I have an existing instance of xwiki with some users and would like to convert it to authenticate against an Active Directory server. I tried setting up a new test instance of xwiki in a VM and was able to get it to authenticate against AD. But in the test, the user directory was empty (except for Admin) - so it created a new user at login. I'd appreciate some help on the next step of configuring the system so that an existing xwiki user authenticates against an existing AD entry. I configured the test system as follows: xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl xwiki.authentication.ldap=1 xwiki.authentication.ldap.server=servername xwiki.authentication.ldap.port=389 xwiki.authentication.ldap.bind_DN=subdomain\\{0} xwiki.authentication.ldap.bind_pass={1} xwiki.authentication.ldap.base_DN=DC=subdomain,DC=domain xwiki.authentication.ldap.UID_attr=sAMAccountName xwiki.authentication.ldap.group_classes=group,groupOfNames,groupOfUniqueNames,dynamicGroup,dynamicGroupAux,groupWiseDistributionList xwiki.authentication.ldap.fields_mapping=name=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,email=mail,ldap_dn=dn xwiki.authentication.ldap.update_user=1 xwiki.authentication.ldap.trylocal=0 Other details that may or may not be relevant: - the AD login IDs contain periods which are not allowed in the xwiki names. For the xwiki users that already exist, the login names are the same as those in AD except that the period is replaced by an underscore - there are xwiki 'users' with no corresponding entry in AD. Those xwiki entries should not be allowed to login. - the exception to the above point is the Admin user. If I add one of the users with a corresponding AD entry to the Admin group, would that user be able to do everything that the Admin user can do? A nice to have would be to also bring the AD groupings/organizational units across to xwiki. Is their an easy way to do this? -- View this message in context: http://xwiki.475771.n2.nabble.com/Convert-existing-xwiki-instance-to-Active… Sent from the XWiki- Users mailing list archive at Nabble.com.