Hi Peter, There is something that seems weird to me.. In the catalina.log, this does not seem very xwiki: "JNDIRealm[Catalina]" Wouldn't it be possible that you have something else configured with LDAP on your tomcat.. What type of user auth do you see ? Do you see a Form based interface of xwiki or a basic auth ? Ludovic Peter Murray wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Try as I might, with 0.8.40 and the current Subversion HEAD, I cannot get LDAP authentication to work. Here is the environment:
* Gentoo Linux 2.6.12, Tomcat/5.0.27, Blackdown-1.4.2-02 (I think this is all pretty mainstream)
* No error messages are displayed to the user although, as the CATALINA.LOG records show, the user successfully authenticated
* XWIKI.LOG has FormBeanConfig errors, but this seems to be a know problem (judging from the ticket in the tracking system)
If I set "log4j.logger.com.xpn.xwiki=info" in classes/log4j.properties, I get this line, but nothing else helpful:
INFO http-8080-Processor23 http://green.ohiolink.edu:8080/xwiki/bin/login/XWiki/XWikiLogin MyFormAuthenticator:processLogin:142 - User [email protected] login has failed
I've been banging my head against this for two days and am about to give up in favor of a less attractive, yet likely at least functional, solution with a different wiki system. Advice would be greatly appreciated...
XWIKI.CONF xwiki.authentication.cookiedomains=ohiolink.edu xwiki.authentication.useip=false xwiki.authentication.ldap=1 xwiki.authentication.ldap.server=ldap.ohiolink.edu xwiki.authentication.ldap.port=389 xwiki.authentication.ldap.base_DN=ou=People,dc=ohiolink,dc=edu xwiki.authentication.ldap.UID_addr=mail # Login is e-mail address xwiki.authentication.ldap.fields_mapping=name=mail,last_name=sn,first_name=givenName,fullname=displayName,mail=mail,ldap_dn=dn xwiki.authentication.ldap.check_level=0 # Also tried "1"
XWIKI.LOG WARN http-8080-Processor25 http://green.ohiolink.edu:8080/xwiki/bin/view/Main/WebHome XWikiStatsServiceImpl:addCookie:474 - Setting cookie 12SKZHIOAL5BZEUWE7AVRXP7BJAT2IKN for name visitid with domain ohiolink.edu and path / and maxage 942002 WARN http-8080-Processor24 RequestUtils:createActionForm:177 - No FormBeanConfig found under 'login' WARN http-8080-Processor24 http://green.ohiolink.edu:8080/xwiki/bin/login/XWiki/XWikiLogin?xredirect=ht... RequestUtils:createActionForm:177 - No FormBeanConfig found under 'loginerror' WARN http-8080-Processor24 RequestUtils:createActionForm:177 - No FormBeanConfig found under 'login' WARN http-8080-Processor24 http://green.ohiolink.edu:8080/xwiki/bin/login/XWiki/XWikiLogin?xredirect=ht... RequestUtils:createActionForm:177 - No FormBeanConfig found under 'loginerror'
CATALINA.LOG: JNDIRealm[Catalina]: Searching for [email protected] JNDIRealm[Catalina]: base: ou=People,dc=ohiolink,dc=edu filter: ([email protected]) JNDIRealm[Catalina]: entry found for [email protected] with dn uid=peter,ou=People,dc=ohiolink,dc=edu JNDIRealm[Catalina]: retrieving values for attribute memberOf JNDIRealm[Catalina]: validating credentials by binding as the user JNDIRealm[Catalina]: binding as uid=peter,ou=People,dc=ohiolink,dc=edu JNDIRealm[Catalina]: Username [email protected] successfully authenticated JNDIRealm[Catalina]: getRoles(uid=peter,ou=People,dc=ohiolink,dc=edu) JNDIRealm[Catalina]: Searching role base 'ou=Groups,dc=ohiolink,dc=edu' for attribute 'cn' JNDIRealm[Catalina]: With filter expression '(uniqueMember=uid=peter,ou=People,dc=ohiolink,dc=edu)' JNDIRealm[Catalina]: retrieving values for attribute cn JNDIRealm[Catalina]: retrieving values for attribute cn JNDIRealm[Catalina]: Returning 2 roles JNDIRealm[Catalina]: Found role developers JNDIRealm[Catalina]: Found role drcadmin - -- Peter Murray http://www.pandc.org/peter/work/ Assistant Director, Multimedia Systems tel:+1-614-728-3600;ext=338 OhioLINK: the Ohio Library and Information Network Columbus, Ohio -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFC+0t14+t4qSfPIHIRAtBvAJ9nFj0jpbPfPShwsm1RbEJPJc5mEwCeJnUG 9G65anfEx7ubb9YsG2MYPFU= =qKVk -----END PGP SIGNATURE-----
------------------------------------------------------------------------
-- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto:[email protected] For general help: mailto:[email protected]?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
-- Ludovic Dubost XPertNet: http://www.xpertnet.fr/ Blog: http://www.ludovic.org/blog/ XWiki: http://www.xwiki.com Skype: ldubost AIM: nvludo Yahoo: ludovic