Hello,

 

We have been having some issues with the LDAP authentication to our XWiki instance.

 

Here is the portion from xwiki.cfg:

 

xwiki.authentication.ldap=1
xwiki.authentication.ldap.authclass=com.xpn.xwiki.ldap.authentication.XWikiLDAPAuthServiceImpl
xwiki.authentication.ldap.server=domain.company.com
xwiki.authentication.ldap.check_level=1
xwiki.authentication.ldap.port=389
xwiki.authentication.ldap.base_DN=dc=domain,dc=company,dc=com
xwiki.authentication.ldap.bind_DN=domain\\{0}
xwiki.authentication.ldap.bind_pass={1}
xwiki.authentication.ldap.UID_attr=sAMAccountName
xwiki.authentication.ldap.fields_mapping=name=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,email=mail,ldap_dn=dn

We have two separate installations on two different machines:

One is the standalone installation (for the first time user) and in that I could configure the LDAP authentication with a particular domain at our company. But, it does not work if I change the domain.

Now, the other is an installation of the  WAR file with Tomcat 6.0 and Oracle 10g DB. In this setup, there are some issues.

Currently xWiki may refresh the login page when logging through ldap without indicating whether authentication was successful or not. With the current configuration 

1. users attempts login
2. Some users are able to log in, otherwise - log in pages refreshes the page, providing no indication to the user of any change from the login attempt
3. no information is provided to xwiki.log
4. the user's username is then listed as part XWikiAllgroup and the user's wiki page is created the with correct LDAP information

• There are variations to this error. Some users experience an "access denied" error on log in. Their usernames are added to XWIkiAllGroup for each successive log in.

Could anyone throw any light on why this might be happening? 

Do we need to make any changes to the LDA confi. part in xwiki.cfg?

Any help will be highly appreciated.

Thanks