On November 16, 2007 6:37 AM, <pgardella(a)gmail.com> wrote:
On Nov 16, 2007 1:51 AM, <pentaho(a)fsck.ch>
wrote:
> > What is wrong? Does the user need to have an account on the
system
> > before LDAP will work? How do I get it to
not add the user to the
> > XWikiAllGroup three times on each login?
>
> This is weird. I have the same setup and my config looks similar.
Users
> get created and added to XWikiAllGroup
automatically.
>
> The following things come to mind:
>
> - Make really sure the user doesn't exist already, e.g. from
previous
login attempt,
or from forgotten cookies
- What format do your sAMAccountNAmes have? I heard that names with
dots
> or @ signs can cause problems.
> - Are there any users at all created, maybe with the wrong
username?
Thanks for responding.
I made sure that the user didn't exist. When I first ran into this
problem (when I turned the LDAP authentication on), I had someone who
had never been on the system log in. They got the errors mentioned in
the original email. After some debugging, I decided to delete the
Derby database for the wiki, essentially starting over. I removed all
the cookies from my system, then logged in as superadmin and imported
the XAR to recreate the wiki and tried to login. I got the errors
mentioned.
There are two users listed in the user page: admin and pgardell (the
one with problems). The group XWikiAllGroup has four entries,
administrator and my name three times.
Looking at the xwiki.log I see that all the entires are repeated three
times, starting with "LDAP Password check for user pgardell" and
ending with "Accept user even without account"
sAMAccountName is the same as our old windows login. 8 characters
(a-z) In the case here, "pgardell"
Ideas anyone?
Patrick
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
I can confirm that I had this same symptom when I was trying to use
LDAP. I didn't bother to check debug logs, but users with LDAP accounts
could not log in until I explicitly added their user name to the
XWikiAllGroup. I had assumed this was due to turning up the Access
control such that a Guest user did not have permission to do anything
but login. But I was too busy to investigate further.
Unfortunately, for the time being, I've been forced to give up on LDAP
authentication. I'm now manually registering users.