16 Nov
2007
16 Nov
'07
12:36 p.m.
On Nov 16, 2007 1:51 AM, <pentaho(a)fsck.ch> wrote:
Thanks for responding.
I made sure that the user didn't exist. When I first ran into this
problem (when I turned the LDAP authentication on), I had someone who
had never been on the system log in. They got the errors mentioned in
the original email. After some debugging, I decided to delete the
Derby database for the wiki, essentially starting over. I removed all
the cookies from my system, then logged in as superadmin and imported
the XAR to recreate the wiki and tried to login. I got the errors
mentioned.
There are two users listed in the user page: admin and pgardell (the
one with problems). The group XWikiAllGroup has four entries,
administrator and my name three times.
Looking at the xwiki.log I see that all the entires are repeated three
times, starting with "LDAP Password check for user pgardell" and
ending with "Accept user even without account"
sAMAccountName is the same as our old windows login. 8 characters
(a-z) In the case here, "pgardell"
Ideas anyone?
Patrick
What is wrong?
Does the user need to have an account on the system
before LDAP will work? How do I get it to not add the user to the
XWikiAllGroup three times on each login?
This is weird. I have the same setup and my config looks similar. Users
get created and added to XWikiAllGroup automatically.
The following things come to mind:
- Make really sure the user doesn't exist already, e.g. from previous
login attempt, or from forgotten cookies
- What format do your sAMAccountNAmes have? I heard that names with dots
or @ signs can cause problems.
- Are there any users at all created, maybe with the wrong username?