Re: [xwiki-users] [xwiki-devs] LDAP Authentication

Sharan, you can use Wireshark for traversing any traffic, including LDAP. It's really good and is better than logging in that case. Quoting Thomas Mortagne : Hi Sharan, Thanks for the reminder ;) See below On Mon, Sep 8, 2008 at 11:09 PM, <sharanabasavaraj.x.mudgal(a)jpmchase.com> wrote: > Hi! > > Could anyone point to any additonal resources for LDAP Authentication. The > XWiki doc > http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication does > not deal in complete detail on all the possible attributes that can be > configured in xwiki.cfg. I have configured LDAP authentication for XWik > but have Some questions that I could not find answers to from the docs. > > 1) How can the LDAP configuration be debugged for any issues. I > followed the log4j settings from > http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Logging . There is no > LDAP related logging in the xwiki log. The xwiki log shows that the > user was Authenticatied with Xwiki.FormAuthenticator e.g this is the > message in the log " [P1-19] INFO xwiki.MyFormAuthenticator - User > xwiki:XWiki.testuser5 has been logged-in" (not sure if this would > internally call the LDAP class). However, since only the ldap users are > being authenticated, I think the .XWikiLDAPAuthServiceImpl is being used. > > I found on the web that > com.xpn.xwiki.user.impl.LDAP=debug log seeting could be used for setting > the LDAP loglevel to debug. However, this setting still does not log > anything LDAP. Is this a valid setting for XWikiLDAPAuthServiceImpl? > How can I conclusively say the authentication is done through LDAP? Just added in http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication The specific targets for LDAP authentication are: log4j.logger.com.xpn.xwiki.plugin.ldap=debug log4j.logger.com.xpn.xwiki.user.impl.LDAP=debug The first line is for XWiki LDAP tools and the second is for authentitication process itself. > > 2)Is it possible to replicate the groups in LDAP to groups in XWIKI and > replicate the corresponding groupmemberships for a user during login so > that the authorization is done through XWiki based on the user's group > association in LDAP? Just added in http://platform.xwiki.org/xwiki/bin/view/AdminGuide/LDAPAuthenticationUseCa… You can use xwiki."authentication.ldap.group_mapping" to link LDAP groups to existing XWiki groups. The membership is updated when the user log in. > > Thanks. > Sharan. > > > ----------------------------------------- > This communication is for informational purposes only. It is not > intended as an offer or solicitation for the purchase or sale of > any financial instrument or as an official confirmation of any > transaction. All market prices, data and other information are not > warranted as to completeness or accuracy and are subject to change > without notice. Any comments or statements made herein do not > necessarily reflect those of JPMorgan Chase & Co., its subsidiaries > and affiliates. > > This transmission may contain information that is privileged, > confidential, legally privileged, and/or exempt from disclosure > under applicable law. If you are not the intended recipient, you > are hereby notified that any disclosure, copying, distribution, or > use of the information contained herein (including any reliance > thereon) is STRICTLY PROHIBITED. Although this transmission and any > attachments are believed to be free of any virus or other defect > that might affect any computer system into which it is received and > opened, it is the responsibility of the recipient to ensure that it > is virus free and no responsibility is accepted by JPMorgan Chase & > Co., its subsidiaries and affiliates, as applicable, for any loss > or damage arising in any way from its use. If you received this > transmission in error, please immediately contact the sender and > destroy the material in its entirety, whether in electronic or hard > copy format. Thank you. > > Please refer to http://www.jpmorgan.com/pages/disclosures for > disclosures relating to UK legal entities. > _______________________________________________ > devs mailing list > devs(a)xwiki.org > http://lists.xwiki.org/mailman/listinfo/devs > -- Thomas Mortagne _______________________________________________ users mailing list users(a)xwiki.org http://lists.xwiki.org/mailman/listinfo/users Ar cieņu, Mihails Links: ------ [1] mailto:thomas.mortagne@xwiki.com _______________________________________________ users mailing list users(a)xwiki.org http://lists.xwiki.org/mailman/listinfo/users