[xwiki-users] Multiple LDAP backends?
Hello everyone, We have XWiki set up to authenticate users against our Active Directory using XWiki's LDAP lookup feature. It works beautifully for our main office. However, we have several other offices, and they would like to use XWiki as well. The problem is that these users are in different domains, and use different AD domain controllers, which means we have to query those LDAP backends separately. It looks to me like XWiki only supports querying of one domain controller at a time. As a workaround until a more permanent solution can be found, I am creating local user accounts on XWiki for these people and allowing fallback authentication against the local database. Of course, this setup will be problematic in the future with regard to password policy, so I'd really like to get LDAP functional for them as well. Any suggestions? Thanks-- we're really liking XWiki here. Dan
I'd also be interested in such a feature so we could fall back to our backup LDAP server (actually, Active Directory). Regards, Brian. ----------------------------------------- CONFIDENTIALITY STATEMENT: This e-mail transmission contains information that is intended to be confidential. It is intended only for the addressee named above. If you receive this e-mail in error, please do not read, copy, or disseminate it. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated.
Hi, First thing to do is to vote for http://jira.xwiki.org/jira/browse/XWIKI-2577 (which looks like what you are asking for I think) to make it more important ;) For now nobody from core developers team has time to work on it but patches and suggestion are very welcome. On Thu, Dec 18, 2008 at 4:36 PM, <[email protected]> wrote:
I'd also be interested in such a feature so we could fall back to our backup LDAP server (actually, Active Directory).
Regards, Brian.
----------------------------------------- CONFIDENTIALITY STATEMENT: This e-mail transmission contains information that is intended to be confidential. It is intended only for the addressee named above. If you receive this e-mail in error, please do not read, copy, or disseminate it. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
Thanks, -- Thomas Mortagne
Hi. We had the same requirement in our company. I ended up extending LDAPAuthServiceImpl to sequentially checking against the AD servers in the list. It also required extending xwiki configuration to pass a list of AD servers and DN's etc - instead of a single AD. That is probably a quick and dirty way to go. Now, all our groups are created in Wiki itself. I am not using AD groups to map to Wiki groups. So, it was not as much complicated. HTH, Srini Pulugurtha On Thu, Dec 18, 2008 at 12:45 PM, Thomas Mortagne <[email protected]
wrote:
Hi,
First thing to do is to vote for http://jira.xwiki.org/jira/browse/XWIKI-2577 (which looks like what you are asking for I think) to make it more important ;)
For now nobody from core developers team has time to work on it but patches and suggestion are very welcome.
On Thu, Dec 18, 2008 at 4:36 PM, <[email protected]> wrote:
I'd also be interested in such a feature so we could fall back to our backup LDAP server (actually, Active Directory).
Regards, Brian.
----------------------------------------- CONFIDENTIALITY STATEMENT: This e-mail transmission contains information that is intended to be confidential. It is intended only for the addressee named above. If you receive this e-mail in error, please do not read, copy, or disseminate it. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
Thanks, -- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
participants (4)
-
BSayatovicļ¼ amig.com -
Daniel Barowy -
Srinivasa Pulugurtha -
Thomas Mortagne