Network Engineering

Using OpenLDAP to Authenticate to Dokuwiki Part 2

This was a school assignment

This will be a continuation of the last report so this will look at LDAP (Lightweight Directory Access Protocol) software that will be compatible with DokuWiki. DokuWiki is not an enormously popular wiki but it does indeed have support for LDAP authentication. [1] It requires the LDAP Authentication plugin to be installed into the application. The webpage [1] has examples of many different types of LDAP servers that it can communicate with including OpenLDAP, Active Directory, TinyLDAP and Apache Directory amongst others.

As this is a Linux project Active Directory while arguably the most feature rich will not be chosen as being a Microsoft product will require more dependencies such as a Windows Server virtual machine and more complicated licensing issues. So, the focus will be on LDAP servers that can be installed for free on Ubuntu that support SSL/TLS security.

The reason OpenLDAP was chosen for this assignment was because it appeared that there was a lot more documentation available for it compared to the other options besides Active Directory which was not chosen for above reasons. OpenLDAP uses “The OpenLDAP public License” which can be found here [2].

Part 1: Installing OpenLDAP and filling with data.

This website was mostly followed. [3] On VM2 or whichever one has the Dokuwiki Webserver running.

sudo apt install slapd ldap-utils
sudo apt-get install php-ldap
sudo a2enmod authnz_ldap 
sudo systemctl restart apache2 

These commands firstly download the LDAP Server and secondly a PHP library that allows LDAP to interface with Dokuwiki/Php then restarts the apache2 application.

 sudo apt dpkg-reconfigure slapd 
  • Choose No
  • Create a domain name:
  • Organisation: example
  • Enter a password: ‘yourpassword’
  • Choose MDB
  • Choose No
  • Choose Yes
create a file add_entries.ldif
nano add_entried.ldif

Use the content of the one demonstrated on this website which is what this solution used [3].
In this file add the data from the Ubuntu website or edit your own from workshop 2.

Now access the Dokuwiki website if unchanged from last time will be on

Login at the top right use the account created from the last report Go to Admin Panel extension manager Enable LDAP Auth Plugin Click Admin again this time go to Configuration Manager
Under the Authentication Section change authtype to ‘authldap’ Go to the Authldap section

Figure 1: Admin settings configuration panel.

If you are using the LDAP example from the website the settings in the figure above will work otherwise configure them to do this the hostname and port should be the same on either configuration. After filling the form out click save. The main issues here to take away is that the third and fourth option need to be able to find the OU that contain the users and groups.

This will now lock you out of your admin account as it doesn’t now allow local accounts but only LDAP accounts. You will now be able to log on using one of your LDAP accounts.

There are still a few settings that need to be configured these can be done from. /var/www/dokuwiki/dokuwiki-2018-04-22b/conf There are still a few settings that need to be configured these can be done from.


This website here [4] shows different possible configurations for making LDAP work with DokuWiki. This is the working configuration in Figure 2. All the above configurations from Figure 1 can also be done here or changed if needed.

This website here [4] shows different possible configurations for making LDAP work with DokuWiki. This is the working configuration in Figure 2. All the above configurations from Figure 1 can also be done here or changed if needed.

Figure 2: /var/www/dokuwiki/dokuwiki-2018-04-22b/conf/local.php

To fix the admin account problem [5] in the $conf[‘superuser’] = ‘’; you can enter an LDAP user of your choice or a superuser group by using the @symbol separated by commas.

Part 2: Configuring SSL/TLS LDAP

sudo apt-get install tcpdump tcpdump -w file_name.pcap -i {interface-name}

By using this command it will record all traffic on the specified adapter interface and save it to a file I chose the loopback address as the traffic was moving on the same VM. I logged in and out a few times on the wiki and then turned it off. Searching for the password gave us 16 matches.

Figure 3: Unencrypted Loopback traffic showing ldap/website authentication password.

This is not to concerning because if the website was in actual use the loopback address would not be tcpdumped from the outside unless someone broke into the system at which point, they would have access anyway.

Figure 4: Websites unencrypted HTTP traffic over Network

With the client accessing over the network we can see that it contains loads of unencrypted traffic including the password token which is not good as anyone on the network could snoop this connection.

This website [6] was used to understand how to add HTTPS to a website. This is necessary to encrypt the above information in figures 3 and 4 to make it more difficult for attackers to steal login credentials. All the default options were followed from [6] besides the Firewall section which was left out as it was not necessary.

Figure 5: HTTPS Enabled Wiki.

Final Configuration settings shown below.

Figure 6: Dokuwiki.conf file in apache.
Figure 7: apache ports file
Figure 8: 000-default apache file. This will redirect http to https disable unencrypted access.
Figure 9: After Enabling HTTPS on the website traffic searches for the user and password no longer visible.

In Figure 9 It is shown that unlike the previous tcpdumps now that the website in running HTTPS there are 0 results for the user account or the password at the least protecting an attacker from readily reading the traffic.


[1] “LDAP Authentication Plugin,” [Online]. Available: [Accessed 12 6 2019].
[2] “Public License for 2.4.47,” [Online]. Available: [Accessed 17 6 2019].
[3] “OpenLDAP Server,” Ubuntu, [Online]. Available: [Accessed 16 6 2019].
[4] “Open:Ldap,” [Online]. Available: [Accessed 15 6 2019].
[5] “SuperUser,” [Online]. Available: [Accessed 15 6 2019].
[6] “How To Create a Self-Signed SSL Certificate for Apache in Ubuntu 16.04,” [Online]. Available: [Accessed 17 6 2019].
[7] “Setting up OpenLDAP Server in Ubuntu 18.04 LTS,” [Online]. Available: [Accessed 13 6 2019].

2,711 replies on “Using OpenLDAP to Authenticate to Dokuwiki Part 2”


Where I can download XEvil for free on your website?
Got information from your Support. XEvil is really the best program for captcha solving, but I need latest version of it.


[url=]acivir[/url] [url=]buy predislone tablets[/url] [url=]antabus[/url] [url=]buy clomid for men[/url] [url=]prednisolone 10 mg[/url] [url=]buy tadalafil 20mg[/url] [url=]buy tetracycline online without prescription[/url] [url=]sildenafil 20 mg[/url] [url=]indocin[/url] [url=]ventolin hfa inhaler[/url] [url=]cialis purchase[/url] [url=]generic valtrex[/url] [url=]buy tadacip[/url] [url=]buy tretinoin cream online[/url] [url=]prednisone 10[/url] [url=]colchicine tablets[/url] [url=]tadacip 20[/url] [url=]elimite online[/url] [url=]nolvadex 10[/url] [url=]advair[/url]

[url=]cafergot[/url] [url=]tadacip[/url] [url=]orlistat xenical[/url] [url=]azithromycin prescription[/url] [url=]how much does buspar cost[/url] [url=]atenolol 50 mg tablets[/url] [url=]buy lisinopril[/url] [url=]cialis[/url] [url=]buy kamagra[/url] [url=]prednisolone[/url] [url=]sildenafil[/url] [url=]acyclovir[/url] [url=]buy tadacip online[/url] [url=]buy seroquel online[/url] [url=]cialis 5 mg daily[/url] [url=]elimite cream[/url] [url=]tretinoin cream 1[/url] [url=]prednisolone sodium[/url] [url=]where to buy prednisolone[/url] [url=]acytoclovir 800[/url]

[url=]proventil hfa 90 mcg inhaler[/url] [url=]motilium[/url] [url=]xenical capsules[/url] [url=]advair 250[/url] [url=]synthroid levothyroxine[/url] [url=]azithromycin without prescription[/url] [url=]prednisolone[/url] [url=]doxycycline[/url] [url=]buy cialis online[/url] [url=]gout colchicine[/url] [url=]atarax for eczema[/url] [url=]permethrin cream[/url] [url=]doxycycline[/url] [url=]acyclovir[/url] [url=]antabuse buy canada[/url] [url=]nolvadex 10[/url] [url=]atenolol 100mg[/url] [url=]tretinoin cream .1[/url] [url=]prednisone 5mg[/url] [url=]clomid[/url]

[url=]rumalaya online[/url] [url=]keflex generic[/url] [url=]remeron for anxiety and depression[/url] [url=]buy xenical[/url] [url=’s_Health/Finast.htm]generic for finasteride[/url] [url=’s_Health/Kamagra_Soft.htm]buy kamagra soft online[/url]

[url=]geriforte[/url] [url=]prednisolone buy online[/url] [url=’s_Health/Kamagra_Gold.htm]buy kamagra[/url] [url=]mestinon[/url] [url=]generic mobic[/url]

[url=]generic septilin[/url] [url=]ampicilin[/url] [url=]wellbutrin online[/url] [url=]himcolin generic[/url] [url=]cialis generic[/url] [url=]generic proscar[/url] [url=]diarex[/url] [url=’s_Health/Shatavari.htm]cheap shatavari[/url] [url=]digoxin[/url] [url=]epivir[/url] [url=]buy mentax[/url] [url=]amoxil 500 mg[/url] [url=]generic crestor[/url] [url=]nimotop generic[/url] [url=]generic shallaki[/url] [url=’s_Health/Alesse.htm]alesse generic[/url] [url=]avalide 150 12.5[/url] [url=]price for generic cialis[/url] [url=]baclofen 10 mg[/url] [url=]generic lipitor[/url]

[url=]malegra fxt online without prescription[/url] [url=]buy vantin generic with no prescription[/url] [url=]epivir online[/url] [url=]buy levitra online[/url] [url=]mobic[/url] [url=]viagra online[/url] [url=]buy mobic[/url] [url=]buy malegra dxt[/url] [url=]buy zofran cheap[/url] [url=]sildalis online[/url] [url=]silagra[/url] [url=]buy prograf online[/url] [url=’s_Health/Kamagra_Gold.htm]buy kamagra[/url] [url=]prazosin[/url] [url=]hyzaar 50 12.5[/url] [url=’s_Health/Serophene.htm]generic serophene[/url] [url=’s_Health/V-gel.htm]buy v-gel online[/url] [url=]plavix 75 mg[/url] [url=]combivent generic[/url] [url=]cleocin t[/url]

[url=]decadron 4 mg[/url] [url=]buy metoclopramide online[/url] [url=]canadian drug prices for metformin[/url] [url=]buy v-gel[/url]

[url=]innopran xl online[/url] [url=]nizoral online[/url] [url=]tofranil generic[/url] [url=]generic desyrel[/url] [url=]buy cardura[/url] [url=]ashwagandha extract[/url] [url=]prednisolone generic[/url] [url=]malegra fxt online[/url] [url=]generic cystone[/url] [url=]atarax generic[/url] [url=]malegra dxt online[/url] [url=]zestoretic[/url] [url=]buy silvitra[/url] [url=]augmentin 625[/url] [url=]generic proscar 5mg[/url] [url=]buy xenical[/url] [url=]doxycycline pills[/url] [url=]rumalaya online[/url] [url=]shatavari[/url] [url=]generic zaditor[/url]

[url=]benzac[/url] [url=]grifulvin v[/url] [url=]buy plaquenil[/url] [url=]urispas generic[/url] [url=]precose generic[/url] [url=]lanoxin generic[/url]

[url=]buy propranolol online[/url] [url=]finpecia online[/url] [url=]buy feldene[/url] [url=,025.htm]retin a[/url] [url=]aceon[/url] [url=]buy urispas[/url] [url=]hoodia gordonii[/url] [url=]buy mestinon[/url] [url=]buy amoxil[/url] [url=]medrol 80 mg[/url] [url=’s_Health/Noroxin.htm]buy noroxin[/url] [url=]buy nimotop[/url] [url=’s_Health/Alesse.htm]buy alesse[/url] [url=]buy avalide online[/url] [url=’s_Health/Malegra_DXT.htm]malegra dxt generic[/url] [url=]geriforte generic[/url] [url=]sildalis online[/url] [url=]buy claritin online[/url] [url=]buy rumalaya[/url] [url=]generic ventolin[/url]

[url=]cialis coupons[/url] [url=]himcolin online[/url] [url=]buy quibron-t[/url] [url=]plaquenil online[/url] [url=]buy viagra[/url] [url=]bactrim medication[/url] [url=]noroxin[/url]

[url=’s_Health/Lukol.htm]buy lukol[/url] [url=]viagra soft tabs uk[/url] [url=]buy lipitor[/url] [url=]cheap kamagra[/url] [url=]buy allopurinol[/url] [url=]shatavari for milk supply[/url] [url=]diclofenac[/url] [url=]aleve d sinus and cold ingredients[/url] [url=]buy robaxin online[/url] [url=]dramamine for dogs[/url] [url=]buy anafranil[/url] [url=]buy imitrex[/url] [url=]advair 250 50 mg[/url] [url=]claritin[/url] [url=]torsemide price[/url] [url=]buy lipitor online[/url] [url=]buy aldactone[/url] [url=]exelon[/url] [url=]lasuna generic[/url] [url=]differin generic[/url]

[url=]generic tegretol[/url] [url=]noroxin online[/url] [url=]tetracycline pills[/url] [url=]kemadrin online[/url] [url=]buy entocort[/url] [url=]buy rogaine online[/url] [url=]coumadin vitamin k[/url] [url=’s_Health/Ponstel.htm]ponstel[/url] [url=]cafergot tablet generic[/url] [url=]hoodia[/url] [url=]generic rumalaya[/url] [url=]female viagra where to buy[/url] [url=]malegra dxt[/url] [url=]lanoxin[/url] [url=’s_Health/Cardura.htm]cardura generic[/url] [url=]valtrex[/url] [url=]vasotec[/url] [url=]atorvastatin lipitor[/url] [url=’s_Health/Avodart.htm]buy avodart online[/url] [url=]desyrel generic[/url]

[url=]buy albenza[/url] [url=’s_Health/VPXL.htm]vpxl online[/url] [url=]himplasia online[/url] [url=]diclofenac sodium gel[/url]

[url=]levitra online[/url] [url=]differin .1 gel[/url] [url=]levitra discount canada[/url] [url=]buy adalat[/url] [url=]vasotec[/url] [url=]buy alavert online[/url] [url=]levitra[/url] [url=]viramune[/url]

[url=]buy prendisalone on line uk[/url] [url=]proscar order online[/url] [url=]cefadroxil online[/url] [url=]buy chloramphenicol[/url] [url=’s_Health/Levitra_Soft.htm]best pharmacy cheap levitra[/url] [url=]v-gel[/url] [url=]vermox[/url] [url=]allopurinol pill[/url] [url=]plendil[/url] [url=]propecia online[/url] [url=]generic cymbalta[/url] [url=]buy vasotec[/url] [url=]buy mentat online[/url] [url=]aldactone 100[/url] [url=,05.htm]buy retin a[/url] [url=]lasix[/url] [url=]buy malegra fxt[/url] [url=]buy isoniazid[/url] [url=]shuddha guggulu[/url] [url=]reglan[/url]

[url=]toprol xl generic[/url] [url=]alesse generic[/url] [url=]abilify 10 mg[/url] [url=’s_Health/Uroxatral.htm]uroxatral online[/url]

ynw [url=]free casino games online[/url] gza [url=]online casino[/url]
xin [url=]casino online slots[/url]

ixh [url=]play online casino[/url] dgq [url=]free casino games online[/url]
qbw [url=]no deposit casino[/url]

hcz [url=]virgin casino online[/url] lzt [url=]msn games zone online casino[/url]
des [url=]play casino slots[/url]

syc [url=]heart of vegas slots[/url] qoi [url=]big fish casino free online[/url]
btx [url=]vegas casino games slots free[/url]

cwi [url=]win free money no deposit[/url] czw [url=]free slot games no download no registration[/url]
mvl [url=]free casino games slots[/url]