[xwiki-users] LDAP/ActiveDirectory authentication not what I expected

[Vincent Massol]

On May 14, 2007, at 3:17 PM, BSayatovic at amig.com wrote:

>
> I set up XWiki 1.0RC3 (soon to be upgraded to RC4) with  
> ActiveDirectory
> authentication.  However, it's not what I expected.
>
> First, I must still create XWiki users with the same username that  
> users
> have in my directory.  If I don't first create the XWiki user, the
> ActiveDirectory user won't be able to log in.  However, as soon as  
> I create
> the XWiki user, the corresponding ActiveDirectory user can log in with
> their ActiveDirectory credentials.  I had hoped that XWiki would  
> simply
> allow an authenticated user to log in.  So am I misunderstanding  
> how it
> should work?

I have never used the LDAP feature of xwiki but that's what I would  
expect too. Maybe someone with experience in this domain could jump in?

-Vincent

> Second, when an ActiveDirectory user does log in, it is the user  
> details
> from their XWiki user that is shown, not the corresponding  
> ActiveDirectory
> details.  For example, if John Smith is an ActiveDirectory user with
> username "jsmith", and I create an XWiki user named "Johnny Boy",  
> then when
> John logs in, "Johnny Boy" is shown for his name, not the "John  
> Smith" form
> ActiveDirectory.  This surprises me because some of the LDAP value  
> I has to
> specify for XWiki's ActiveDirectory integration were telling it how to
> glean information such as the displayName from the directory.   
> Again, and I
> misunderstanding how it should work?
>
> Regards,
> Brian.