Sergiu Dumitriu-2 wrote
One important question nobody asked so far: are you using any custom
authenticator or rights implementation, like LDAP, Kerberos or another
SSO?
We are using XEM with a couple of managed wikis. The authentication of the
main-wiki (Manage-Wiki) and all sub-wikis is via mysql db
but one wiki uses the XWiki build-in LDAP authentication with the LDAP
Extension to ease the configuration.
The rights management is the XWiki's default for all wikis.
We are experiencing this crawler edits/deletions on all public wikis, the
Manage-Wiki is behind a .htaccess, set via apache.
Sergiu Dumitriu-2 wrote
Another possibility is that the servlet container or a frontend server
is mangling sessions, putting the Google bot in the same session as a
valid authenticated user. Can you give us more details about your setup?
Like: Tomcat + Apache HTTPD + mod_proxy_http
our server architecture:
apache2 is our web frontend server which sends requests for XWiki specific
urls via mod_jk to the Tomcat servlet server.
configuration details:
apache2:
- mainly debian default base-configuration (except specific
site-configuration)
- mod_jk for apache to tomcat connection
tomcat6:
- one AJP/1.3 connector only on localhost
- only XEM running on tomcat
XWiki 3.4 (xwiki.cfg):
- custom "xwiki.authentication.validationKey" and
"xwiki.authentication.encryptionKey" are set
-
"xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl"
- "xwiki.authentication.ldap.server=127.0.0.1" and
"xwiki.authentication.ldap.port=389"
- no further LDAP configuration in xwiki.cfg (made direct in the specific
wiki)
The LDAP-Wiki:
- LDAP Login-Matching like: "uid={0},ou=users,dc=example,dc=com"
- Password-Matching: "{1}"
- LDAP Base DN: "ou=users,dc=example,dc=com"
- UID Attribute Name: "uid"
- update from LDAP: yes
- try local login: yes
- group-mapping like:
XWiki.XWikiAdminGroup=cn=admin,ou=groups,dc=example,dc=com
- sync-mode: always
OpenLDAP:
- listens 127.0.0.1 and port 389 only
Some additional notes:
We are using LDAP to share one user-database with our public forum. So we
are running phpBB and XWiki connected to the same LDAP directory.
Thanks for your time
Jan
--
View this message in context:
http://xwiki.475771.n2.nabble.com/severe-trouble-with-web-crawlers-tp744216…
Sent from the XWiki- Users mailing list archive at
Nabble.com.