-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Try as I might, with 0.8.40 and the current Subversion HEAD, I cannot
get LDAP authentication to work. Here is the environment:
* Gentoo Linux 2.6.12, Tomcat/5.0.27, Blackdown-1.4.2-02
(I think this is all pretty mainstream)
* No error messages are displayed to the user although, as the
CATALINA.LOG records show, the user successfully authenticated
* XWIKI.LOG has FormBeanConfig errors, but this seems to be a know
problem (judging from the ticket in the tracking system)
If I set "log4j.logger.com.xpn.xwiki=info" in classes/log4j.properties,
I get this line, but nothing else helpful:
INFO http-8080-Processor23
http://green.ohiolink.edu:8080/xwiki/bin/login/XWiki/XWikiLogin
MyFormAuthenticator:processLogin:142 - User peter(a)OhioLINK.edu login
has failed
I've been banging my head against this for two days and am about to give
up in favor of a less attractive, yet likely at least functional,
solution with a different wiki system. Advice would be greatly
appreciated...
XWIKI.CONF
xwiki.authentication.cookiedomains=ohiolink.edu
xwiki.authentication.useip=false
xwiki.authentication.ldap=1
xwiki.authentication.ldap.server=ldap.ohiolink.edu
xwiki.authentication.ldap.port=389
xwiki.authentication.ldap.base_DN=ou=People,dc=ohiolink,dc=edu
xwiki.authentication.ldap.UID_addr=mail # Login is e-mail address
xwiki.authentication.ldap.fields_mapping=name=mail,last_name=sn,first_name=givenName,fullname=displayName,mail=mail,ldap_dn=dn
xwiki.authentication.ldap.check_level=0 # Also tried "1"
XWIKI.LOG
WARN http-8080-Processor25
http://green.ohiolink.edu:8080/xwiki/bin/view/Main/WebHome
XWikiStatsServiceImpl:addCookie:474 - Setting cookie
12SKZHIOAL5BZEUWE7AVRXP7BJAT2IKN for name visitid with domain
ohiolink.edu and path / and maxage 942002
WARN http-8080-Processor24 RequestUtils:createActionForm:177 - No
FormBeanConfig found under 'login'
WARN http-8080-Processor24
http://green.ohiolink.edu:8080/xwiki/bin/login/XWiki/XWikiLogin?xredirect=h…
RequestUtils:createActionForm:177 - No FormBeanConfig found under
'loginerror'
WARN http-8080-Processor24 RequestUtils:createActionForm:177 - No
FormBeanConfig found under 'login'
WARN http-8080-Processor24
http://green.ohiolink.edu:8080/xwiki/bin/login/XWiki/XWikiLogin?xredirect=h…
RequestUtils:createActionForm:177 - No FormBeanConfig found under
'loginerror'
CATALINA.LOG:
JNDIRealm[Catalina]: Searching for peter(a)OhioLINK.edu
JNDIRealm[Catalina]: base: ou=People,dc=ohiolink,dc=edu filter:
(mail=peter(a)OhioLINK.edu)
JNDIRealm[Catalina]: entry found for peter(a)OhioLINK.edu with dn
uid=peter,ou=People,dc=ohiolink,dc=edu
JNDIRealm[Catalina]: retrieving values for attribute memberOf
JNDIRealm[Catalina]: validating credentials by binding as the user
JNDIRealm[Catalina]: binding as uid=peter,ou=People,dc=ohiolink,dc=edu
JNDIRealm[Catalina]: Username peter(a)OhioLINK.edu successfully authenticated
JNDIRealm[Catalina]: getRoles(uid=peter,ou=People,dc=ohiolink,dc=edu)
JNDIRealm[Catalina]: Searching role base
'ou=Groups,dc=ohiolink,dc=edu' for attribute 'cn'
JNDIRealm[Catalina]: With filter expression
'(uniqueMember=uid=peter,ou=People,dc=ohiolink,dc=edu)'
JNDIRealm[Catalina]: retrieving values for attribute cn
JNDIRealm[Catalina]: retrieving values for attribute cn
JNDIRealm[Catalina]: Returning 2 roles
JNDIRealm[Catalina]: Found role developers
JNDIRealm[Catalina]: Found role drcadmin
- --
Peter Murray
http://www.pandc.org/peter/work/
Assistant Director, Multimedia Systems tel:+1-614-728-3600;ext=338
OhioLINK: the Ohio Library and Information Network Columbus, Ohio
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (Darwin)
Comment: Using GnuPG with Thunderbird -
http://enigmail.mozdev.org
iD8DBQFC+0t14+t4qSfPIHIRAtBvAJ9nFj0jpbPfPShwsm1RbEJPJc5mEwCeJnUG
9G65anfEx7ubb9YsG2MYPFU=
=qKVk
-----END PGP SIGNATURE-----