17 Apr
2010
17 Apr
'10
6:19 p.m.
On Fri, Apr 16, 2010 at 21:30, Abel Solórzano Astorga
<abelsolorzano(a)gmail.com> wrote:
Hi,
I have a question :).
First this is my situation: I am using XWiki as the company support site
and I want to be able to authenticate the company users (internal users) on
XWiki using their domain name and the clients (external users) using their
personal e-mail. At the moment the company users are being authenticated
against an Active Directory server by their domain name.
Is there a way to authenticate a group of users to a LDAP server by their
e-mail addresses and another group of users to an Active Directory in a
different server by their domain name?
Not in standard, you would have to do your own authenticator for that.
If you know a little java the easiest for you is probably to extends
com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl class with your
own and implement your dispatching code here.
Problem is that since you are not yet authenticated you have no idea
what is the group of the user.
Some solutions you could implement in your authenticator:
- find a way to indicate authentication mode to use:
- take any login containing @ char as a mail
- add a field in the login page to let user explicitly indicate
their "authentication mode", you would also need to modify login page
code to find a way to transmit the information to the authenticator
(since authentication api only support 2 fields: a login and a
password)
- try systematically one authentication and then try the other one if
the first one failed (for example standard LDAP authenticator try LDAP
and then standard XWiki if LDAP failed which is why you can
authenticate with a LDAP user or a XWiki user with LDAP
authenticator).
Regards,
Abel
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne