Hi,
On Fri, Mar 14, 2008 at 10:04 PM, Kamna Jain <kammy.scorpi(a)gmail.com> wrote:
Hello,
We have been having some issues with the LDAP authentication to our XWiki
instance.
Which XWiki version do you use ? Do you have any error in xwiki.log
when there is a authentication problem ?
Here is the portion from xwiki.cfg:
xwiki.authentication.ldap=1
xwiki.authentication.ldap.authclass=com.xpn.xwiki.ldap.authentication.XWikiLDAPAuthServiceImpl
xwiki.authentication.ldap.server=domain.company.com
xwiki.authentication.ldap.check_level=1
xwiki.authentication.ldap.port=389
xwiki.authentication.ldap.base_DN=dc=domain,dc=company,dc=com
xwiki.authentication.ldap.bind_DN=domain\\{0}
xwiki.authentication.ldap.bind_pass={1}
xwiki.authentication.ldap.UID_attr=sAMAccountName
xwiki.authentication.ldap.fields_mapping=name=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,email=mail,ldap_dn=dn
"check_level" property is not used anymore, see
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HLDAPAut…
for more details on each LDAP properties.
We have two separate installations on two different
machines:
One is the standalone installation (for the first time user) and in that I
could configure the LDAP authentication with a particular domain at our
company. But, it does not work if I change the domain.
Now, the other is an installation of the WAR file with Tomcat 6.0 and Oracle
10g DB. In this setup, there are some issues.
Currently xWiki may refresh the login page when logging through ldap
without indicating whether authentication was successful or not. With the
current configuration
This mean there was an authentication error but the LDAP authenticator
did not return proper error message. I'm creating jira issue for that.
users attempts login
Some users are able to log in, otherwise - log in pages refreshes the page,
providing no indication to the user of any change from the login attempt
no information is provided to xwiki.log
the user's username is then listed as part XWikiAllgroup and the user's wiki
page is created the with correct LDAP information
There are variations to this error. Some users experience an "access denied"
error on log in. Their usernames are added to XWIkiAllGroup for each
successive log in.Could anyone throw any light on why this might be
happening?
Do we need to make any changes to the LDA confi. part in xwiki.cfg?
Any help will be highly appreciated.
Thanks
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
Also some LDAP bugs has been fixed in the comming XE 1.3.1 and 1.4M1.
--
Thomas Mortagne