I finally found the problem,
In fact I use Internet2 federated Identity shibboleth SSO software for authN + authZ with the following powerfull pluggin
http://wiki.debug.cz/dokuwiki/auth/shib
(I talked about ldap user to simplify discussions ...and because at the end, shibboleth fetch attributes from ldap)
The problem comes from saving the config from the admin config page (id=start&do=admin&page=config)
The plugin original (manually set in local.php) shibboleth mapping group is defined this way:
$conf['auth']['shib']['defaultgroup'] = 'shibusers';
$conf['auth']['shib']['var_entitlement'] = 'unscoped-affiliation';
$conf['auth']['shib']['entitlement_groups'] = array(
'student' => 'student',
'member' => 'member',
'invite' => 'invite',
'employee' => 'employee'
);
but after saving conf from admin web page, the las array had been rewritten to
#$conf['auth']['shib']['entitlement_groups'] = 'array( \'student\' => \'student\', \'invite\' => \'invite\', \'member\' => \'member\' \'employee\' => \'employee\' )';
which seems to be syntaxly wrong regarding the plugin debug message:
[Thu Jan 07 22:23:38 2010] [error] [client 88.231.33.133] entitlement groups not configured
why saving the config from the admin config page (id=start&do=admin&page=config) rewrote my multiple line array definition into a single, apparently syntaxly wrong, line ?
Thanks .