Mediawiki installation notes

Installation notes

Basic configuration (taken form internet and edited):

File: /var/www/mediawiki-folder/

# LDAP require_once 'extensions/LdapAuthentication/LdapAuthentication.php'; require_once 'includes/AuthPlugin.php'; $wgAuth = new LdapAuthenticationPlugin(); $wgLDAPDomainNames = array( 'GridUIS', ); $wgLDAPServerNames = array( 'GridUIS' => '192.168.66.5', ); $wgLDAPUseLocal = false; $wgLDAPEncryptionType = array( 'GridUIS' => 'clear', ); $wgLDAPPort = array( 'GridUIS' => 389, ); $wgLDAPProxyAgent = array( 'GridUIS' => 'cn=nss,ou=admin,dc=uis,dc=edu,dc=co', ); $wgLDAPProxyAgentPassword = array( 'GridUIS' => 'griduis2o14sant', ); $wgLDAPSearchAttributes = array( 'GridUIS' => 'uid' ); $wgLDAPBaseDNs = array( 'GridUIS' => 'dc=uis,dc=edu,dc=co', ); # To pull e-mail address from LDAP $wgLDAPPreferences = array( 'GridUIS' => array( 'email' => 'mail') ); # Group based restriction $wgLDAPGroupUseFullDN = array( "openldap_example_com"=>false ); $wgLDAPGroupObjectclass = array( "openldap_example_com"=>"posixgroup" ); $wgLDAPGroupAttribute = array( "openldap_example_com"=>"memberuid" ); $wgLDAPGroupSearchNestedGroups = array( "openldap_example_com"=>false ); $wgLDAPGroupNameAttribute = array( "openldap_example_com"=>"cn" ); $wgLDAPRequiredGroups = array( "openldap_example_com"=>array("cn=ldapwiki,ou=groups,dc=example,dc=com")); $wgLDAPLowerCaseUsername = array( 'openldap_example_com' => true, );

LDAP Setup:

File: /var/www/mediawiki-folder/

// Nombre del dominio
$wgLDAPDomainNames = array(
  'GridUIS',
);

// FQDN del dominio
$wgLDAPServerNames = array(
  'GridUIS' => '192.168.66.5',
);

// Combinar con la base de datos local, dice que ponerlo en falso
$wgLDAPUseLocal = false;

// Tipo de encriptamiento
$wgLDAPEncryptionType = array(
//'testADdomain' => 'tls', Deshabilitado por el moemnto
  'GridUIS' => 'clear',
);

// Usuario y contraseña usada para acceso de proxyagent
// Usar usuario restringido, no el administrador
$wgLDAPProxyAgent = array(
  'GridUIS' => 'cn=nss,ou=admin,dc=uis,dc=edu,dc=co',
);
$wgLDAPProxyAgentPassword = array(
  'GridUIS' => 'griduis2o14sant',
);

// Filtro de busqueda
// These options are only needed if you want to search for users to bind with them. In otherwords,
// if you cannot do direct binds based upon $wgLDAPSearchStrings, then you'll need these two options.
// If you need a proxyagent to search, remember to set $wgLDAPProxyAgent, and $wgLDAPProxyAgentPassword.
// Anonymous searching is supported. To do an anonymous search, use SearchAttibutes and don't set a Proxy
// agent for the domain required.
$wgLDAPSearchAttributes = array(
  'GridUIS' => 'uid'
);
 
// DN Base
// Base DNs. Group and User base DNs will be used if available; if they are not defined, the search
// will default to $wgLDAPBaseDNs
$wgLDAPBaseDNs = array(
  'GridUIS' => 'dc=uis,dc=edu,dc=co'
);

// No crear una cuenta para usuario si la cuenta existe en LDAP pero no en mediawiki
// Default: false.
$wgLDAPDisableAutoCreate = array(
  'GridUIS' => true
);

Last version:

File: /var/www/mediawiki-folder/

# LDAP
require_once "$IP/extensions/LdapAuthentication/LdapAuthentication.php";
$wgAuth = new LdapAuthenticationPlugin();
$wgLDAPDomainNames = array("GridUIS");
$wgLDAPServerNames = array("GridUIS" => "192.168.66.5");
$wgLDAPUseLocal = true;
$wgLDAPEncryptionType = array("GridUIS" => "clear");
# $wgLDAPPort = array('GridUIS' => 389);
$wgLDAPProxyAgent = array("GridUIS" => "cn=nss,ou=admin,dc=uis,dc=edu,dc=co");
$wgLDAPProxyAgentPassword = array("GridUIS" => "griduis2o14sant");
$wgLDAPSearchAttributes = array("GridUIS" => "uid");
$wgLDAPBaseDNs = array("GridUIS" => "dc=uis,dc=edu,dc=co");
# To pull e-mail address from LDAP
$wgLDAPPreferences = array("GridUIS" => array( "email" => "mail"));
$wgLDAPDebug = 3;
//$wgLDAPDebug = 4; //for debugging LDAP
$wgDebugLogGroups["ldap"] = "$IP/extensions/LdapAuthentication/perrito.log" ;
# aparte
$wgShowExceptionDetails = true; //for debugging MediaWiki
$wgDebugLogFile = "/var/log/mediawiki/debug-{$wgDBname}.log";