqumdyy0zqv) and [also here](https://www.mediawiki.org/wiki/Topic:U6tc39jwk2pjhb62). There is some useful, but somewhat [outdated documentation here](https://www.mediawiki.org/wiki/Extension:LDAP_Authentication/Configuration_Options). [This was also helpful](https://blog.ryandlane.com/2009/03/23/using-the-ldap-authentication-plugin-for-mediawiki-the-basics-part-1/)

LDAPAuthentication - Revision history

imported>Leaf at 21:11, 3 December 2018