Hi, On Fri, Mar 14, 2008 at 10:04 PM, Kamna Jain <[email protected]> wrote:
Hello,
We have been having some issues with the LDAP authentication to our XWiki instance.
Which XWiki version do you use ? Do you have any error in xwiki.log when there is a authentication problem ?
Here is the portion from xwiki.cfg:
xwiki.authentication.ldap=1 xwiki.authentication.ldap.authclass=com.xpn.xwiki.ldap.authentication.XWikiLDAPAuthServiceImpl xwiki.authentication.ldap.server=domain.company.com xwiki.authentication.ldap.check_level=1 xwiki.authentication.ldap.port=389 xwiki.authentication.ldap.base_DN=dc=domain,dc=company,dc=com xwiki.authentication.ldap.bind_DN=domain\\{0} xwiki.authentication.ldap.bind_pass={1} xwiki.authentication.ldap.UID_attr=sAMAccountName xwiki.authentication.ldap.fields_mapping=name=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,email=mail,ldap_dn=dn
"check_level" property is not used anymore, see http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HLDAPAuth... for more details on each LDAP properties.
We have two separate installations on two different machines: One is the standalone installation (for the first time user) and in that I could configure the LDAP authentication with a particular domain at our company. But, it does not work if I change the domain. Now, the other is an installation of the WAR file with Tomcat 6.0 and Oracle 10g DB. In this setup, there are some issues. Currently xWiki may refresh the login page when logging through ldap without indicating whether authentication was successful or not. With the current configuration
This mean there was an authentication error but the LDAP authenticator did not return proper error message. I'm creating jira issue for that.
users attempts login Some users are able to log in, otherwise - log in pages refreshes the page, providing no indication to the user of any change from the login attempt no information is provided to xwiki.log the user's username is then listed as part XWikiAllgroup and the user's wiki page is created the with correct LDAP information
There are variations to this error. Some users experience an "access denied" error on log in. Their usernames are added to XWIkiAllGroup for each successive log in.Could anyone throw any light on why this might be happening? Do we need to make any changes to the LDA confi. part in xwiki.cfg? Any help will be highly appreciated. Thanks
_______________________________________________ devs mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/devs
Also some LDAP bugs has been fixed in the comming XE 1.3.1 and 1.4M1. -- Thomas Mortagne