On Fri, Sep 10, 2010 at 01:27, [Ricardo Rodriguez] eBioTIC. <[email protected]> wrote:

Hi!

After some successful trials I'm stuck with a problem using xwiki.authentication.ldap.user_group: no new member of the group is allowed to access the wiki (XWiki Enterprise 2.4.30451 // XEM 2.4; eDirectory as LDAP server). Here the log for two errors and one successful access...

http://ftp.ebiotic.net/fromPeat/ldapGroupError.txt

Users failing to authenticate exist in the group:

GMXUX-Ricardo-Rodriguez:~ rrodriguez$ ldapsearch -H ldap://peat.environmentalchange.net:389 -x -D "cn=admin,o=EPECNetwork" -W -b "o=EPECNetwork" -s one -a always -z 1000 "(objectClass=*)" "subordinateCount" "objectClass" | grep "Patricia" Enter LDAP Password: # PatriciaBlancoArias, EPECNetwork dn: cn=PatriciaBlancoArias,o=EPECNetwork GMXUX-Ricardo-Rodriguez:~ rrodriguez$ ldapsearch -H ldap://peat.environmentalchange.net:389 -x -D "cn=admin,o=EPECNetwork" -W -b "o=EPECNetwork" -s one -a always -z 1000 "(objectClass=*)" "subordinateCount" "objectClass" | grep "Dummy" Enter LDAP Password: # DummyDummy, EPECNetwork dn: cn=DummyDummy,o=EPECNetwork GMXUX-Ricardo-Rodriguez:~ rrodriguez$

Please, any idea? Please, where am I wrong? Thanks for your help!!!

Groups are cached for performance purpose. See xwiki.authentication.ldap.groupcache_expiration property.

Ricardo

-- Ricardo Rodríguez CTO eBioTIC. Life Sciences, Data Modeling and Information Management Systems

_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne

On Fri, Sep 10, 2010 at 11:00, [Ricardo Rodriguez] eBioTIC. <[email protected]> wrote:

Thanks! S...! Sorry for not being able to see that.

Thomas Mortagne wrote:

...

Groups are cached for performance purpose. See xwiki.authentication.ldap.groupcache_expiration property.

Thinking about stupid people like I... don't you think that any debug message about groups being cached could be added here:

2010-09-10 01:09:41,852 [http://peat.environmentalchange.net:8080/xwiki/bin/loginsubmit/XWiki/XWikiLo...] DEBUG LDAP.XWikiLDAPAuthServiceImpl   - Checking if the user belongs to the user group: cn=xwikiEBioTIC,o=EPECNetwork 2010-09-10 01:09:41,853 [http://peat.environmentalchange.net:8080/xwiki/bin/loginsubmit/XWiki/XWikiLo...] DEBUG ldap.XWikiLDAPUtils             - Found group [cn=xwikiEBioTIC,o=EPECNetwork] members :{cn=mariajesussobrido,o=epecnetwork=mariajesussobrido, cn=pilarcacheiro,o=epecnetwork=pilarcacheiro, cn=jorgeamigolechuga,o=epecnetwork=jorgeamigolechuga, cn=hugogutierrezdeteran,o=epecnetwork=hugogutierrezdeteran, cn=ricardorodriguezfernandez,o=epecnetwork=ricardorodriguezfernandez, cn=antoniomartinezcortizas,o=epecnetwork=antoniomartinezcortizas, cn=beatrizquintans,o=epecnetwork=beatrizquintans} 2010-09-10 01:09:41,853 [http://peat.environmentalchange.net:8080/xwiki/bin/loginsubmit/XWiki/XWikiLo...] DEBUG ldap.XWikiLDAPUtils             - Found user dn in user group:null

Debug messages seems to say that the members of the group are retrieved from the binded connection to the LDAP server.

What do you think?

Sure, good idea, I'm doing it now.

Thanks!

Ricardo

-- Ricardo Rodríguez CTO eBioTIC. Life Sciences, Data Modeling and Information Management Systems

_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne