Currently, XWiki allows only one method of authentication to be enabled. This means that using LDAP disables the normal XWiki users.<br><br>This is an error in the architecture, and I vote for changing this. Instead of using only one authentication/rights mechanism, we should have a list. When trying to authenticate a user, all the registered authenticators should be used, until at least one correctly identifies the user.
<br><br>This should be better planned, so that in the future no other changes should be made.<br><br>Sergiu<br><br><div><span class="gmail_quote">On 3/23/07, <b class="gmail_sendername">Gunter Leeb</b> &lt;<a href="mailto:Gunter.Leeb@mediaprint.at">
Gunter.Leeb@mediaprint.at</a>&gt; wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hi,<br><br>Using XWiki 1.0B3.<br><br>After switching to using LDAP (using our eDirectory), the current user
<br>access management behavior that I am seeing is, that<br><br>&nbsp;&nbsp;&nbsp;&nbsp;1. I can login with a user/pwd authenticated against<br>LDAP/eDirectory. If the user does not already exist in XWiki, the user<br>appears to be created.<br>
<br>&nbsp;&nbsp;&nbsp;&nbsp;2. A user, created in XWiki CANNOT Login anymore, if he/she is not<br>an LDAP user. (Why is that?)<br><br>&nbsp;&nbsp;&nbsp;&nbsp;3. The old passwords do not work anymore for users with a matching<br>entry in XWiki and LDAP. (ok)<br>
<br><br>Why can&#39;t I add user per hand if I use LDAP? This would at least allow<br>some Workaround for some other limitations and give the administrator a<br>way to allow users that for some reasons do not get an entry in the
<br>LDAP.<br><br>Can I hope for XWiki 1.0 to include the handling of an LDAP group for<br>authentication?<br><br>I have read a blog mentioning LDAP group support being planned for<br>1.0.<br>Is this still the case?<br><br>
Regards,<br><br>GLeeb<br><br>xwiki.authentication.ldap=1<br>xwiki.authentication.ldap.authclass=com.xpn.xwiki.user.impl.LDAP.LDAPAuthServiceImpl<br>xwiki.authentication.ldap.server=dsmaster<br>xwiki.authentication.ldap.check_level=1
<br>xwiki.authentication.ldap.port=389<br>xwiki.authentication.ldap.base_DN=department=USER,department=INFORMATIK,department=1230,o=MP<br>xwiki.authentication.ldap.bind_DN=cn={0},department=USER,department=INFORMATIK,department=1230,o=MP
<br>xwiki.authentication.ldap.bind_pass={1}<br>xwiki.authentication.ldap.UID_attr=uid<br></blockquote></div><br clear="all"><br>-- <br><a href="http://purl.org/net/sergiu">http://purl.org/net/sergiu</a>