[xwiki-users] Active Directory

[Thomas Mortagne]

Could be you paste the whole error log ?

2008/5/8 Mihails Agafonovs <_muxa at inbox.lv>:
> Again, the same error from LDAP:
>
>  LDAPMessage compareResponse(7) noSuchAttribute (00002080: AtrErr:
>
> DSID-03080139, #1:
>   0: 00002080: DSID-03080139, problem 1001 (NO_ATTRIBUTE_OR_VAL), data
>  0, Att 23 (userPassword)
>  )
>
>   Quoting Thomas Mortagne : 2008/5/7 Mihails Agafonovs
>  &lt;_muxa at inbox.lv&gt;:
>   &gt; Hi!
>   &gt;
>   &gt;  I've been trying to setup LDAP connection on XWiki 1.3.2.
>  Using
>   &gt;  Wireshark, I've discovered, that LDAP performs unbindRequest()
>  after
>   &gt;  the following error:
>   &gt;
>   &gt;  LDAPMessage compareResponse(3) noSuchAttribute (00002080:
>  AtrErr:
>   &gt;  DSID-03080139, #1:
>   &gt;   0: 00002080: DSID-03080139, problem 1001
>
> (NO_ATTRIBUTE_OR_VAL), data
>   &gt;  0, Att 23 (userPassword)
>   &gt;  )
>   &gt;  Here is the configuration:
>   &gt;
>   &gt;  ----------------------------------------------
>   &gt;  xwiki.authentication.ldap=1
>   &gt;  xwiki.authentication.ldap.server=my.domain.com
>   &gt;  xwiki.authentication.ldap.port=389
>   &gt;  xwiki.authentication.ldap.bind_DN={0}
>   &gt;  xwiki.authentication.ldap.bind_pass={1}
>   &gt;  # xwiki.authentication.ldap.validate_password=0
>   &gt;
>
> xwiki.authentication.ldap.user_group=ou=Riga,ou=LAT,dc=domain,dc=com
>   &gt;  xwiki.authentication.ldap.base_DN=dc=domain,dc=com
>   &gt;  xwiki.authentication.ldap.UID_attr=cn
>   &gt;
>
> xwiki.authentication.ldap.fields_mapping=name=cn,last_name=sn,first_name=givenName,fullname=fullName,email=mail,ldap_dn=dn
>   &gt;  # xwiki.authentication.ldap.update_user=1
>   &gt;
>
> xwiki.authentication.ldap.group_mapping=XWiki.XWikiAdminGroup=ou=Riga,ou=LAT,dc=GDNEurope,dc=com|
>   &gt;
>   &gt;  XWiki.Organisation=cn=testers,ou=groups,o=MegaNova,c=US
>   &gt;  # xwiki.authentication.ldap.groupcache_expiration=21800
>   &gt;  # xwiki.authentication.ldap.mode_group_sync=always
>   &gt;  xwiki.authentication.ldap.trylocal=1
>
>  I don't know AD very well but,according to
>   http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication,
>   should't be:
>   xwiki.authentication.ldap.bind_DN=subdomain\{0}
>   xwiki.authentication.ldap.UID_attr=sAMAccountName
>
>  xwiki.authentication.ldap.fields_mapping=name=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,mail=mail,ldap_dn=dn
>   ?
>   &gt;  ------------------------------------------------------
>   &gt;
>   &gt;  Any ideas?
>   &gt;
>   &gt;  P.S. If I use in the login form name.surname at domain.com or
>   &gt;  domainname.surname as a username, I can login, but without any
>   &gt;  rights.
>   &gt;
>   &gt;   Ar cie&#326;u, Mihails
>   &gt;  _______________________________________________
>   &gt;  users mailing list
>   &gt;  users at xwiki.org
>   &gt;  http://lists.xwiki.org/mailman/listinfo/users
>   &gt;
>   --
>   Thomas Mortagne
>
>  _______________________________________________
>   users mailing list
>   users at xwiki.org
>   http://lists.xwiki.org/mailman/listinfo/users
>   Ar cieņu, Mihails
>
>  Links:
>  ------
>  [1] mailto:thomas.mortagne at xwiki.com
>
>
> _______________________________________________
>  users mailing list
>  users at xwiki.org
>  http://lists.xwiki.org/mailman/listinfo/users
>



-- 
Thomas Mortagne