hello Sam. Please check it: http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HEnableLD... and http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Logging "The best solution is to create a new log4j.properties file in your WEB-INF/classes directory" of course with ldap section. ps. auth ldap with 1.6.1 works fine for me.. i can't run it with 1.7 version Greets!
Sorry, I have no solutions for you. But I have a question, what did you do to get LDAP Debug messages? I tried turning them on, but they don't seem to work for me.
Thanks, Sam
On Oct 24, 2008, at 8:40 AM, Bartłomiej Radziszewski wrote:
hello,
I'm trying connect xwiki to the ldap using this manual http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HGenericL... but have problem with auth..
i'm using: slapd 2.3.30-5+etch2 apache-tomcat-6.0.18 xwiki-enterprise-web-1.7-milestone-1.war jdk1.6.0_07
xwiki.cfg ldap section:
xwiki .authentication .authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl
xwiki.authentication.ldap=1 xwiki.authentication.ldap.server=127.0.0.1 xwiki.authentication.ldap.port=389 xwiki.authentication.ldap.bind_DN=cn={0},ou=people,dc=xxx,dc=com xwiki.authentication.ldap.bind_pass={1} xwiki.authentication.ldap.validate_password=0 # xwiki .authentication .ldap.user_group=cn=developers,ou=groups,o=MegaNova,c=US
# xwiki .authentication.ldap.exclude_group=cn=admin,ou=groups,o=MegaNova,c=US xwiki.authentication.ldap.base_DN=ou=people,dc=xxx,dc=com xwiki.authentication.ldap.UID_attr=cn used "when xwiki.authentication.ldap.validate_password" is set to 1 xwiki.authentication.ldap.password_field=userPassword # xwiki .authentication .ldap .group_classes = group ,groupOfNames ,groupOfUniqueNames ,dynamicGroup,dynamicGroupAux,groupWiseDistributionList
# xwiki.authentication.ldap.group_memberfields=member,uniqueMember xwiki .authentication .ldap .fields_mapping = last_name =sn,first_name=givenName,fullname=fullName,email=mail,ldap_dn=dn
xwiki.authentication.ldap.update_user=1 # xwiki .authentication .ldap .group_mapping =XWiki.XWikiAdminGroup=cn=AdminRole,ou=groups,o=MegaNova,c=US|\
# XWiki.Organisation=cn=testers,ou=groups,o=MegaNova,c=US # xwiki.authentication.ldap.groupcache_expiration=21800 # xwiki.authentication.ldap.mode_group_sync=always xwiki.authentication.ldap.trylocal=1 xwiki.authentication.ldap.ssl=0 xwiki.authentication.ldap.ssl.keystore= # xwiki .authentication .ldap.ssl.secure_provider=com.sun.net.ssl.internal.ssl.Provider
java LDAP debug module exeption: / 21:07:39,624 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] [http-8080-7] DEBUG LDAP.XWikiLDAPAuthServiceImpl - LDAP authentication failed: login null 21:07:39,627 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] [http-8080-7] DEBUG ldap.XWikiLDAPConnection - Connection to LDAP server [127.0.0.1:389] 21:07:39,641 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] [http-8080-7] DEBUG ldap.XWikiLDAPConnection - Binding to LDAP server with credentials login=[cn=user1,ou=people,dc=xxx,dc=com ] password=[user1] 21:07:39,644 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] [http-8080-7] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Found user dn with the user object: cn=user1,ou=people,dc=xxx,dc=com 21:07:39,646 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] [http-8080-7] DEBUG LDAP.XWikiLDAPAuthServiceImpl - LDAP attributes will be used to update XWiki attributes. 21:07:39,646 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] [http-8080-7] DEBUG ldap.XWikiLDAPConfig - Ready to create user from LDAP with fields last_name =sn,first_name=givenName,fullname=fullName,email=mail,ldap_dn=dn 21:07:39,649 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] [http-8080-7] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Updating existing user with LDAP attribues located at cn=user1,ou=people,dc=xxx,dc=com 21:07:39,650 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] [http-8080-7] DEBUG ldap.XWikiLDAPConfig - Ready to create user from LDAP with fields last_name =sn,first_name=givenName,fullname=fullName,email=mail,ldap_dn=dn 21:07:39,651 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] [http-8080-7] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Local LDAP authentication failed. java.lang.NullPointerException at com .xpn .xwiki .user .impl .LDAP .XWikiLDAPAuthServiceImpl .updateUserFromLDAP(XWikiLDAPAuthServiceImpl.java:730)
at com .xpn .xwiki .user .impl .LDAP .XWikiLDAPAuthServiceImpl.syncUser(XWikiLDAPAuthServiceImpl.java:497)
at com .xpn .xwiki .user .impl .LDAP .XWikiLDAPAuthServiceImpl .ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:410)
at com .xpn .xwiki .user .impl .LDAP .XWikiLDAPAuthServiceImpl .ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:198)
at com .xpn .xwiki .user .impl .LDAP .XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java: 149)
at com .xpn .xwiki .user .impl .xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:239)
at com .xpn .xwiki .user .impl .xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:165)
at com .xpn .xwiki .user .impl .xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:148)
at com .xpn .xwiki .user .impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java: 205)
at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3564) at com .xpn .xwiki .user .impl .xwiki.XWikiRightServiceImpl.checkAccess(XWikiRightServiceImpl.java: 139)
at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:3572) at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4478) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115) at org .apache .struts .action.RequestProcessor.processActionPerform(RequestProcessor.java: 431)
at org .apache.struts.action.RequestProcessor.process(RequestProcessor.java: 236)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java: 1196) at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432) at javax.servlet.http.HttpServlet.service(HttpServlet.java:637) at javax.servlet.http.HttpServlet.service(HttpServlet.java:717) at org .apache .catalina .core .ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java: 290)
at org .apache .catalina .core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at com .xpn .xwiki .wysiwyg .server.filter.ConversionFilter.doFilter(ConversionFilter.java:96)
at org .apache .catalina .core .ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java: 235)
at org .apache .catalina .core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at com .xpn .xwiki .web .SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java: 287)
at org .apache .catalina .core .ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java: 235)
at org .apache .catalina .core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at com .xpn .xwiki .web .SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java: 112)
at org .apache .catalina .core .ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java: 235)
at org .apache .catalina .core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at org .apache .catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java: 233)
at org .apache .catalina.core.StandardContextValve.invoke(StandardContextValve.java: 191)
at org .apache .catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at org .apache .catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at org .apache .catalina.core.StandardEngineValve.invoke(StandardEngineValve.java: 109)
at org .apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java: 286) at org .apache.coyote.http11.Http11Processor.process(Http11Processor.java: 845) at org.apache.coyote.http11.Http11Protocol $Http11ConnectionHandler.process(Http11Protocol.java:583)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java: 447) at java.lang.Thread.run(Thread.java:619) 21:07:39,653 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] [http-8080-7] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Trying authentication against XWiki DB/
Somebody can help me? Thanks and Greetings, Bart
-- Bartłomiej Radziszewski mobile: +48 509 561 540 e-mail: [email protected] JID: [email protected] ICQ: #305569725
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Bartłomiej Radziszewski mobile: +48 509 561 540 e-mail: [email protected] JID: [email protected] ICQ: #305569725