Re: [xwiki-users] LDAP/ActiveDirectory authentication not what I expected

I set up XWiki 1.0RC3 (soon to be upgraded to RC4) with ActiveDirectory authentication. However, it's not what I expected. First, I must still create XWiki users with the same username that users have in my directory. If I don't first create the XWiki user, the ActiveDirectory user won't be able to log in. However, as soon as I create the XWiki user, the corresponding ActiveDirectory user can log in with their ActiveDirectory credentials. I had hoped that XWiki would simply allow an authenticated user to log in. So am I misunderstanding how it should work?

Second, when an ActiveDirectory user does log in, it is the user details from their XWiki user that is shown, not the corresponding ActiveDirectory details. For example, if John Smith is an ActiveDirectory user with username "jsmith", and I create an XWiki user named "Johnny Boy", then when John logs in, "Johnny Boy" is shown for his name, not the "John Smith" form ActiveDirectory. This surprises me because some of the LDAP value I has to specify for XWiki's ActiveDirectory integration were telling it how to glean information such as the displayName from the directory. Again, and I misunderstanding how it should work? Regards, Brian.