Dear all
we're having problems here with authenticating users against a Windows 2003 active directory.
Our users are located in different OU (organisational units) in the active directory
So i followed the instructions in
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication
unfortunatelly without success.
My searchuser as all rights and is perfectly working with OTRS (www.otrs.org)
Here in xWiki, only users in one organisational unit are found?!
For all other users I'm getting the errormessage: user not found
Please find the config attached
Who can help please?
Greetings
Wolfgang Fürtbauer
#-------------------------------------------------------------------------------------
# LDAP
#-------------------------------------------------------------------------------------
#-# new LDAP authentication service
xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl
#-# Turn LDAP authentication on - otherwise only XWiki authentication
#-# 0: disable
#-# 1: enable
xwiki.authentication.ldap=1
#-# LDAP Server (Active Directory, eDirectory, OpenLDAP, etc.)
#-# Kann zur Not auf eine fixe IP gesetzt werden
xwiki.authentication.ldap.server=aohdc03.asamer.holding.ah
#xwiki.authentication.ldap.server=asamer.holding.ah
xwiki.authentication.ldap.port=389
xwiki.authentication.ldap.check_level=2
#-# LDAP login, empty = anonymous access, otherwise specify full dn
#-# {0} is replaced with the username, {1} with the password
#xwiki.authentication.ldap.bind_DN=CN=xWiKi,OU=ServicesAccounts,DC=asamer,DC=holding,DC=ah
#xwiki.authentication.ldap.bind_pass=xwiki4ldap1
xwiki.authentication.ldap.bind_DN=CN=otrs,OU=ServicesAccounts,DC=asamer,DC=holding,DC=ah
xwiki.authentication.ldap.bind_pass=xxxyyy
#-# Force to check password after LDAP connection
#-# 0: disable
#-# 1: enable
xwiki.authentication.ldap.validate_password=0
#-# only members of the following group will be verified in the LDAP
#-# otherwise only users that are found after searching starting from the base_DN
# xwiki.authentication.ldap.user_group=cn=developers,ou=groups,o=MegaNova,c=US
#-# [Since 1.5RC1, XWikiLDAPAuthServiceImpl]
#-# only users not member of the following group can autheticate
# xwiki.authentication.ldap.exclude_group=cn=admin,ou=groups,o=MegaNova,c=US
#-# base DN for searches
# xwiki.authentication.ldap.base_DN=DC=asamer,DC=holding,DC=ah
xwiki.authentication.ldap.base_DN=DC=holding,DC=ah
#-# Specifies the LDAP attribute containing the identifier to be used as the XWiki name (default=cn)
xwiki.authentication.ldap.UID_attr=sAMAccountName
#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl]
#-# Specifies the LDAP attribute containing the password to be used "when xwiki.authentication.ldap.validate_password" is set to 1
# xwiki.authentication.ldap.password_field=userPassword
#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl]
#-# The potential LDAP groups classes. Separated by commas.
# xwiki.authentication.ldap.group_classes=group,groupOfNames,groupOfUniqueNames,dynamicGroup,dynamicGroupAux,groupWiseDistributionList
#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl]
#-# The potential names of the LDAP groups fields containings the members. Separated by commas.
# xwiki.authentication.ldap.group_memberfields=member,uniqueMember
#-# retrieve the following fields from LDAP and store them in the XWiki user object (xwiki-attribute=ldap-attribute)
# xwiki.authentication.ldap.fields_mapping=name=sAMAccountName,last_name=sn,first_name=givenName,fullname=fullName,email=mail,ldap_dn=dn
xwiki.authentication.ldap.fields_mapping=name=sAMAccountName,last_name=sn,first_name=givenName,fullname=fullName,email=mail
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# on every login update the mapped attributes from LDAP to XWiki otherwise this happens only once when the XWiki account is created.
xwiki.authentication.ldap.update_user=1
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# mapps XWiki groups to LDAP groups, separator is "|"
xwiki.authentication.ldap.group_mapping=XWiki.XWikiAdminGroup=CN=xwiki_Admin,OU=xWiki Groups,DC=asamer,DC=holding,DC=ah|\
XWiki.ViewAllGroup=CN=xwiki_ViewAll,OU=xWiki Groups,DC=asamer,DC=holding,DC=ah|\
XWiki.ACGroup=CN=xwiki_AC,OU=xWiki Groups,DC=asamer,DC=holding,DC=ah|\
XWiki.CEGroup=CN=xwiki_CE,OU=xWiki Groups,DC=asamer,DC=holding,DC=ah|\
XWiki.FNGroup=CN=xwiki_FN,OU=xWiki Groups,DC=asamer,DC=holding,DC=ah|\
XWiki.HRGroup=CN=xwiki_HR,OU=xWiki Groups,DC=asamer,DC=holding,DC=ah|\
XWiki.IMGroup=CN=xwiki_IM,OU=xWiki Groups,DC=asamer,DC=holding,DC=ah|\
XWiki.INGroup=CN=xwiki_IN,OU=xWiki Groups,DC=asamer,DC=holding,DC=ah|\
XWiki.ITGroup=CN=xwiki_IT,OU=xWiki Groups,DC=asamer,DC=holding,DC=ah|\
XWiki.ITsecureGroup=CN=xwiki_ITsecure,OU=xWiki Groups,DC=asamer,DC=holding,DC=ah|\
XWiki.JSGroup=CN=xwiki_JS,OU=xWiki Groups,DC=asamer,DC=holding,DC=ah|\
XWiki.LDGroup=CN=xwiki_LD,OU=xWiki Groups,DC=asamer,DC=holding,DC=ah|\
XWiki.PDGroup=CN=xwiki_PD,OU=xWiki Groups,DC=asamer,DC=holding,DC=ah|\
XWiki.PDsecureGroup=CN=xwiki_PDsecure,OU=xWiki Groups,DC=asamer,DC=holding,DC=ah|\
XWiki.PRGroup=CN=xwiki_PR,OU=xWiki Groups,DC=asamer,DC=holding,DC=ah|\
XWiki.PTGroup=CN=xwiki_PT,OU=xWiki Groups,DC=asamer,DC=holding,DC=ah|\
XWiki.QAGroup=CN=xwiki_QA,OU=xWiki Groups,DC=asamer,DC=holding,DC=ah
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# time in s after which the list of members in a group is refreshed from LDAP (default=3600*6)
xwiki.authentication.ldap.groupcache_expiration=21800
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# - create : synchronize group membership only when the user is first created
#-# - always: synchronize on every login
xwiki.authentication.ldap.mode_group_sync=always
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# if ldap authentication fails for any reason, try XWiki DB authentication with the same credentials
xwiki.authentication.ldap.trylocal=1
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# SSL connection to LDAP server
#-# 0: normal
#-# 1: SSL
# xwiki.authentication.ldap.ssl=0
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# The keystore file to use in SSL connection
# xwiki.authentication.ldap.ssl.keystore=
#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl]
#-# The java secure provider used in SSL connection
# xwiki.authentication.ldap.ssl.secure_provider=com.sun.net.ssl.internal.ssl.Provider
Kollegen,
Wir haben hier ein Windows 2003 active directory mit usern in
verschiedenen OU's und ein xWiki 1.7.1
Ich habe brav die Anleitungen
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication
befolgt - leider ohne Erfolg.
Mein s earch user funktioniert einwandfrei in einem anderem System (OTRS)
wo quer durch alle OU's die User gefunden werden.
Das xWiki findet nur in einer OU.
Wer kann helfen bitte?
Viele Grüsse
Wolfgang Fürtbauer
Hi,
I have a question about LDAP authentication.
In our enterprise, the user password field is encrypted in the LDAP server.
For example userPassword field may be *{MD5}FF34...* or
*{crypt}DgxGD...*That seems to be a standard way of storing passwords
in a LDAP server (I am
not absolutely sure, but I was told).
The problem is that the XWikiLDAPConnection.checkPassword() method seems to
always compare the content of this field with the clear password which has
been given by the user, in the web login form. Seeing {MD5}, the wiki code
should encode the user password in MD5 and compare it with ldap attribute.
The comparison shouldn't be done in clear text.
Is there a configuration option, a workaround, a way to circumvent it ? I
simply can't go to my IT departement and say : "hey guys, can you put the
password in clear text and change all our infrastructure for the wiki
authentication to work ?"
Is the only solution I see is to hack the xwiki code. Is it true ? I have no
much time to make it, and it will be very difficult to sell this option to
my bosses.
Thank you for all your work anyway. Xwiki is a truly great tool.
Olivier
Hi,
I'm interested in hosting my wiki here, name is "apostiladigital". Username is exerciciosresolvidos.
The wiki's topic is brazilian universities admission exams.
____________________________________________________________________________________
Veja quais são os assuntos do momento no Yahoo! +Buscados
http://br.maisbuscados.yahoo.com
H Hi,
I have some issues when saving documents right after migration to 2.0.rc1.
I'm on tomcat 6.0.20, java 1.6, mysql 5.1.38, connector/J 5.1.8.
I removed old webapp, replaced by new xwiki.war, unwar it, copy back the
connector, and checked the configuration in xwiki.cfg and hibernate mapping,
and also deleted tomcat "work" folder.
All configuration is supposed to be "utf-8", except I did not recreate the
mysql database with this encoding.
Now everytime I save a modified document, I get the following errors in the
gui. The documents gets saved, but this is not very user-friendly and I
suppose bad things happen in the background (see below).
It happened also during last migration (1.5->2.0.M2), but disappeared and
was working just fine (but I never found the cause of this).
During page edition, there is only one line in xwikilock table related to
this page, no duplicates. The lock is released after this exception crashes.
Detailed information:
Error number 13007 in 3: Exception while loading lock
Wrapped Exception: a different object with the same identifier value was
already associated with the session:
[com.xpn.xwiki.doc.XWikiLock#-152317460]
com.xpn.xwiki.XWikiException: Error number 13007 in 3: Exception while
loading lock
Wrapped Exception: a different object with the same identifier value was
already associated with the session:
[com.xpn.xwiki.doc.XWikiLock#-152317460]
at
com.xpn.xwiki.store.XWikiHibernateStore.loadLock(XWikiHibernateStore.java:1698)
at
com.xpn.xwiki.store.XWikiCacheStore.loadLock(XWikiCacheStore.java:540)
at
com.xpn.xwiki.doc.XWikiDocument.removeLock(XWikiDocument.java:4209)
at com.xpn.xwiki.web.SaveAction.save(SaveAction.java:179)
at com.xpn.xwiki.web.SaveAction.action(SaveAction.java:193)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:213)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115)
at
org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431)
at
org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236)
at
org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196)
at
org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:637)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:155)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:295)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:646)
at
org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:436)
at
org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:374)
at
org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302)
at com.xpn.xwiki.web.ActionFilter.doFilter(ActionFilter.java:109)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.plugin.webdav.XWikiDavFilter.doFilter(XWikiDavFilter.java:68)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:295)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:849)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
at
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:454)
at java.lang.Thread.run(Thread.java:619)
Wrapped Exception:
org.hibernate.NonUniqueObjectException: a different object with the same
identifier value was already associated with the session:
[com.xpn.xwiki.doc.XWikiLock#-152317460]
at
org.hibernate.event.def.DefaultLoadEventListener.load(DefaultLoadEventListener.java:150)
at
org.hibernate.event.def.DefaultLoadEventListener.proxyOrLoad(DefaultLoadEventListener.java:195)
at
org.hibernate.event.def.DefaultLoadEventListener.onLoad(DefaultLoadEventListener.java:103)
at org.hibernate.impl.SessionImpl.fireLoad(SessionImpl.java:878)
at org.hibernate.impl.SessionImpl.load(SessionImpl.java:784)
at
com.xpn.xwiki.store.XWikiHibernateStore.loadLock(XWikiHibernateStore.java:1691)
at
com.xpn.xwiki.store.XWikiCacheStore.loadLock(XWikiCacheStore.java:540)
at
com.xpn.xwiki.doc.XWikiDocument.removeLock(XWikiDocument.java:4209)
at com.xpn.xwiki.web.SaveAction.save(SaveAction.java:179)
at com.xpn.xwiki.web.SaveAction.action(SaveAction.java:193)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:213)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115)
at
org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431)
at
org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236)
at
org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196)
at
org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:637)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:155)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:295)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:646)
at
org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:436)
at
org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:374)
at
org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302)
at com.xpn.xwiki.web.ActionFilter.doFilter(ActionFilter.java:109)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.plugin.webdav.XWikiDavFilter.doFilter(XWikiDavFilter.java:68)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:295)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:849)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
at
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:454)
at java.lang.Thread.run(Thread.java:619)
Thanks for help,
Jeremie
Hi,
Because we want to make a standard from vertical-aligned form, this means
the buttons should be left-ordered with the most important action first.
This should be changed also in Toucan and Albatross skin, not only just in
Colibri.
Right now the Edit Actions are "Cancel", "Preview", "Save&Continue",
"Save&View".
What do you think is the right order for them when they are left-aligned?
(A) Save&View, Save&Continue, Preview, Cancel (as it is - just in reverse)
(B) Save&View, Preview, Save&Continue, Cancel
(C) Preview, Save&Continue, Save&View, Cancel
(D) other variation
Remarks:
- "Cancel" should be *last* because it's a terminal (takes you out of the
editor), no-saving action. This is the least important.
- "Save & View" is also a terminal action (takes you out of the editor) -
having it* first* you have the 2 terminal actions at extremities.
- "Preview" is the least damaging action in case of accidental submit
(Silvia + Marta) - should be *first*?
- Some people use ("Preview" + "Save&Continue") {many times} + "Save&View"
{final}
- Other people just use "Save&Continue" + "Save & View" {final}, never
"Preview", etc
- What is the necessity for the "Preview" button in a WYSIYWG editor? On the
other hand "Preview" is very important if you edit in "Wiki" mode.
- Should "Preview" separate the two other SAVING actions? (Marta)
- Should "Save&Continue" separate the two other VIEW actions?
Thanks,
Caty
We'd like to disable the ability for a user to change their password (to prevent easy passwords from being used).
I could just edit XWikiUserSheet and take out the "change password" link, but a user could easily find out that changing the password could be done by typing in the appropriate URL. Is there a better way to disable the change password page?
Thanks,
Trevor
XWiki 2.0 milestone 3
Section editing is not working for sections
starting with a header smaller than level 2 (cp.
http://jira.xwiki.org/jira/browse/XWIKI-4275).
Is there a way to turn on/off section editing below a certain header
level?
Best regards
Philipp