7 Mar
2013
7 Mar
'13
10:42 a.m.
On Tue, Mar 5, 2013 at 4:35 PM, Mark Jas <mark(a)nieuwenborg.nl> wrote:
Hi all,
I have configured xwiki with LDAP authentication and kerberos SSO.
When I use a browser without automatic Kerberos SSO, I get a keberos login page. When I
fill in username and password manually it works great.
But when I set the browser to use automatic logon, I get the xwiki login page! (at least
in FireFox, IE says “cannot show page”)
I get the same results when I manually login with “username@DOMAIN” and “password”. So I
think the domain part is used in the automatic logon. (and is the actual problem…)
I see there is java code that strips the @DOMAIN part from the username. But I have no
idea how or where to implement this. I hope some can help me!
I never used it myself but from what I see in the code it's supposed
to do that all the time. Maybe there is a bug.
You can try to enable debug log[1] for class
com.xpn.xwiki.user.impl.xwiki.AppServerTrustedKerberosAuthServiceImpl
(that's the authenticator you are using, right ?) to see what's going
on. At least ou should get what remote user XWiki is getting if any.
[1] http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Logging
Mark
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne