[xwiki-users] Deny LDAP user auto creation
Hi everyone! I have just tried this fantastic wiki using the Windows EXE (v4.5) and I have to say I'm impressed. LDAP config just works out of the box and as stated in the config page: *Ldap **Enable or not LDAP authentication for this wiki. If enabled and configured properly, a local user will be created whenever a LDAP user visit this wiki for the first time.* What I really need is to manually disable local user creation from LDAP. I don't want anybody in the company to create a new user ;) I know I can restrict by LDAP groups but almost all users are in the same cn (I'm not the one who made it!). Do anyone has found a workaround for this? I haven't found any "disable ldap user creation" option. Thanks in advance!
Unfortunately this does not really make sense from XWiki point of view right now. XWiki right management (as well as most applications woring with users) can only work with existing XWiki users (except for a few special cases like XWikiGuest and superadmin) and the first thing we expect from a XWiki authenticator is actually to make sure to associate the user with an existing XWiki user. On Fri, Feb 22, 2013 at 11:13 PM, Jaume Giribert Peraire <[email protected]> wrote:
Hi everyone!
I have just tried this fantastic wiki using the Windows EXE (v4.5) and I have to say I'm impressed.
LDAP config just works out of the box and as stated in the config page:
*Ldap **Enable or not LDAP authentication for this wiki. If enabled and configured properly, a local user will be created whenever a LDAP user visit this wiki for the first time.*
What I really need is to manually disable local user creation from LDAP. I don't want anybody in the company to create a new user ;)
I know I can restrict by LDAP groups but almost all users are in the same cn (I'm not the one who made it!).
Do anyone has found a workaround for this? I haven't found any "disable ldap user creation" option.
Thanks in advance! _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
Hi Thomas, It does make sense if you have a separate synchronisation system that creates the users and groups. I have that case and what I did is override the LDAP authenticator and block the auto-creation, which is just commenting a few lines. This requires a bit of Java coding. Ludovic 2013/2/25 Thomas Mortagne <[email protected]>
Unfortunately this does not really make sense from XWiki point of view right now.
XWiki right management (as well as most applications woring with users) can only work with existing XWiki users (except for a few special cases like XWikiGuest and superadmin) and the first thing we expect from a XWiki authenticator is actually to make sure to associate the user with an existing XWiki user.
On Fri, Feb 22, 2013 at 11:13 PM, Jaume Giribert Peraire <[email protected]> wrote:
Hi everyone!
I have just tried this fantastic wiki using the Windows EXE (v4.5) and I have to say I'm impressed.
LDAP config just works out of the box and as stated in the config page:
*Ldap **Enable or not LDAP authentication for this wiki. If enabled and configured properly, a local user will be created whenever a LDAP user visit this wiki for the first time.*
What I really need is to manually disable local user creation from LDAP. I don't want anybody in the company to create a new user ;)
I know I can restrict by LDAP groups but almost all users are in the same cn (I'm not the one who made it!).
Do anyone has found a workaround for this? I haven't found any "disable ldap user creation" option.
Thanks in advance! _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Ludovic Dubost Founder and CEO Blog: http://blog.ludovic.org/ XWiki: http://www.xwiki.com Skype: ldubost GTalk: ldubost
I'm not talking about a user not created by the authenticator but about a user not created at all. XWiki cannot work with a user that does not exists, if the need is to forbid user that don't already have an associated XWiki user that's another thing but it's not how I understood the first mail. On Mon, Feb 25, 2013 at 1:55 PM, Ludovic Dubost <[email protected]> wrote:
Hi Thomas,
It does make sense if you have a separate synchronisation system that creates the users and groups. I have that case and what I did is override the LDAP authenticator and block the auto-creation, which is just commenting a few lines.
This requires a bit of Java coding.
Ludovic
2013/2/25 Thomas Mortagne <[email protected]>
Unfortunately this does not really make sense from XWiki point of view right now.
XWiki right management (as well as most applications woring with users) can only work with existing XWiki users (except for a few special cases like XWikiGuest and superadmin) and the first thing we expect from a XWiki authenticator is actually to make sure to associate the user with an existing XWiki user.
On Fri, Feb 22, 2013 at 11:13 PM, Jaume Giribert Peraire <[email protected]> wrote:
Hi everyone!
I have just tried this fantastic wiki using the Windows EXE (v4.5) and I have to say I'm impressed.
LDAP config just works out of the box and as stated in the config page:
*Ldap **Enable or not LDAP authentication for this wiki. If enabled and configured properly, a local user will be created whenever a LDAP user visit this wiki for the first time.*
What I really need is to manually disable local user creation from LDAP. I don't want anybody in the company to create a new user ;)
I know I can restrict by LDAP groups but almost all users are in the same cn (I'm not the one who made it!).
Do anyone has found a workaround for this? I haven't found any "disable ldap user creation" option.
Thanks in advance! _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Ludovic Dubost Founder and CEO Blog: http://blog.ludovic.org/ XWiki: http://www.xwiki.com Skype: ldubost GTalk: ldubost _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
participants (3)
-
Jaume Giribert Peraire -
Ludovic Dubost -
Thomas Mortagne