Re: [xwiki-users] LDAP Groupmembers not updated to XWiki-Groups

We're using Novell's eDirectory. I thought of the same thing that lowercase could be a problem. But on the other side the "member" attribute is all lowercase - only "equivalentToMe" is mixed case. And I just tried it to only map it to "member" with no change. Here are the new logs: bstractXWikiMigrationManager - No storage migration required since current version is [7351] ldap.XWikiLDAPConfig - ldap_group_classes: [groupofnames, group, top, dynamicgroupaux, groupofuniquenames, groupwisedistributionlist, dynamicgroup] ldap.XWikiLDAPConfig - ldap_group_memberfields: [equivalenttome, member] ldap.XWikiLDAPConnection - Connection to LDAP server [heffalump.wlgore.com:389] ldap.XWikiLDAPConnection - Binding to LDAP server with credentials login=[cn=intranet_proxy,ou=proxy-users,ou=system,o=wlgore] password=[***********] LDAP.XWikiLDAPAuthServiceImpl - Found user dn with the user object: null ldap.XWikiLDAPConfig - Ready to create user from LDAP with fields last_name=sn,first_name=givenName,fullname=fullName,email=mail,ldap_dn=dn ldap.XWikiLDAPUtils - Searching for the user in LDAP: user:tzwitano base: query:(uid=tzwitano) uid:uid ldap.XWikiLDAPConnection - LDAP search: baseDN=[] query=[(uid=tzwitano)] attr=[[sn, givenName, fullName, mail, dn]] ldapScope=[2] ldap.XWikiLDAPConnection - LDAP search found attributes: [{name=dn value=cn=a12345,ou=associates,ou=users,o=wlgore}, {name=sn value=Zwitanowitsch}, {name=mail value=tzwitano(a)wlgore.com}, {name=givenName value=Thomas}, {name=fullName value=Thomas Zwitanowitsch }] LDAP.XWikiLDAPAuthServiceImpl - LDAP attributes will be used to update XWiki attributes. LDAP.XWikiLDAPAuthServiceImpl - Updating existing user with LDAP attribues located at cn=a12345,ou=associates,ou=users,o=wlgore ldap.XWikiLDAPConfig - Ready to create user from LDAP with fields last_name=sn,first_name=givenName,fullname=fullName,email=mail,ldap_dn=dn ldap.XWikiLDAPConfig - Groupmapping found: XWiki.XWikiAdminGroup cn=Admin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore ldap.XWikiLDAPConfig - Groupmapping found: XWiki.MSOEGroup cn=MSOE,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore ldap.XWikiLDAPConfig - Groupmapping found: XWiki.MedicalFabricsAdmGroup cn=MedFabAdmin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore ldap.XWikiLDAPConfig - Groupmapping found: XWiki.MedicalFabricsGroup cn=MedFabUser,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore LDAP.XWikiLDAPAuthServiceImpl - Updating group membership for the user: tzwitano LDAP.XWikiLDAPAuthServiceImpl - The user belongs to following XWiki groups: LDAP.XWikiLDAPAuthServiceImpl - XWiki.XWikiAllGroup LDAP.XWikiLDAPAuthServiceImpl - All defined XWiki groups: LDAP.XWikiLDAPAuthServiceImpl - XWiki.MSOEGroup LDAP.XWikiLDAPAuthServiceImpl - XWiki.MedicalFabricsAdmGroup LDAP.XWikiLDAPAuthServiceImpl - XWiki.MedicalFabricsGroup LDAP.XWikiLDAPAuthServiceImpl - XWiki.TrillrAdmin LDAP.XWikiLDAPAuthServiceImpl - XWiki.TrillrUser LDAP.XWikiLDAPAuthServiceImpl - XWiki.XWikiAdminGroup LDAP.XWikiLDAPAuthServiceImpl - XWiki.XWikiAllGroup ldap.XWikiLDAPUtils - Retrieving Members of the group: cn=MSOE,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore ldap.XWikiLDAPConnection - LDAP search: baseDN=[cn=MSOE,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore] query=[null] attr=[[objectClass, uid, equivalenttome, member]] ldapScope=[0] ldap.XWikiLDAPConnection - LDAP search found attributes: [{name=dn value=cn=MSOE,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore}, {name=objectClass value=groupOfNames}, {name=objectClass value=Top}] ldap.XWikiLDAPUtils - Found group [cn=MSOE,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore] members :{} ldap.XWikiLDAPUtils - Retrieving Members of the group: cn=Admin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore ldap.XWikiLDAPConnection - LDAP search: baseDN=[cn=Admin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore] query=[null] attr=[[objectClass, uid, equivalenttome, member]] ldapScope=[0] ldap.XWikiLDAPConnection - LDAP search found attributes: [{name=dn value=cn=Admin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore}, {name=objectClass value=groupOfNames}, {name=objectClass value=Top}] ldap.XWikiLDAPUtils - Found group [cn=Admin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore] members :{} ldap.XWikiLDAPUtils - Retrieving Members of the group: cn=MedFabAdmin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore ldap.XWikiLDAPConnection - LDAP search: baseDN=[cn=MedFabAdmin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore] query=[null] attr=[[objectClass, uid, equivalenttome, member]] ldapScope=[0] ldap.XWikiLDAPConnection - LDAP search found attributes: [{name=dn value=cn=MedFabAdmin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore}, {name=objectClass value=groupOfNames}, {name=objectClass value=Top}] ldap.XWikiLDAPUtils - Found group [cn=MedFabAdmin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore] members :{} ldap.XWikiLDAPUtils - Retrieving Members of the group: cn=MedFabUser,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore ldap.XWikiLDAPConnection - LDAP search: baseDN=[cn=MedFabUser,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore] query=[null] attr=[[objectClass, uid, equivalenttome, member]] ldapScope=[0] ldap.XWikiLDAPConnection - LDAP search found attributes: [{name=dn value=cn=MedFabUser,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore}, {name=objectClass value=groupOfNames}, {name=objectClass value=Top}] ldap.XWikiLDAPUtils - Found group [cn=MedFabUser,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore] members :{} "Thomas Mortagne" <thomas.mortagne(a)xwiki.com> Sent by: users-bounces(a)xwiki.org 19.11.2008 13:11 Please respond to XWiki Users <users(a)xwiki.org> To "XWiki Users" <users(a)xwiki.org> cc Subject Re: [xwiki-users] LDAP Groupmembers not updated to XWiki-Groups By the way Maybe your already said it but which LDAP server are you using ? The attributes are lower cased by XWiki to not depends on the case of attributes when manipulating them. It's generaly not a problem for LDAP but maybe there a problem with the server your are using... On Wed, Nov 19, 2008 at 1:07 PM, Thomas Mortagne <thomas.mortagne(a)xwiki.com> wrote: [cn=Admin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore] cn=MedFabAdmin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore baseDN=[cn=MedFabAdmin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore] [{name=dn value=cn=MedFabAdmin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore}, >> {name=objectClass value=groupOfNames}, {name=objectClass value=Top}] >> >> Do you need the other lines as well? > > I just improved the log to see exactly what attributes names are used > in the search (in place of [[Ljava.lang.String;@178f36a]), you try the > last core jar at same URL. > >> >> Thomas >> >> >> >> >> "Thomas Mortagne" <thomas.mortagne(a)xwiki.com> >> Sent by: users-bounces(a)xwiki.org >> 19.11.2008 11:34 >> Please respond to >> XWiki Users <users(a)xwiki.org> >> >> >> To >> "XWiki Users" <users(a)xwiki.org> >> cc >> >> Subject >> Re: [xwiki-users] LDAP Groupmembers not updated to XWiki-Groups >> >> >> >> >> >> >> On Wed, Nov 19, 2008 at 10:51 AM, Thomas Zwitanowitsch >> <tzwitano(a)wlgore.com> wrote: >>> Yes, I am sure. This is what is configured: >>> >>> xwiki.authentication.ldap.group_classes=group,groupOfNames,groupOfUniqueNames,dynamicGroup,dynamicGroupAux,groupWiseDistributionList,Top >>> I also tried this configuration >>> xwiki.authentication.ldap.group_classes=groupOfNames,Top,groupOfNames >>> xwiki.authentication.ldap.group_memberfields=member,equivalentToMe >>> >>> and this again, is the group in LDAP >>> >>> dn: >cn=Admin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore >>> DirXML-Associations: >>> cn=AUTH-IDV,cn=DriverSet,ou=IDM,ou=system,o=wlgore#1#{E21DA9D4-FD4F-944c-40BA-E21DA9D4FD4F} >>> equivalentToMe: cn=a22094,ou=associates,ou=users,o=wlgore >>> objectClass: groupOfNames >>> objectClass: Top >>> member: cn=a22094,ou=associates,ou=users,o=wlgore >>> description: XWiki Admin Group >>> cn: Admin >>> >>> Not sure if I understand your last mail in regards to you adding some >> more >>> logs. >> >> Can you download and try last snapshot core 1.6 jar at http://maven.xwiki.org/snapshots/com/xpn/xwiki/platform/xwiki-core/1.6-SNAP… >> . >> You should get more informations on what append, this will help us to >> see what is the problem. >> >>> >>> Thanks >>> Thomas >>> >>> >>> >>> >>> "Thomas Mortagne" <thomas.mortagne(a)xwiki.com> >>> Sent by: users-bounces(a)xwiki.org >>> 19.11.2008 10:43 >>> Please respond to >>> XWiki Users <users(a)xwiki.org> >>> >>> >>> To >>> "XWiki Users" <users(a)xwiki.org> >>> cc >>> >>> Subject >>> Re: [xwiki-users] LDAP Groupmembers not updated to XWiki-Groups >>> >>> >>> >>> >>> >>> >>> In the meantime, are you sure that group_classes and >>> group_memberfields has the right values for your LDAP schema ? >>> >>> On Wed, Nov 19, 2008 at 10:42 AM, Thomas Mortagne >>> <thomas.mortagne(a)xwiki.com> wrote: >>>> On Wed, Nov 19, 2008 at 8:44 AM, Thomas Zwitanowitsch >>>> <tzwitano(a)wlgore.com> wrote: >>>>> Hi Thomas, >>>>> >>>>> Yes, there is an entry on this, but it looks like it doesn't find >>>>> anything. >>>>> >>>>> ldap.XWikiLDAPUtils - Retrieving Members of the group: >>>>> >> cn=MSOE,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore >>>>> ldap.XWikiLDAPUtils - Found group >>>>> >>> [cn=MSOE,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore] >>>>> members :{} >>>>> ldap.XWikiLDAPUtils - Retrieving Members of the group: >>>>> >cn=Admin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore >>>>> ldap.XWikiLDAPUtils - Found group >>>>> >>> [cn=Admin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore] >>>>> members :{} >>>>> ldap.XWikiLDAPUtils - Retrieving Members of the group: >>>>> >>> cn=MedFabAdmin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore >>>>> ldap.XWikiLDAPUtils - Found group >>>>> >>> [cn=MedFabAdmin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore] >>>>> members :{} >>>>> ldap.XWikiLDAPUtils - Retrieving Members of the group: >>>>> >>> cn=MedFabUser,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore >>>>> ldap.XWikiLDAPUtils - Found group >>>>> >>> [cn=MedFabUser,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore] >>>>> members :{} >>>>> >>>>> >>>>> The Admin-group in LDAP looks like this: >>>>> >>>>> dn: >>>>> >cn=Admin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore >>>>> DirXML-Associations: >>>>> >>> cn=AUTH-IDV,cn=DriverSet,ou=IDM,ou=system,o=wlgore#1#{E21DA9D4-FD4F-944c-40BA-E21DA9D4FD4F} refreshed XWiki XWiki.AllGroup whole >>> log >>>>> ? >>>>> >>>>> In your log I only see "Found group" which should means the group >>>>> cache already contains the group members. >>>>> >>>>>> This are the logs: >>>>>> >>>>>> DEBUG LDAP.XWikiLDAPAuthServiceImpl - Updating existing user with >>> LDAP >>>>>> attribues located at cn=a12345,ou=associates,ou=users,o=wlgore >>>>>> DEBUG ldap.XWikiLDAPConfig - Ready to create user from >> LDAP >>>>>> with fields >>>>>> >>>>> >>> last_name=sn,first_name=givenName,fullname=fullName,email=mail,ldap_dn=dn >>>>>> DEBUG ldap.XWikiLDAPConfig - Groupmapping found: >>>>>> XWiki.XWikiAdminGroup >>>>>> >cn=Admin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore >>>>>> DEBUG ldap.XWikiLDAPConfig - Groupmapping found: >>>>>> XWiki.MSOEGroup >>>>>> >cn=MSOE,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore >>>>>> DEBUG ldap.XWikiLDAPConfig - Groupmapping found: >>>>>> XWiki.MedicalFabricsAdmGroup >>>>>> >>>>> >>> cn=MedFabAdmin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore >>>>>> DEBUG ldap.XWikiLDAPConfig - Groupmapping found: >>>>>> XWiki.MedicalFabricsGroup >>>>>> >>>>> >>> cn=MedFabUser,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore for following XWiki.MedicalFabricsAdmGroup >>>>>> DEBUG LDAP.XWikiLDAPAuthServiceImpl - XWiki.MedicalFabricsGroup >>>>>> DEBUG LDAP.XWikiLDAPAuthServiceImpl - XWiki.TrillrAdmin >>>>>> DEBUG LDAP.XWikiLDAPAuthServiceImpl - XWiki.TrillrUser >>>>>> DEBUG LDAP.XWikiLDAPAuthServiceImpl - XWiki.XWikiAdminGroup >>>>>> DEBUG LDAP.XWikiLDAPAuthServiceImpl - XWiki.XWikiAllGroup >>>>>> DEBUG ldap.XWikiLDAPUtils - Found group >>>>>> >>>>> >>> [cn=MSOE,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore] >>>>>> members :{} >>>>>> DEBUG ldap.XWikiLDAPUtils - Found group >>>>>> >>>>> >>> [cn=Admin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore] >>>>>> members :{} >>>>>> DEBUG ldap.XWikiLDAPUtils - Found group >>>>>> >>>>> >>> [cn=MedFabAdmin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore] >>>>>> members :{} >>>>>> DEBUG ldap.XWikiLDAPUtils - Found group >>>>>> >>>>> >>> [cn=MedFabUser,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore] >>>>>> members :{} >>>>>> >>>>>> This is my config: >>>>>> >>>>>> #-# new LDAP authentication service >>>>>> >>>>> >>> xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl authentication LDAP used >>> as >>>>>> the XWiki name (default=cn) >>>>>> xwiki.authentication.ldap.UID_attr=uid >>>>>> >>>>>> #-# [SINCE 1.5M1, XWikiLDAPAuthServiceImpl] >>>>>> #-# Specifies the LDAP attribute containing the password to be used >>>>> "when >>>>>> xwiki.authentication.ldap.validate_password" is set to 1 >>>>>> # xwiki.authentication.ldap.password_field=userPassword >>>>>> >>>>>> #-# [SINCE 1.5M1, XWikiLDAPAuthServiceImpl] >>>>>> #-# The potential LDAP groups classes. Separated by commas. >>>>>> >>>>> >>> xwiki.authentication.ldap.group_classes=group,groupOfNames,groupOfUniqueNames,dynamicGroup,dynamicGroupAux,groupWiseDistributionList,Top object >>>>> for >>>>>> faster access >>>>>> >>>>> >>> xwiki.authentication.ldap.fields_mapping=last_name=sn,first_name=givenName,fullname=fullName,email=mail,ldap_dn=dn >>>>>> >>>>>> #-# [SINCE 1.3M2, XWikiLDAPAuthServiceImpl] >>>>>> #-# on every login update the mapped attributes from LDAP to XWiki >>>>>> otherwise this happens only once when the XWiki account is created. >>>>>> xwiki.authentication.ldap.update_user=1 >>>>>> >>>>>> #-# [SINCE 1.3M2, XWikiLDAPAuthServiceImpl] >>>>>> #-# mapps XWiki groups to LDAP groups, separator is "|" >>>>>> >>>>> >>> xwiki.authentication.ldap.group_mapping=XWiki.XWikiAdminGroup=cn=Admin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore|\ >>>>>> >>>>> >>> XWiki.MSOEGroup=cn=MSOE,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore|\ >>>>>> >>>>> >>> XWiki.MedicalFabricsAdmGroup=cn=MedFabAdmin,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore|\ >>>>>> >>>>> >>> XWiki.MedicalFabricsGroup=cn=MedFabUser,ou=XWiki,ou=Corp,ou=Links,ou=extranet_access,ou=groups,o=wlgore refreshed -- Thomas Mortagne _______________________________________________ users mailing list users(a)xwiki.org http://lists.xwiki.org/mailman/listinfo/users