1 Jul
2014
1 Jul
'14
2:05 p.m.
I don't know the CAS authenticator but I can certainly answer the LDAP
questions. I guess you can always ask ask for the feature on
http://jira.xwiki.org/browse/AUTHCAS and hope that the developer will
see it.
On Tue, Jul 1, 2014 at 10:43 AM, Pascal BASTIEN <pbasnews-xwiki(a)yahoo.fr> wrote:
Hello,
I wanted to know if it is possible to filter by groups with CAS authenticator.
http://extensions.xwiki.org/xwiki/bin/view/Extension/Authenticator+Jasig+CAS
I must maps groups with xwikiAllgroups?
Are there a parameter like LDAP one?
#-# Only members of the following group can authenticate.
#-# The following kind of groups are supported:
#-# * LDAP static groups (users/subgroups are listed statically in the group object)
xwiki.authentication.ldap.user_group=xxxxxxx
and BTW for ldap authentication what's "LDAP static groups (users/subgroups are
listed statically in the group object)" meaning?
LDAP is organized as a tree of object/entryies containing properties
so in "LDAP static groups" the members of the group are listed
directly in one of the LDAP group object/entry property.
You have an example in the xwiki.cfg file:
XWiki.XWikiAdminGroup=cn=AdminRole,ou=groups,o=domain,c=com where
cn=AdminRole,ou=groups,o=domain,c=com is the complete group DN.
If I add a LDAP member in my LDAP group, I must
relauinch Tomcat for synchronsie xwiki group?
LDAP group are stored in a cache on XWiki side (see
xwiki.authentication.ldap.groupcache_expiration property) so it's
possible the group you modify is already in the cache and that you
will need to wait a bit or restart tomcat if you want to apply the
change right away.
Thxs.
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne