20 Jun
2012
20 Jun
'12
10:06 a.m.
Hello,
I’m using Xwiki enterprise 4.1 with LDAP authentication to an Active Directory server.
Authentication works fine, but my group mappings don’t work.
I think the problem is that I’m using sAMAccountName as UID_attr, but the memberfields of
my groups contain the full ldap-dn of the user. So this way, they do not match and users
are not seen as members in the group.
Is my assumption correct? And is there a solution for this problem?
(I have an other site with an OpenLDAP server which has normal uid’s in the group
memberfields. This one works fine!)
Regards,
Mark
20 Jun
20 Jun
11:49 a.m.
On Wed, Jun 20, 2012 at 10:06 AM, Mark Jas <mark(a)nieuwenborg.nl> wrote:
Hello,
I’m using Xwiki enterprise 4.1 with LDAP authentication to an Active Directory server.
Authentication works fine, but my group mappings don’t work.
I think the problem is that I’m using sAMAccountName as UID_attr, but the memberfields of
my groups contain the full ldap-dn of the user. So this way, they do not match and users
are not seen as members in the group.
Is my assumption correct? And is there a solution for this problem?
No, both full LDAP DN and uid are supported. It's actually better to
have DN since otherwise XWiki has to search the uid to find the actual
member DN which takes a bit more time.
Do you have the right field name listed in
xwiki.authentication.ldap.group_memberfields ? You should enable LDAP
debug log to get details on what's happening during the group sync.
See
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HEnableL….
(I have an other site with an OpenLDAP server which has normal uid’s in the group
memberfields. This one works fine!)
Regards,
Mark
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
12:03 p.m.
On Wed, Jun 20, 2012 at 10:49 AM, Thomas Mortagne
<thomas.mortagne(a)xwiki.com> wrote:
On Wed, Jun 20, 2012 at 10:06 AM, Mark Jas
<mark(a)nieuwenborg.nl> wrote:
The mapping that I use against a 2008r2 AD is
xwiki.authentication.ldap.fields_mapping=name=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,email=mail,ldap_dn=dn
Cheers
Hello,
I’m using Xwiki enterprise 4.1 with LDAP authentication to an Active Directory server.
Authentication works fine, but my group mappings don’t work.
I think the problem is that I’m using sAMAccountName as UID_attr, but the memberfields of
my groups contain the full ldap-dn of the user. So this way, they do not match and users
are not seen as members in the group.
Is my assumption correct? And is there a solution for this problem?
No, both full LDAP DN and uid are supported. It's actually better to
have DN since otherwise XWiki has to search the uid to find the actual
member DN which takes a bit more time.
Do you have the right field name listed in
xwiki.authentication.ldap.group_memberfields ? You should enable LDAP
debug log to get details on what's happening during the group sync.
See
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HEnableL….
(I have an other site with an OpenLDAP server which has normal uid’s in the group
memberfields. This one works fine!)
Regards,
Mark
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
4881
days inactive
4881
days old
2 comments
3 participants
participants (3)
-
Mark Jas -
shouldbe q931 -
Thomas Mortagne