Not logged in. · Lost password · Register
Forum: General Help and Support Plugins RSS
Login on dokuwiki using MS Active Directory
Avatar
ketchup051702 #1
Member since Jan 2019 · 5 posts
Group memberships: Members
Show profile · Link to this post
Subject: Login on dokuwiki using MS Active Directory
Hi, we migrated our dokuwiki from Google authentication to active directory. Below is the error.


User authentication is temporarily unavailable. If this situation persists, please inform your Wiki Admin.

Please see the configuration on /var/www/html/dokuwiki/conf/local.php

<?php
/**
  • AD configuration for LDAP Auth Plugin
*/
$conf['title'] = 'VoyagerWiki';
$conf['license'] = 'cc-by-sa';
$conf['typography'] = '0';
$conf['showuseras'] = 'username';
$conf['useacl'] = 1;
$conf['superuser'] = '@admin';
$conf['authtype']                          = 'authldap';
$conf['plugin']['authldap']['server']      = 'ldap://IP address';
$conf['plugin']['authldap']['userfilter']  = '(&(objectClass=user)(sAMAccountName=%{user}))';
$conf['plugin']['authldap']['groupfilter'] = '(&(objectClass=*)(member=%{dn}))';
$conf['plugin']['authldap']['usertree']    = 'OU=Enabled Users,OU=User Accounts,DC=VOYAGERINNOVATION,DC=PH';
$conf['plugin']['authldap']['grouptree']   = 'OU=Groups,DC=VOYAGERINNOVATION,DC=PH';
$conf['plugin']['authldap']['binddn']      = 'CN=Svc.adc-wiki,OU=Service Accounts,OU=Tier 1,OU=Admin,DC=VOYAGERINNOVATION,DC=PH';
$conf['plugin']['authldap']['bindpw']      = 'Password';
$conf['plugin']['authldap']['modPass']     = 0;
$conf['plugin']['authldap']['version'] = 3;
$conf['plugin']['showinitpage']['initpageurl'] = 'http://dokuwiki.corp.voyager.ph/dokuwiki1/doku.…?id=star…';
$conf['plugin']['loginredirect']['return_key'] = 'id=start';
$conf['plugin']['authldap']['debug']      = 1;
// end auto-generated content
Avatar
schplurtz (Moderator) #2
Member since Nov 2009 · 439 posts · Location: France, Finistère
Group memberships: Global Moderators, Members
Show profile · Link to this post
Hi,

Do you have the necessary PHP libs ? On some systems you need to activate/install php-ldap...

Also, did you notice that other authentification plugin https://www.dokuwiki.org/plugin:authad ?
Description
While Active Directory authentication can be set up with the bundled authLDAP plugin, it should be easier to do with this dedicated AD auth plugin. It makes use of the excellent adLDAP library and is based on the work by James Van Lommel. You do not need to download the adLDAP library yourself, it is included with DokuWiki.
Avatar
ketchup051702 #3
Member since Jan 2019 · 5 posts
Group memberships: Members
Show profile · Link to this post
Hi, thanks for responding. I think I have all the plugins on my server

acl/                authmysql/          fckgLite.tgz        popularity/         syntax.php
action.php          authpgsql/          googlecal/          remote.php          testing/
admin.php           auth.php            index.html          revert/             usermanager/
authad/             authplain/          info/               safefnrecode/
authgoogle/         config/             loginredirect/      showlogin/
authldap/           fckg/               plugin/             syntaxhighlighter3/
Avatar
schplurtz (Moderator) #4
Member since Nov 2009 · 439 posts · Location: France, Finistère
Group memberships: Global Moderators, Members
Show profile · Link to this post
Hi,

little misunderstanding... I was not asking for the DokuWiki plugins that are installed.
Dokuwiki is powered by PHP, and some plugins require that PHP itself has some extra capabilities.
For example, you cannot activate LDAP auth if your PHP instance is missing LDAP capability.
That was the meaning of my question :
Do you have the necessary PHP libs ? On some systems you need to activate/install php-ldap...
If you don't know if PHP has LDAP support, you can easily check : Create a file named info.php with the following content in the directory that contanis doku.php and point your browser at it. The page that will show up will tell you everything about your PHP.
<?php phpinfo();
Avatar
ketchup051702 #5
Member since Jan 2019 · 5 posts
Group memberships: Members
Show profile · Link to this post
Hi schplurtz thanks for responding. So I just reinstalled a fresh dokuwiki install. Maybe I will just transfer the files later.

SO I can now login to the new doku server, but when I put below config on local.php, I get an error "DokuWiki Setup Error. Something unforseen has happened: Maximum action transitions reached"

$conf['title'] = 'Random Wiki';
$conf['lang'] = 'en';
$conf['license'] = 'cc-by-sa';
$conf['useacl'] = 1;
$conf['superuser'] = '@admin';
$conf['disableactions'] = 'register';
// configure your Active Directory data here
$conf['authtype'] = 'ad';
$conf['auth']['ad']['account_suffix']     = '@anything.something.com';
$conf['auth']['ad']['base_dn']            = 'DC=anything,DC=something,DC=com';
$conf['auth']['ad']['domain_controllers'] = '10.100.0.79, 10.100.0.22';

Can you please advise what is wrong?
Avatar
ketchup051702 #6
Member since Jan 2019 · 5 posts
Group memberships: Members
Show profile · Link to this post
But when I put it on default, the website is normal

<?php
/**
 * Dokuwiki's Main Configuration File - Local Settings
 * Auto-generated by install script
 * Date: Fri, 11 Jan 2019 08:33:49 +0000
 */
$conf['title'] = 'Random Wiki';
$conf['lang'] = 'en';
$conf['license'] = 'cc-by-sa';
$conf['useacl'] = 1;
$conf['superuser'] = '@admin';
$conf['disableactions'] = 'register';
Avatar
schplurtz (Moderator) #7
Member since Nov 2009 · 439 posts · Location: France, Finistère
Group memberships: Global Moderators, Members
Show profile · Link to this post
I'm sorry. The missing LDAP PHP library was the only idea I had.

Maybe someone else here ?
Avatar
ketchup051702 #8
Member since Jan 2019 · 5 posts
Group memberships: Members
Show profile · Link to this post
So I reverted my local.php to the original one and I can access the console again.

Then I went to the Extension Manager > Installed plugins > Active Directory Auth Plugin via the admin console. I already enabled it but I still see "This auth plugin is not enabled in configuration, consider disabling it."
Avatar
Michaelsy #9
Member since Jun 2015 · 940 posts · Location: Düsseldorf, Germany
Group memberships: Members
Show profile · Link to this post
"This auth plugin is not enabled in configuration, consider disabling it."
There are plugins which have an additional enable/disable option in the configuration settings. I suspect that is the cause of the warning.

Feedback welcome - Michael Sy.
By Patreon.com a few eurons can be fed into the code phasers of
the DokuWiki engine. Besides, Andi's posts are worth reading.
This post was edited on 2019-01-14, 05:55 by Michaelsy.
Avatar
andi (Administrator) #10
User title: splitbrain
Member since May 2006 · 3435 posts · Location: Berlin Germany
Group memberships: Administrators, Members
Show profile · Link to this post
If someone is looking for the error here, one case where this problem occurs is when you set an an authtype that does not exist or where the appropriate plugin is disabled. Eg. you set $conf['authtype'] = 'authad' but the authad plugin is disabled.
Read this if you don't get any useful answers.
Lies dies wenn du keine hilfreichen Antworten bekommst.
Close Smaller – Larger + Reply to this post:
Verification code: VeriCode Please enter the word from the image into the text field below. (Type the letters only, lower case is okay.)
Smileys: :-) ;-) :-D :-p :blush: :cool: :rolleyes: :huh: :-/ <_< :-( :'( :#: :scared: 8-( :nuts: :-O
Special characters:
Go to forum
Imprint
This board is powered by the Unclassified NewsBoard software, 20150713-dev, © 2003-2015 by Yves Goergen
Current time: 2019-06-25, 16:40:39 (UTC +02:00)