RE: [xwiki-users] LDAP Integration of xwiki

Thanks Richard,

Got the solution to this with googling! IT is specific to LDAP with AD.
Check out the url if you are interested more.

http://forums.devshed.com/ldap-programming-76/javax-naming-authenticationexception-ldap-error-code-49-80090308-ldaperr-dsid--121363.html

Thanks,
Mrudula

-----Original Message-----
From: Ryszard Lach [mailto:rla@debian.org]
Sent: Tuesday, September 05, 2006 12:40 PM
To: xwiki-users@objectweb.org
Subject: Re: [xwiki-users] LDAP Integration of xwiki

On Tue, Sep 05, 2006 at 11:12:36AM +0530, mrudula.madiraju@wipro.com wrote:
>
>
>
> I've been able to boil down the exact error to the one shown below. I
> tried a variety of combinations, but it doesn't seem to work with my
> company user id and password. Any pointers here?

Are you sure you can connect to your LDAP using your credentials?

I suggest to install some ldap client on your xwiki machine (e.g.
ldap-utils) and try to connect to LDAP with entered in xwiki.cfg values.
Taking your config try something like that:

> authentication.ldap=1
> authentication.ldap.server=blr-ec-dc01.wipro.com
> authentication.ldap.port=389
> authentication.ldap.check_level=1
> authentication.ldap.base_DN=dc=wipro,dc=com
> authentication.ldap.bind_DN=uid=wipro\<< my user id>>,ou=USERS,dc=wipro,dc=com
>
> authentication.ldap.bind_pass=<<my password>>
> authentication.ldap.UID_attr=Mrudula Madiraju
> authentication.ldap.fields_mapping=name=Mrudula Madiraju,last_name=sn,first_name=givenName,fullname=displayName,mail=mail,ldap_dn=dn

ldapsearch -h blr-ec-dc01.wipro.com -p 389 \
    -D 'uid=wipro\<< my user id>>,ou=USERS,dc=wipro,dc=com'
    -b 'dc=wipro,dc=com' \
    -x -W \
    '(<UID_attr>=<xwiki loginname>)'

As you can see I've used in search filter '<UID_attr>', becaues I
suppose that you don't have a field named 'Mrudula Madiraju' in you
LDAP ;-). If your ldap was Active Directory you would have

authentication.ldap.UID_attr=sAMAccountName

in xwiki.cfg, and search field

(sAMAccountName=<xwiki_loginname>)

in your ldapsearch test.

R.

--
"First they ignore you. Then they laugh at you. Then they
fight you. Then you win." - Mohandas Gandhi.