Hi Peter, Right.. I had the feeling an email address would not work.. The fact that there is no page yet in the wiki should not be a problem at this point.. I don't get why you get no message between these two: DEBUG LDAPAuthServiceImpl:Bind:451 - LDAP Bind successfull INFO MyFormAuthenticator:processLogin:142 - User peter login has failed There should be at least one.. when I look at the code I put to give some debut messages What is your LDAP server by the way ? Ludovic Peter Murray wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 8/12/05 9:16 AM, Ludovic Dubost wrote:
There should be a message from the LDAP module.. I've added some debug info in the class.. Try this instead of the LDAP Auth class
The plot thickens. I can see your debug messages, and it lead me to look at the code. Remember that I am using e-mail address as the userid (bind_DN is "mail={0},ou=People,dc=OhioLINK,dc=edu"). Near the top of the authenticate() method in LDAPAuthServiceImpl.java is this chunk of code:
if (context!=null) { String susername = username; int i = username.indexOf("."); if (i!=-1) susername = username.substring(i+1);
String DN = getLDAP_DN(susername, context);
Initially I think why I was failing is the part that is taking just the left segment of the string up the first period. My e-mail address, of course, has a period, so it was in effect getting truncated before being passed to getLDAP_DN.
So I switched to using just a uid (no periods) and I get a little farther in xwiki.log:
DEBUG LDAPAuthServiceImpl:checkUserPassword:230 - LDAP Password check for user peter DEBUG LDAPAuthServiceImpl:checkUserPassword:253 - LDAP Connect successfull to host ldap.ohiolink.edu and port 389 DEBUG LDAPAuthServiceImpl:Bind:441 - LDAP Bind starting DEBUG LDAPAuthServiceImpl:Bind:451 - LDAP Bind successfull INFO MyFormAuthenticator:processLogin:142 - User peter login has failed
(references to Hibernate and DBCPConnectionProvider have been removed).
I'm looking at this again after a few hours, and I still can't figure out why I'm falling through to line 142 of MyFormAuthenticator. FWIW, I am hoping to make use of the dynamic account creation feature out of LDAP information, so there isn't (yet) a "peter" login in the XWiki user database. Could that be where the next problem is?
Peter - -- Peter Murray http://www.pandc.org/peter/work/ Assistant Director, Multimedia Systems tel:+1-614-728-3600;ext=338 OhioLINK: the Ohio Library and Information Network Columbus, Ohio -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFC/OzD4+t4qSfPIHIRAh/fAJ0Wz66vN2cCMo4G70Dx+J3y0oRBfACgr3cV gyHDpzrTjzA4XCbgLaCeO0Y= =nMKe -----END PGP SIGNATURE-----
------------------------------------------------------------------------
-- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto:[email protected] For general help: mailto:[email protected]?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
-- Ludovic Dubost XPertNet: http://www.xpertnet.fr/ Blog: http://www.ludovic.org/blog/ XWiki: http://www.xwiki.com Skype: ldubost AIM: nvludo Yahoo: ludovic