Thanks! S...! Sorry for not being able to see that. Thomas Mortagne wrote:
Groups are cached for performance purpose. See xwiki.authentication.ldap.groupcache_expiration property.
Thinking about stupid people like I... don't you think that any debug message about groups being cached could be added here: 2010-09-10 01:09:41,852 [http://peat.environmentalchange.net:8080/xwiki/bin/loginsubmit/XWiki/XWikiLo...] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Checking if the user belongs to the user group: cn=xwikiEBioTIC,o=EPECNetwork 2010-09-10 01:09:41,853 [http://peat.environmentalchange.net:8080/xwiki/bin/loginsubmit/XWiki/XWikiLo...] DEBUG ldap.XWikiLDAPUtils - Found group [cn=xwikiEBioTIC,o=EPECNetwork] members :{cn=mariajesussobrido,o=epecnetwork=mariajesussobrido, cn=pilarcacheiro,o=epecnetwork=pilarcacheiro, cn=jorgeamigolechuga,o=epecnetwork=jorgeamigolechuga, cn=hugogutierrezdeteran,o=epecnetwork=hugogutierrezdeteran, cn=ricardorodriguezfernandez,o=epecnetwork=ricardorodriguezfernandez, cn=antoniomartinezcortizas,o=epecnetwork=antoniomartinezcortizas, cn=beatrizquintans,o=epecnetwork=beatrizquintans} 2010-09-10 01:09:41,853 [http://peat.environmentalchange.net:8080/xwiki/bin/loginsubmit/XWiki/XWikiLo...] DEBUG ldap.XWikiLDAPUtils - Found user dn in user group:null Debug messages seems to say that the members of the group are retrieved from the binded connection to the LDAP server. What do you think? Thanks! Ricardo -- Ricardo RodrÃguez CTO eBioTIC. Life Sciences, Data Modeling and Information Management Systems