See http://platform.xwiki.org/xwiki/bin/view/AdminGuide/LDAPAuthenticationUseCas... On Thu, Nov 13, 2014 at 3:53 PM, Ryszard Łach <[email protected]> wrote:

Hi.

I've the following configuration:

* XWIki Enterprise 5.4.5 with path-based subwikis * Main wiki using LDAP (AD) authentication * Subwiki with "both local and global users"

I'm trying do configure it so, that Global users will be authenticated by AD (possibly with some AD-to-Wiki group mappings) and Local users will be authenticated against xwiki database.

It's almost working. If the Global user is logged in to the main wiki and then goes to the subwiki - he/she can use it as Global user (which can be checked looking at the 'profile' or 'preferences' urls included in the heading bar). But if the user without prior logging to the main wiki goes straight to subwiki and enters his AD credentials - a new Local user is being created.

Is there a way to prevent the Local user creation? I suppose, that changing xwiki.authentication.ldap.trylocal to '0' in xwiki.cfg is not the solution - I'll lose the ability to have local users in subwiki, right?

In the main wiki it is desire'able, it allows easy joining for each AD user.

TIA,

R.

_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne