White, Daniel E. (GSFC-770.0)[NICS] via FreeIPA-users wrote:
I have been trying various LDAP extensions without success.
Most Google-able information is years old.
Anyone use this :
https://www.freeipa.org/page/Setting_up_MediaWiki_to_run_against_FreeIPA ?
My first foray into the Kerberos world eons ago was to Kerberize a MW
server and I used a similar method as described in the user-contributed
article. I didn't end up adding in any LDAP integration but setting up
auto-creation of a MW user was pretty straightforward IIRC.
For my simple use case IIRC I just stripped the username off the
principal and used that (similar to $wgAuthRemoteuserDomain). That won't
work for AD users as you could have conflicts.
Honestly for me the hardest part was setting up a KDC with LDAP
integration (3 full days IIRC) in the pre-IPA days.
rob