Mediawiki installation notes

Installation notes

Basic configuration (taken form internet and edited):

Test: /var/www/mediawiki-folder/

# LDAP
require_once 'extensions/LdapAuthentication/LdapAuthentication.php';
require_once 'includes/AuthPlugin.php';
$wgAuth = new LdapAuthenticationPlugin();
$wgLDAPDomainNames = array(
  'GridUIS',
);
$wgLDAPServerNames = array(
  'GridUIS' => '192.168.66.5',
);
$wgLDAPUseLocal = false;
$wgLDAPEncryptionType = array(
  'GridUIS' => 'clear',
);
$wgLDAPPort = array(
  'GridUIS' => 389,
);
$wgLDAPProxyAgent = array(
  'GridUIS' => 'cn=nss,ou=admin,dc=uis,dc=edu,dc=co',
);
$wgLDAPProxyAgentPassword = array(
  'GridUIS' => 'griduis2o14sant',
);
$wgLDAPSearchAttributes = array(
  'GridUIS' => 'uid'
);
$wgLDAPBaseDNs = array(
  'GridUIS' => 'dc=uis,dc=edu,dc=co',
);
# To pull e-mail address from LDAP
$wgLDAPPreferences = array(
  'GridUIS' => array( 'email' => 'mail')
);
# Group based restriction
$wgLDAPGroupUseFullDN = array( "openldap_example_com"=>false );
$wgLDAPGroupObjectclass = array( "openldap_example_com"=>"posixgroup" );
$wgLDAPGroupAttribute = array( "openldap_example_com"=>"memberuid" );
$wgLDAPGroupSearchNestedGroups = array( "openldap_example_com"=>false );
$wgLDAPGroupNameAttribute = array( "openldap_example_com"=>"cn" );
$wgLDAPRequiredGroups = array( "openldap_example_com"=>array("cn=ldapwiki,ou=groups,dc=example,dc=com"));
$wgLDAPLowerCaseUsername = array(
  'openldap_example_com' => true,
);

LDAP Setup:

File: /var/www/mediawiki-folder/

// Nombre del dominio
$wgLDAPDomainNames = array(
  'GridUIS',
);

// FQDN del dominio
$wgLDAPServerNames = array(
  'GridUIS' => '192.168.66.5',
);

// Combinar con la base de datos local, dice que ponerlo en falso
$wgLDAPUseLocal = false;

// Tipo de encriptamiento
$wgLDAPEncryptionType = array(
//'testADdomain' => 'tls', Deshabilitado por el moemnto
  'GridUIS' => 'clear',
);

// Usuario y contraseña usada para acceso de proxyagent
// Usar usuario restringido, no el administrador
$wgLDAPProxyAgent = array(
  'GridUIS' => 'cn=nss,ou=admin,dc=uis,dc=edu,dc=co',
);
$wgLDAPProxyAgentPassword = array(
  'GridUIS' => 'griduis2o14sant',
);

// Filtro de busqueda
// These options are only needed if you want to search for users to bind with them. In otherwords,
// if you cannot do direct binds based upon $wgLDAPSearchStrings, then you'll need these two options.
// If you need a proxyagent to search, remember to set $wgLDAPProxyAgent, and $wgLDAPProxyAgentPassword.
// Anonymous searching is supported. To do an anonymous search, use SearchAttibutes and don't set a Proxy
// agent for the domain required.
$wgLDAPSearchAttributes = array(
  'GridUIS' => 'uid'
);
 
// DN Base
// Base DNs. Group and User base DNs will be used if available; if they are not defined, the search
// will default to $wgLDAPBaseDNs
$wgLDAPBaseDNs = array(
  'GridUIS' => 'dc=uis,dc=edu,dc=co'
);

// No crear una cuenta para usuario si la cuenta existe en LDAP pero no en mediawiki
// Default: false.
$wgLDAPDisableAutoCreate = array(
  'GridUIS' => true
);

Last version:

File: /var/www/mediawiki-folder/

# LDAP
require_once "$IP/extensions/LdapAuthentication/LdapAuthentication.php";
$wgAuth = new LdapAuthenticationPlugin();
$wgLDAPDomainNames = array("GridUIS");
$wgLDAPServerNames = array("GridUIS" => "192.168.66.5");
$wgLDAPUseLocal = true;
$wgLDAPEncryptionType = array("GridUIS" => "clear");
# $wgLDAPPort = array('GridUIS' => 389);
$wgLDAPProxyAgent = array("GridUIS" => "cn=nss,ou=admin,dc=uis,dc=edu,dc=co");
$wgLDAPProxyAgentPassword = array("GridUIS" => "griduis2o14sant");
$wgLDAPSearchAttributes = array("GridUIS" => "uid");
$wgLDAPBaseDNs = array("GridUIS" => "dc=uis,dc=edu,dc=co");
# To pull e-mail address from LDAP
$wgLDAPPreferences = array("GridUIS" => array( "email" => "mail"));
$wgLDAPDebug = 3;
//$wgLDAPDebug = 4; //for debugging LDAP
$wgDebugLogGroups["ldap"] = "$IP/extensions/LdapAuthentication/perrito.log" ;
# aparte
$wgShowExceptionDetails = true; //for debugging MediaWiki
$wgDebugLogFile = "/var/log/mediawiki/debug-{$wgDBname}.log";