On May 14, 2007, at 3:17 PM, [email protected] wrote:
I set up XWiki 1.0RC3 (soon to be upgraded to RC4) with ActiveDirectory authentication. However, it's not what I expected.
First, I must still create XWiki users with the same username that users have in my directory. If I don't first create the XWiki user, the ActiveDirectory user won't be able to log in. However, as soon as I create the XWiki user, the corresponding ActiveDirectory user can log in with their ActiveDirectory credentials. I had hoped that XWiki would simply allow an authenticated user to log in. So am I misunderstanding how it should work?
I have never used the LDAP feature of xwiki but that's what I would expect too. Maybe someone with experience in this domain could jump in? -Vincent
Second, when an ActiveDirectory user does log in, it is the user details from their XWiki user that is shown, not the corresponding ActiveDirectory details. For example, if John Smith is an ActiveDirectory user with username "jsmith", and I create an XWiki user named "Johnny Boy", then when John logs in, "Johnny Boy" is shown for his name, not the "John Smith" form ActiveDirectory. This surprises me because some of the LDAP value I has to specify for XWiki's ActiveDirectory integration were telling it how to glean information such as the displayName from the directory. Again, and I misunderstanding how it should work?
Regards, Brian.