23 Sep
2015
23 Sep
'15
8:59 a.m.
On Wed, Sep 23, 2015 at 4:42 AM, Debajit Adhikary <debajit1(a)gmail.com> wrote:
Thanks, I was able to set it up successfully.
I want to check if the currently logged-in user ($xwiki.getUser()) is a
member of a particular LDAP group. What is the best way to do this with the
"Trusted LDAP" setup?
*Option 1:*
I could map the LDAP groups to XWiki groups.
That would be the easiest I think.
*Option 2:*
Can I do this dynamically without having to map the LDAP groups? (i.e. is
there an easy way to check if a user belongs to an LDAP group without
having to map the LDAP group to an XWiki group?)
There is some more or less hidden APIs you can use for that (basically
the tools used by the authenticator to synchronize LDAP Groups and
XWiki Groups) but it's really not been written with Velocity scripting
in mind.
You can look at
https://github.com/xwiki/xwiki-platform/blob/master/xwiki-platform-core/xwi…
for an example of how to setup those tools (in Groovy for example).
Then you can use APIs like XWikiLDAPUtils#getGroupMembers.
On Fri, Sep 18, 2015 at 12:47 AM, Thomas Mortagne <thomas.mortagne(a)xwiki.com
--
Thomas Mortagne
wrote:
> If you have an authenticator in front of XWiki that populate the
> REMOTE_USER request property you could use
>
>
http://extensions.xwiki.org/xwiki/bin/view/Extension/XWiki+Authenticator+Tr…
> which has been designed specifically for this use case.
>
> On Fri, Sep 18, 2015 at 3:05 AM, Debajit Adhikary <debajit1(a)gmail.com>
wrote:
> > I have an XWiki setup that
uses Kerberos for authentication.
> >
> > I would like to continue using Kerberos, but use LDAP groups for
> > controlling page access rights.
> >
> > How could I do this?
> >
> > (If you could point me in the right direction, or to any appropriate
> > documentation, that would be a big help)
> >
> > Thanks in advance
> > —Debajit
> > _______________________________________________
> > users mailing list
> > users(a)xwiki.org
> > http://lists.xwiki.org/mailman/listinfo/users
>
>
>
> --
> Thomas Mortagne
> _______________________________________________
> users mailing list
> users(a)xwiki.org
> http://lists.xwiki.org/mailman/listinfo/users
>
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users