Hi Sharan,
Thanks for the reminder ;)
See below
On Mon, Sep 8, 2008 at 11:09 PM,
<sharanabasavaraj.x.mudgal(a)jpmchase.com> wrote:
Hi!
Could anyone point to any additonal resources for LDAP Authentication. The
XWiki doc
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication does
not deal in complete detail on all the possible attributes that can be
configured in xwiki.cfg. I have configured LDAP authentication for XWik
but have Some questions that I could not find answers to from the docs.
1) How can the LDAP configuration be debugged for any issues. I
followed the log4j settings from
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Logging . There is no
LDAP related logging in the xwiki log. The xwiki log shows that the
user was Authenticatied with Xwiki.FormAuthenticator e.g this is the
message in the log " [P1-19] INFO xwiki.MyFormAuthenticator - User
xwiki:XWiki.testuser5 has been logged-in" (not sure if this would
internally call the LDAP class). However, since only the ldap users are
being authenticated, I think the .XWikiLDAPAuthServiceImpl is being used.
I found on the web that
com.xpn.xwiki.user.impl.LDAP=debug log seeting could be used for setting
the LDAP loglevel to debug. However, this setting still does not log
anything LDAP. Is this a valid setting for XWikiLDAPAuthServiceImpl?
How can I conclusively say the authentication is done through LDAP?
Just added in
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication
The specific targets for LDAP authentication are:
log4j.logger.com.xpn.xwiki.plugin.ldap=debug
log4j.logger.com.xpn.xwiki.user.impl.LDAP=debug
The first line is for XWiki LDAP tools and the second is for
authentitication process itself.
2)Is it possible to replicate the groups in LDAP to groups in XWIKI and
replicate the corresponding groupmemberships for a user during login so
that the authorization is done through XWiki based on the user's group
association in LDAP?
Just added in
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/LDAPAuthenticationUseCa…
You can use xwiki."authentication.ldap.group_mapping" to link LDAP
groups to existing XWiki groups. The membership is updated when the
user log in.
Thanks.
Sharan.
-----------------------------------------
This communication is for informational purposes only. It is not
intended as an offer or solicitation for the purchase or sale of
any financial instrument or as an official confirmation of any
transaction. All market prices, data and other information are not
warranted as to completeness or accuracy and are subject to change
without notice. Any comments or statements made herein do not
necessarily reflect those of JPMorgan Chase & Co., its subsidiaries
and affiliates.
This transmission may contain information that is privileged,
confidential, legally privileged, and/or exempt from disclosure
under applicable law. If you are not the intended recipient, you
are hereby notified that any disclosure, copying, distribution, or
use of the information contained herein (including any reliance
thereon) is STRICTLY PROHIBITED. Although this transmission and any
attachments are believed to be free of any virus or other defect
that might affect any computer system into which it is received and
opened, it is the responsibility of the recipient to ensure that it
is virus free and no responsibility is accepted by JPMorgan Chase &
Co., its subsidiaries and affiliates, as applicable, for any loss
or damage arising in any way from its use. If you received this
transmission in error, please immediately contact the sender and
destroy the material in its entirety, whether in electronic or hard
copy format. Thank you.
Please refer to
http://www.jpmorgan.com/pages/disclosures for
disclosures relating to UK legal entities.
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
--
Thomas Mortagne