I think I'm doing this right, but obviously I'm messing something up. I've gone over the forums and can't seem to find this case. I can log in fine but after logging in I do not have permissions to do anything. The account I'm signing in with is a member of Domain Admins. I am on IIS 7 and PHP 5.3.27
My local.protected.php
<?php
// general DokuWiki options
$conf['title'] = 'IT Wiki';
$conf['lang'] = 'en';
$conf['license'] = 'cc-by-sa';
$conf['useacl'] = 1;
$conf['disableactions'] = 'register';
$conf['authtype'] = 'ad';
$conf['manager'] = 'MYACCOUNT';
$conf['superuser'] = '@admin';
$conf['superuser'] = '@Domain_Admins';
// configure your Active Directory data here
$conf['auth']['ad']['account_suffix'] = '@my.domain';
$conf['auth']['ad']['base_dn'] = 'DC=my,DC=domain';
$conf['auth']['ad']['domain_controllers'] = 'dc01.my.domain'; //multiple can be given
$conf['auth']['ad']['admin_username'] = 'SA_Wiki';
$conf['auth']['ad']['admin_password'] = '********';
$conf['auth']['ad']['sso'] = 1;
$conf['auth']['ad']['real_primarygroup'] = 1;
$conf['auth']['ad']['use_ssl'] = 0; // Don't have ssl/tls options enabled at the same time.
$conf['auth']['ad']['use_tls'] = 0; // Only one of them.
$conf['auth']['ad']['debug'] = 1;
$conf['auth']['ad']['recursive_groups'] = 1; // If number of groups in AD is large switching to 0 will improve performance, but indirect membership will not work
$conf['auth']['ad']['additional'] = 'department,office'; // additional attributes to fetch
// warn user about expiring password this many days in advance (in version 2012-03-10 and higher):
$conf['auth']['ad']['expirywarn'] = 5;
It says at the top that I am logged in fine: Logged in as: DOMAIN\me (DOMAIN\me)
I tack on a ?do=check and get these results:
User authentication is temporarily unavailable. If this situation persists, please inform your Wiki Admin.
PHP version 5.3.27
More than 32MB RAM (134217728 bytes) available.
conf directory is writable
mb_string extension is available and will be used
Your locale LC_COLLATE=C;LC_CTYPE=English_United States.1252;LC_MONETARY=C;LC_NUMERIC=C;LC_TIME=C seems not to be a UTF-8 locale, you should fix this if you encounter problems.
Debugging support is disabled
You are currently logged in as DOMAIN\me (DOMAIN\me)
You are part of the groups
Your current permission for this page is 0
The current page is not writable by the webserver
The current page is not writable by you
The search index seems to be working
Thanks, am I missing something simple?