[xwiki-users] LDAP Authentication

Wed Jul 30 01:09:09 CEST 2008

Sorry for the spam... I figured it out. I am posting it so that it is useful for somebody else. A simple mistake cost me couple of days of work!

The following line was commented out:
xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl

Everything worked fine when I uncommented it. It is kind of strange that the user is getting authenticated without the authclass.

Hari Gangadharan

> From: hari_g at hotmail.com
> To: users at xwiki.org
> Date: Tue, 29 Jul 2008 15:37:05 -0700
> Subject: Re: [xwiki-users] LDAP Authentication
> 
> 
> 
>     
>       Error
>       You are not allowed to view this document or perform this action.
> 
>     
>     
> 
> This is the message I get when the user logs in. If I have not imported the enterprise-wiki.xar then this message is not shown. The user can edit pages. However I guess the user is not created. After I import the xar file the user cannot even view any page.
> 
> Any ideas?
> Hari Gangadharan
> 
> > Date: Tue, 29 Jul 2008 01:48:03 -0700
> > From: hari_g at hotmail.com
> > To: users at xwiki.org
> > Subject: Re: [xwiki-users] LDAP Authentication
> > 
> > 
> > I have the exact same problem. The logged in user does not have any
> > privileges and no account created for him. I suppose an account is
> > automatically created for the logged in user. Am I wrong? If I register the
> > user with any password then LDAP login works (I can use LDAP Password) and
> > everything is OK. Otherwise user is logged in the id comes on the top right
> > with the logout link but the profile page is also not there.
> > 
> > Avinash, did you solve this issue?
> > 
> > Hari Gangadharan
> > 
> > 
> > 
> > 
> > Thomas Mortagne wrote:
> > > 
> > > On Mon, Jun 30, 2008 at 4:59 AM, Avinash Gupta
> > > <Avinash.Gupta at ccsu.nsw.gov.au> wrote:
> > >> Yes the name appears on top right corner, but doesn't appear in user
> > >> list.
> > > 
> > > The name at the top right corner is retrieved from user profile in the
> > > wiki so you definitely have the user somewhere in the space XWiki.
> > > 
> > >>
> > >>>>> "Thomas Mortagne" <thomas.mortagne at xwiki.com> 27/06/2008 6:18 pm >>>
> > >> On Fri, Jun 27, 2008 at 2:35 AM, Avinash Gupta
> > >> <Avinash.Gupta at ccsu.nsw.gov.au> wrote:
> > >>> Thanks for the reply Thomas,
> > >>>
> > >>>
> > >>>
> > >>> "If you use the correct LDAP authenticator
> > >>> (xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl)
> > >>> and even if you use the old one AFAIK there is no way to configure
> > >>> LDAP in order to not create the user in XWiki, otherwise XWiki would
> > >>> not be able to manager rights, groups etc."
> > >>>
> > >>>
> > >>> This means no matter what if my LDAP Authentication is working then
> > >>> XWiki should be storing users in its database.
> > >>> My log file is clean. This is the only thing that I have in my log file
> > >>>
> > >>>
> > >>> 2008-06-27 10:26:31,761
> > >>> [http://localhost:8080/xwiki/bin/view/Main/WebHome] [btpool0-7] INFO 
> > >>> .AbstractXWikiMigrationManager  - No storage migration required since
> > >>> current version is [7351]
> > >>>
> > >>> My users are authenticating without a problem. I mean I can confirm that
> > >>> its authenticating against LDAP but I can't find any users.
> > >>> xwiki-enterprise-web-1.4.1.war is the file that I downloaded. So I
> > >>> reckon the version is 1.4.1.
> > >>>
> > >>> When the users log in they only see a page which says
> > >>> "You are not allowed to view this document or perform this action."
> > >>
> > >> After login, do you see the user's name in the upper right corner of the
> > >> page ?
> > >>
> > >>>
> > >>> When I log in as superadmin then I can create Wiki pages. Am I missing
> > >>> something here?
> > >>> BTW where does XWiki stores user information, I searched all my database
> > >>> but wasn't able to find any table which may store user information.
> > >>
> > >> XWiki user are wiki pages in the "XWiki" space. If you login with
> > >> "toto", you can view the user profile at "/xwiki/bin/view/XWiki/toto".
> > >>
> > >>>
> > >>> Thanks,
> > >>> Avinash
> > >>>
> > >>>>>> "Thomas Mortagne" <thomas.mortagne at xwiki.com> 26/06/2008 6:58 pm >>>
> > >>> Hi,
> > >>>
> > >>> On Thu, Jun 26, 2008 at 6:28 AM, Avinash Gupta
> > >>> <Avinash.Gupta at ccsu.nsw.gov.au> wrote:
> > >>>> Hello All,
> > >>>>
> > >>>> I have installed XWiki in our environment using jetty and MS SQL
> > >>>> Server.
> > >>>> I have successfully configured authentication using LDAP but I don't
> > >>>> see any users when I click on Users and Groups under Administration.
> > >>>>
> > >>>> I guess this is because XWiki just uses LDAP to authenticate but
> > >>>> doesn't stores the users anywhere.
> > >>>> I checked on mailing lists and found that few discussions where people
> > >>>> have suggested to add following line in xwiki.cfg
> > >>>>
> > >>>>
> > >>>> xwiki.authentication.createuser=ldap
> > >>>>
> > >>>> and XWiki will start storing users in his database.
> > >>>
> > >>> Did you looked at
> > >>> http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication ?
> > >>> All possible options are listed here (and I confirm that
> > >>> xwiki.authentication.createuser=ldap does not mean anything or at
> > >>> least now).
> > >>>
> > >>> If you use the correct LDAP authenticator
> > >>> (xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl)
> > >>> and even if you use the old one AFAIK there is no way to configure
> > >>> LDAP in order to not create the user in XWiki, otherwise XWiki would
> > >>> not be able to manager rights, groups etc. What XE/Platform version do
> > >>> you use ? Do you have any error/warning in the log ?
> > >>>
> > >>>> But the above didn't work for me. I also found a snippet which might
> > >>>> import the users but don't know how to run it.
> > >>>> I am a .Net guy and I have very limited knowledge of java.
> > >>>>
> > >>>> I would like to create groups of LDAP user and give different
> > >>>> permissions to different groups. How can I achieve this?
> > >>>>
> > >>>> Thanks,
> > >>>> Avinash
> > >>>> _______________________________________________
> > >>>> users mailing list
> > >>>> users at xwiki.org
> > >>>> http://lists.xwiki.org/mailman/listinfo/users
> > >>>>
> > >>>
> > >>>
> > >>>
> > >>> --
> > >>> Thomas Mortagne
> > >>> _______________________________________________
> > >>> users mailing list
> > >>> users at xwiki.org
> > >>> http://lists.xwiki.org/mailman/listinfo/users
> > >>> _______________________________________________
> > >>> users mailing list
> > >>> users at xwiki.org
> > >>> http://lists.xwiki.org/mailman/listinfo/users
> > >>>
> > >>
> > >>
> > >>
> > >> --
> > >> Thomas Mortagne
> > >> _______________________________________________
> > >> users mailing list
> > >> users at xwiki.org
> > >> http://lists.xwiki.org/mailman/listinfo/users
> > >> _______________________________________________
> > >> users mailing list
> > >> users at xwiki.org
> > >> http://lists.xwiki.org/mailman/listinfo/users
> > >>
> > > 
> > > 
> > > 
> > > -- 
> > > Thomas Mortagne
> > > _______________________________________________
> > > users mailing list
> > > users at xwiki.org
> > > http://lists.xwiki.org/mailman/listinfo/users
> > > 
> > > 
> > 
> > -- 
> > View this message in context: http://n2.nabble.com/LDAP-Authentication-tp509543p588093.html
> > Sent from the XWiki- Users mailing list archive at Nabble.com.
> > 
> > _______________________________________________
> > users mailing list
> > users at xwiki.org
> > http://lists.xwiki.org/mailman/listinfo/users
> 
> _________________________________________________________________
> With Windows Live for mobile, your contacts travel with you.
> http://www.windowslive.com/mobile/overview.html?ocid=TXT_TAGLM_WL_mobile_072008
> _______________________________________________
> users mailing list
> users at xwiki.org
> http://lists.xwiki.org/mailman/listinfo/users

_________________________________________________________________
Keep your kids safer online with Windows Live Family Safety.
http://www.windowslive.com/family_safety/overview.html?ocid=TXT_TAGLM_WL_family_safety_072008