Package: mediawiki-extensions
Version: 2.9
In the currently packaged version (2.0a) of the LDAP authentication
extension, the configuration option $wgLDAPAuthAttribute does not work
as intended. The intent is that an LDAP search can be used for this
option, but the current implementation in the module merely checks for
the presence of the attribute (not even its value).
This is a bug that was introduced upstream at some time, but apparently
has been fixed in the meantime. A discussion related to the problem is
here:
http://www.mediawiki.org/wiki/Extension_talk:LDAP_Authentication#LDAP_search_for_special_entry_12928.
I checked out the code of the current upstream release 2.0c, and it
appears that the implementation has indeed been fixed:
https://gerrit.wikimedia.org/r/gitweb?p=mediawiki/extensions/LdapAuthentication.git;a=blob;f=LdapAuthentication.php;h=9cde1d82ff87abefdef5c02a430b70b505a61d98;hb=acabccab960e3243a4c627e84d336b114b970f26
Please update the mediawiki-extensions package to use the latest
upstream release of the LDAP authentication extension. Not only is
$wgLDAPAuthAttribute pretty much useless in the currently packaged
version 2.0a, more important is that someone who uses the option and is
upgrading to 2.0a will break his or her Mediawiki installation since
login is no longer possible.
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
