Jump to content

Topic on Extension talk:LDAP Authentication/Archive 4

Group Search in Active Directory not using full DN

2
84.101.198.97 (talkcontribs)

I'm using the stable version of the LDAP plugin (1.2a) and MediaWiki 1.15.1. I want to authenticate my users with an Active Directory. The user authentication works fine, but when it try to search the groups member, it fails. in AD LDAP tree, the member are like this :

member: CN=user@domain,DC=AD,DC=LOCAL.

But the plugin made only a request

(&(member=user@domain)(objectClass='group'))

instead of the full DN like this :

(&(member='user@domain,DC=AD,DC=LOCAL')(objectClass='group'))

How can I fix this?

Thanks a lot

Ryan lane (talkcontribs)

Have you tried setting $wgLDAPGroupUseFullDN? See the group options for a description of the option.