FW: [xwiki-users] LDAP Integration of xwiki - xwiki-devs@xwiki.org

6 Sep 2006

Thanks Richard,

Got the solution to this with googling! IT is specific to LDAP with AD.
Check out the url if you are interested more.

http://forums.devshed.com/ldap-programming-76/javax-naming-authenticationex…

Thanks,
Mrudula

-----Original Message-----
From: Ryszard Lach [mailto:rla@debian.org]
Sent: Tuesday, September 05, 2006 12:40 PM
To: xwiki-users(a)objectweb.org
Subject: Re: [xwiki-users] LDAP Integration of xwiki

On Tue, Sep 05, 2006 at 11:12:36AM +0530, mrudula.madiraju(a)wipro.com wrote:
...

 I've been able to boil down the exact error to the one shown below. I
 tried a variety of combinations, but it doesn't seem to work with my
 company user id and password. Any pointers here? 
Are you sure you can connect to your LDAP using your credentials?

I suggest to install some ldap client on your xwiki machine (e.g.
ldap-utils) and try to connect to LDAP with entered in xwiki.cfg values.
Taking your config try something like that:

...
  authentication.ldap=1
 authentication.ldap.server=blr-ec-dc01.wipro.com
 authentication.ldap.port=389
 authentication.ldap.check_level=1
 authentication.ldap.base_DN=dc=wipro,dc=com
 authentication.ldap.bind_DN=uid=wipro\<< my user
id>>,ou=USERS,dc=wipro,dc=com

 authentication.ldap.bind_pass=<<my password>>
 authentication.ldap.UID_attr=Mrudula Madiraju
 authentication.ldap.fields_mapping=name=Mrudula
Madiraju,last_name=sn,first_name=givenName,fullname=displayName,mail=mail,ldap_dn=dn

ldapsearch -h blr-ec-dc01.wipro.com  -p 389 \
    -D 'uid=wipro\<< my user id>>,ou=USERS,dc=wipro,dc=com'
    -b 'dc=wipro,dc=com' \
    -x -W \
    '(<UID_attr>=<xwiki loginname>)'

As you can see I've used in search filter '<UID_attr>', becaues I
suppose that you don't have a field named 'Mrudula Madiraju' in you
LDAP ;-). If your ldap was Active Directory you would have

authentication.ldap.UID_attr=sAMAccountName

in xwiki.cfg, and search field

(sAMAccountName=<xwiki_loginname>)

in your ldapsearch test.

R.

--
"First they ignore you. Then they laugh at you. Then they
fight you. Then you win." - Mohandas Gandhi.

The information contained in this electronic message and any attachments to this message
are intended for the exclusive use of the addressee(s) and may contain proprietary,
confidential or privileged information. If you are not the intended recipient, you should
not disseminate, distribute or copy this e-mail. Please notify the sender immediately and
destroy all copies of this message and any attachments.

WARNING: Computer viruses can be transmitted via email. The recipient should check this
email and any attachments for the presence of viruses. The company accepts no liability
for any damage caused by any virus transmitted by this email.

www.wipro.com