13 May
2008
13 May
'08
7:38 p.m.
Hi,
Looking at the source code in
http://svn.xwiki.org/svnroot/xwiki/xwiki-platform/core/trunk/xwiki-core/src…
/**
* The LDAP attribute containing the identifier for a user.
*/
private String uidAttributeName = LDAP_DEFAULT_UID;
static {
LDAP_GROUP_CLASS.add("group".toLowerCase());
LDAP_GROUP_CLASS.add("groupOfNames".toLowerCase());
LDAP_GROUP_CLASS.add("groupOfUniqueNames".toLowerCase());
LDAP_GROUP_CLASS.add("dynamicGroup".toLowerCase());
LDAP_GROUP_CLASS.add("dynamicGroupAux".toLowerCase());
LDAP_GROUP_CLASS.add("groupWiseDistributionList".toLowerCase());
LDAP_GROUP_MEMBER.add("member".toLowerCase());
LDAP_GROUP_MEMBER.add("uniqueMember".toLowerCase());
}
It seems there is no support for my openldap schema, my group class is
"posixGroup" and my group membership attribute is "memberUid".
Wouldn't it be a good idea to make these values configurable in xwiki.cfg?
Thanks,
Michael
----- "Michael Jeanson" <mjeanson(a)revolutionlinux.com> wrote:
Hi,
I'm trying to get ldap authentication working on xWiki 1.3.2.9174
against an openldap server but there seems to be a problem with group
membership validation.
Here is what I have in the logs :
[http-8080-1] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Checking if the
user belongs to the user group: cn=xwiki,ou=Group,dc=example,dc=net
[http-8080-1] ERROR ldap.XWikiLDAPUtils - Could not find
attribute uid for LDAP dn cn=xwiki,ou=Group,dc=example,dc=net
[http-8080-1] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Trying
authentication against XWiki DB
[http-8080-1] WARN LDAP.XWikiLDAPAuthServiceImpl - LDAP
authentication failed.
It seems xWiki uses the "uid" attribute to map group membership but in
my case it should be "memberUid"
The relevant configuration parameters :
xwiki.authentication.ldap.user_group=cn=xwiki,ou=Group,dc=example,dc=net
xwiki.authentication.ldap.UID_attr=uid
The attribute "uid" is correctly used to define a unique user but I
haven't found any parameter in the admin guide to define the group
membership attribute, I am missing something?
Thanks,
Michael
---
Michael Jeanson - Revolution Linux
http://www.revolutionlinux.com - (819) 780 8955 #1119
* Toute opinion et prise de position exprimée dans ce message est
celle de son auteur et pas nécessairement celle de Révolution Linux.
** Any views and opinion presented in this e-mail are solely those of
the author and do not necessarily represent those of Révolution Linux.
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users