Il giorno 09.01.2013, alle ore 09:59, StefanS <sabolowitschst(a)in-trier.de> ha
scritto:
Hi all,
need help with ldap plugin and MS AD.
Has anyone already successfully worked with ldap-plugin?
When i login, i get always wrong user / password, but i think that the
parameters are correct.
Does anyone have a screenshot / sample that works with LD MS-AD?
And is there a logfile where you can see the login errors (more details).
thanks for any help.
Stefan
Servus Stefan,
we're using AD without a hitch.
Assuming you're using xwiki > 3.1 you get a trace by adding
<logger name="com.xpn.xwiki.plugin.ldap" level="trace"/>
<logger name="com.xpn.xwiki.user.impl.LDAP" level="trace"/>
to
xwiki/WEB-INF/classes/logback.xml
The trace is shown in catalina.out (have a look at
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Logging)
Our conf (see
https://network.xwiki.com/xwiki/bin/view/DocXE34En/LDAPAuthentication#HConf…
to translate between GUI and cfg parameter naming):
xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl
xwiki.authentication.ldap=1
xwiki.authentication.ldap.server=dc2.local.kesslernetworks.de
xwiki.authentication.ldap.port=389
xwiki.authentication.ldap.bind_DN=KESSLER\\{0}
xwiki.authentication.ldap.bind_pass={1}
xwiki.authentication.ldap.base_DN=DC=local,DC=kesslernetworks,DC=de
xwiki.authentication.ldap.UID_attr=sAMAccountName
xwiki.authentication.ldap.fields_mapping=name=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,email=mail,ldap_dn=dn
xwiki.authentication.ldap.update_user=1
xwiki.authentication.ldap.group_mapping=\
XWiki.XWikiAdminGroup=CN=xwikiadmin,OU=Groups,OU=RaistingOU,DC=local,DC=kesslernetworks,DC=de|\
XWiki.Organisation=CN=staff,OU=Groups,OU=RaistingOU,DC=local,DC=kesslernetworks,DC=de|\
XWiki.XWikiGF=CN=gf,OU=Groups,OU=RaistingOU,DC=local,DC=kesslernetworks,DC=de
Florian