Hi, finaly solved the problem and authentication via activ directory works. the correct authentication class xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl and correcting an error in the bind_DN did it. Thanks Helmut FabienB wrote:
Here is my config working with the new and the old LDAP plugin.
What I find strange in your config is the line xwiki.authentication.ldap.bind_DN
#-# Turn LDAP authentication on - otherwise only XWiki authentication #-# 0 : disable #-# 1 : enable xwiki.authentication.ldap=1
# Turn LDAP validate password on # 1 : enable # 0 : disable xwiki.authentication.ldap.validate_password=0
#-# LDAP Server (Active Directory, eDirectory, OpenLDAP, etc.) xwiki.authentication.ldap.server=frvilsidc01.ad2.ad.toto.com xwiki.authentication.ldap.port=389
#-# LDAP login, empty = anonymous access, otherwise specify full dn #-# {0} is replaced with the username, {1} with the password xwiki.authentication.ldap.bind_DN=ad2\\{0} xwiki.authentication.ldap.bind_pass={1}
#-# only members of the following group will be verified in the LDAP # otherwise only users that are found after searching starting from the base_DN #xwiki.authentication.ldap.user_group=cn=developers,ou=groups,o=MegaNova,c=US
#-# base DN for searches xwiki.authentication.ldap.base_DN=dc=ad,dc=toto,dc=com
#-# specifies the LDAP attribute containing the identifier to be used as the XWiki name (default=cn) xwiki.authentication.ldap.UID_attr=sAMAccountName
#-# retrieve the following fields from LDAP and store them in the XWiki user object (xwiki-attribute=ldap-attribute) #-# ldap_dn=dn -- dn is set by class, caches dn in XWiki.user object for faster access xwiki.authentication.ldap.fields_mapping=name=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,mail=mail
#-# [SINCE 1.3M2, XWikiLDAPAuthServiceImpl] #-# on every login update the mapped attributes from LDAP to XWiki otherwise this happens only once when the XWiki account is created. xwiki.authentication.ldap.update_user=0
With this config I am able to bind to the LDAP but not authenticate
-- View this message in context: http://www.nabble.com/LDAP-Authentication-%28Active-Directory%29-tp17626760p... Sent from the XWiki- Users mailing list archive at Nabble.com.