When we touch that component, I like to hear your requirements. Maybe they are easy to implement in one step all togther. And - of course - I can always use help, testing and tips :) No guarantee yet that I/we get the time and experience with XWiki to get any of the desired features done. (Caveat: I don't have an AD available for testing) Please add your ideas to that XWiki page. BTW: I plan to post a summary of the result to the list as soon as we have something more concret. Gunter THOMAS, BRIAN M (ATTSI) wrote: Hey, I am also going through LDAP interface. My problem is slightly different, I want to use name other than ActiveDirectory username as WikiName. I am not sure how does that help you, but if I can assist you in some way please let me know. ------------------------------------------------------------------------------- Diese E-Mail enthaelt vertrauliche und/oder rechtlich geschuetzte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtuemlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestattet. The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer. -------------------------------------------------------------------------------

THOMAS, BRIAN M (ATTSI) wrote: In Hungary, given names traditionally come after the family name. I read this in Wikipedia because I'm not from Hungary. :) I'm not far from the border, though: http://en.wikipedia.org/wiki/Osijek#Institutions_and_industries Hungary is straight above. Although domain .hr associate to Hungary, their 2-letter ISO code is "hu". "hr" stands for Croatia, because our local name is Hrvatska. I was surprised when I noticed that GMANE added national flag to my posts. It is common here to write given name first, or to use encyclopedic format: family, given (not so common) I'm not sure how write it phonetically. It is made of 5 letters (first has reversed caret on top): v Z e lj k o Let's try pronunciation: v Z like first letter in "Jet'aime" e like "a" in "fat" lj try to say "l" and "y" at the same time k as in English o like "o" in "top" You can record it and sent it to me to check did I described it correctly.

Gunter's stated requirement (as I understand it) was primarily the ability to refuse entry to users whose LDAP-supplied (not "supplier", in case you misread my note rather than mistyping your question) information didn't meet certain criteria - specifically, in his case, that the DN did not contain an O (Organization) attribute matching one of a list of authorized entities. His need, it turns out, could be satisfied by a simple regular expression, but some may need specific lists of authorized values too irregular to be distinguished by a regex and too numerous or dynamic to allow enumeration in a static list. A requirement that I had in a (somewhat) similar situation (that used a servlet filter instead of re-implementing any of XWiki's access-control services) was that information provided (via encrypted and signed cookies) by the external authentication service should determine membership in pre-established XWiki groups - three organizations had three separate spaces, and XWiki groups were created to be given access to those spaces. Eligibility for embership in the groups was determined by a wiki page containing objects of a class naming the group, a property name identifying a field in the cookie data (in this case the organization code) and a regular expression which, if matched by the named field, would indicate eligibility. Group memberships would then be updated in accordance with the indicated eligibility. As to these things, I think that the offer you often give to list members applies to you as well, no...? :> It's what I love about wikis, particularly XWiki: I get to tell my users: "Do it yourself!" or with less technical users, I borrow the Home Depot slogan: "You can do it; we can help!" In all seriousness, of course: Thanks for your input, feedback and guidance. brain[sic]