tbc+wikimedia wrote:

Ryan and I are on the same team. He didn't mention that the problem manifests itself only with the LDAP plugin: http://www.mediawiki.org/wiki/Extension:LDAP_Authentication

Another symptom: it seems to be related to the _session cookie. We noticed that the session cookie value is changed when we log in through the preferences page, and that's what cleans up the problem. Once successfully logged in, users don't seem to have the problem again.

I turned on debugging and looked at the logs, but I couldn't find a clue.

Are you using the LDAP plugin for auto-authentication (like $wgLDAPUseSSLAuth), or just for normal password authentication?

Newer versions of MediaWiki aren't working with the auto-authentication part of the plugin. Let me know if this is the case, and I'll try to check out the issue for you.

Btw, if you are having issues with the LDAP plugin, you should post your issues on the talk page of the plugin on mediawiki.org. I don't check bugzilla for issues very often.

ryan.fuerst wrote:

After digging further I actually managed to fix this by changing the below value from it's default to

$wgCookieSecure = false;

with ldap you log in over a secure session, which creates a secure cookie, which for some reason can only
be read by about half the pages. So on any page that can't read that cookie your not logged in.

No clue if this is the correct behavior or not, but if it is, you can probable close this.

Thehelpfulonewiki wrote:

No comments for just under 4 years - has this been fixed now?

Ryan Fuerst / Tim Chambers: Is this still a problem in a recent version of MediaWiki (1.19 or later)?