Further to this - I seem to be having trouble displaying using the
docviewer macro as well! It seems to insert just fine, but there is no
output.
Paul Pinkerton
KnowledgeNow Project Lead
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of
users-request(a)xwiki.org
Sent: January-07-14 1:11 PM
To: users(a)xwiki.org
Subject: users Digest, Vol 78, Issue 9
Send users mailing list submissions to
users(a)xwiki.org
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.xwiki.org/mailman/listinfo/users
or, via email, send a message with subject or body 'help' to
users-request(a)xwiki.org
You can reach the person managing the list at
users-owner(a)xwiki.org
When replying, please edit your Subject line so it is more specific than
"Re: Contents of users digest..."
Today's Topics:
1. Re: subwiki ldap authentication (Kelly Steinke)
2. Re: subwiki ldap authentication (Thomas Mortagne)
3. display external webpage in xwiki page (Paul Pinkerton (ACLCO))
4. Re: display external webpage in xwiki page (Thomas Mortagne)
5. Re: [xwiki-devs] [ANN] Welcome our new committer Clemens
Robbenhaar (Eduard Moraru)
----------------------------------------------------------------------
Message: 1
Date: Tue, 7 Jan 2014 09:15:49 -0700 (MST)
From: Kelly Steinke <ksteinke(a)steel-craft.ca>
To: XWiki Users <users(a)xwiki.org>
Subject: Re: [xwiki-users] subwiki ldap authentication
Message-ID: <31648105.233.1389111376992.JavaMail.ksteinke@EDM-DEV03>
Content-Type: text/plain; charset=utf-8
Thanks for your quick response Thomas, I was under the impression that
if I chose to set up the subwiki with the option of "Only local users
are available in the wiki" and then change the base_DN to define where
those local users should be authenticated from, that the subwiki could
be used as a totally separate instance where users could go straight to
the login of the subwiki instead of "requesting to join" from the main
wiki.
With your explanation I see that this is not possible, so I will have to
rethink my strategy. Perhaps by changing permissions on the main wiki
spaces so that the users of my subwiki do not see anything on the main
wiki but give them the ability to request to join the subwiki. I tried
this originally but was running into to many problems, as the request
functionality was failing due to them not being able to send
notifications with limited permissions.
If I have some time perhaps I will look into creating a new patch as you
have suggested.
----- Original Message -----
From: "Thomas Mortagne" <thomas.mortagne(a)xwiki.com>
To: "XWiki Users" <users(a)xwiki.org>
Sent: Tuesday, January 7, 2014 8:36:00 AM
Subject: Re: [xwiki-users] subwiki ldap authentication
This is actually a general XWiki behavior: first try to auth on the
current wiki and then on the main wiki and it's true for the LDAP auth
too. Note that this user is supposed to really have been authenticated
and created on main wiki, you should not have a new XWiki user on your
subwiki so you should have the behavior if you log on main wiki and then
go to subwiki (the session keeping the user from main wiki).
You could create a new feature issue on
http://jira.xwiki.org for a new
parameter controlling if the LDAP auth should fallback on main wiki or
not for example (like we have an option to control the fallback on
standard auth) and even better provide a patch if you have some Java
experience (it should not be very hard to do, I can help you look at the
right place if you plan to look at it).
On Tue, Jan 7, 2014 at 4:25 PM, Kelly Steinke <ksteinke(a)steel-craft.ca>
wrote:
I have performed the following steps:
* Installed the LDAP Admin Application on the subwiki.
* Changed the LDAP BASE_DN to point to a different location than the
main wiki . (
OU=Accounting,OU=myBranch,OU=All
Users,DC=mycompanyt,DC=com ) as opposed to ( OU=All
Users,DC=mycompanyt,DC=com) on the main.
* Created a new group in my AD called
"maintenance_wiki" that has a
membership of users that I wish to
authenticate against (as there is the
odd user that I want to authenticate that will not reside in the
OU=Accounting,OU=myBranch,OU=All Users,DC=mycompanyt,DC=com branch).
* Changed the "Restricted To Group" setting
in the LDAP application to
point to my new maintenance_wiki group.
* Restarted the tomcat services.
After turning LDAP logging on and performing some tests it appears
that If I log on
with a user that does not exist in the
"maintenance_wiki" group it will next try to authenticate using the Main
Wiki's search DN as opposed to the more granular one that I have defined
in the Subwiki. So instead of getting an "Invalid Credentials" message,
which I was hoping for, it instead creates the user in the main wiki and
lets the user into the subwiki with the message "ERROR you are not
allowed to view this document or perform this action".
What I was hoping would happen is that the subwiki would only
authenticate users
from the search DN defined in the subwiki or that
belong in the group that I defined, and not create accounts for users
that exist in the main wiki's search DN. Is this possible?
Kelly Steinke
Software Developer/System Support
STEEL-CRAFT DOOR PRODUCTS LTD.
13504 St. Albert Trail
Edmonton, AB T5L 4P4
Bus: 780.453.3761 ext.3310
Fax: 780.454.1584
Toll Free: 1.800.463.3667
www.steel-craft.ca
Information contained in this communication may be confidential and is
intended
only for the use of the individual(s) named above. If you are
not the named addressee you should not disseminate, distribute or copy
this e-mail. If you have received this e-mail in error please notify the
sender.
----- Original Message -----
From: "Thomas Mortagne" <thomas.mortagne(a)xwiki.com>
To: "XWiki Users" <users(a)xwiki.org>
Sent: Tuesday, December 31, 2013 12:27:47 AM
Subject: Re: [xwiki-users] subwiki ldap authentication
Yes you have only one xwiki.cfg which contains the default
configuration for each wiki but "You can also setup the LDAP
configuration in the XWiki.XWikiPreferences page by going to the
object editor. Simply replace xwiki.authentication.ldap. with ldap_.
For example xwiki.authentication.ldap.base_DN becomes ldap_base_DN."
You can install
http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP+Application
which is doing exactly that (modifying XWikiPreferences page) in the
wikis you want to modify.
On Tue, Dec 31, 2013 at 12:52 AM, Kelly Steinke
<ksteinke(a)steel-craft.ca>
wrote:
> Hi all,
>
> I just recently upgraded to 5.3 and have now created a sub wiki for
the first
time. My main wiki is configured to authenticate using LDAP
and has a base search DN set to an OU called "AllUsers". In Active
Directory the AllUsers OU contains several sub OU's which separate users
according to branch, department ect. Having the LDAP set up to search
the AllUsers OU allows for anyone in our company to use the main wiki by
logging in with their network credentials and works great.
>
> When I created the sub wiki, I went through the wizard and selected
to only
have local users be available in it, as this sub wiki is to be
used and administrated by a specific department only. What I would like
to achieve now is to have the users of the sub wiki be authenticated
using a different search base than that of the main wiki (aka the OU
that contains only users for that department).
>
> So instead of using the following, which is defined in the xwiki.cfg:
>
> xwiki.authentication.ldap.base_DN=OU=All Users,DC=mycompanyt,DC=com
>
> The sub wiki would use this for authentication:
>
> xwiki.authentication.ldap.base_DN=OU=Accounting,OU=myBranch,OU=All
> Users,DC=mycompanyt,DC=com
>
> I read in the documentation " Use cases of configuration to
authenticate
users with LDAP " that each wiki in a multiwiki environment
can have its own LDAP configuration, however I am unable to determine
how to do this, as there is only one xwiki.cfg file that contains my
LDAP configuration and there is no mention of any LDAP settings in the
xwiki.preferences page of the sub wiki.
any help is greatly appreciated!
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
------------------------------
Message: 2
Date: Tue, 7 Jan 2014 17:35:32 +0100
From: Thomas Mortagne <thomas.mortagne(a)xwiki.com>
To: XWiki Users <users(a)xwiki.org>
Subject: Re: [xwiki-users] subwiki ldap authentication
Message-ID:
<CAPnKnLF_4NYL7_htHYO7cF8vz6b=CR09Os4X3C3oWCA1ykOoeQ(a)mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Actually "Only local users are available in the wiki" is something new
in 5.3 and not everything take it into account, LDAP authenticator is
one of them. You might want to add your use case to
http://jira.xwiki.org/browse/XWIKI-9856 and watch the issue.
On Tue, Jan 7, 2014 at 5:15 PM, Kelly Steinke <ksteinke(a)steel-craft.ca>
wrote:
Thanks for your quick response Thomas, I was under the
impression that
if I chose to set up the subwiki with the option of "Only local
users
are available in the wiki" and then change the base_DN to define where
those local users should be authenticated from, that the subwiki could
be used as a totally separate instance where users could go straight to
the login of the subwiki instead of "requesting to join" from the main
wiki.
With your explanation I see that this is not possible, so I will have
to rethink my
strategy. Perhaps by changing permissions on the main wiki
spaces so that the users of my subwiki do not see anything on the main
wiki but give them the ability to request to join the subwiki. I tried
this originally but was running into to many problems, as the request
functionality was failing due to them not being able to send
notifications with limited permissions.
If I have some time perhaps I will look into creating a new patch as
you have
suggested.
----- Original Message -----
From: "Thomas Mortagne" <thomas.mortagne(a)xwiki.com>
To: "XWiki Users" <users(a)xwiki.org>
Sent: Tuesday, January 7, 2014 8:36:00 AM
Subject: Re: [xwiki-users] subwiki ldap authentication
This is actually a general XWiki behavior: first try to auth on the
current wiki and then on the main wiki and it's true for the LDAP auth
too. Note that this user is supposed to really have
been authenticated
and created on main wiki, you should not have a new
XWiki user on your
subwiki so you should have the behavior if you log on
main wiki and
then go to subwiki (the session keeping the user from main wiki).
You could create a new feature issue on
http://jira.xwiki.org for a
new parameter controlling if the LDAP auth should fallback on main
wiki or not for example (like we have an option to control the
fallback on standard auth) and even better provide a patch if you have
some Java experience (it should not be very hard to
do, I can help you
look at the right place if you plan to look at it).
On Tue, Jan 7, 2014 at 4:25 PM, Kelly Steinke
<ksteinke(a)steel-craft.ca>
wrote:
> I have performed the following steps:
>
> * Installed the LDAP Admin Application on the subwiki.
> * Changed the LDAP BASE_DN to point to a different location than the
main wiki
. ( OU=Accounting,OU=myBranch,OU=All
Users,DC=mycompanyt,DC=com ) as opposed to ( OU=All
Users,DC=mycompanyt,DC=com) on the main.
>
* Created a new group in my AD called
"maintenance_wiki" that has a
membership of users that I wish to
authenticate against (as there is the
odd user that I want to authenticate that will not reside in the
OU=Accounting,OU=myBranch,OU=All Users,DC=mycompanyt,DC=com branch).
> * Changed the "Restricted To Group"
setting in the LDAP application
to point to my new maintenance_wiki group.
> * Restarted the tomcat services.
>
> After turning LDAP logging on and performing some tests it appears
that If I
log on with a user that does not exist in the
"maintenance_wiki" group it will next try to authenticate using the Main
Wiki's search DN as opposed to the more granular one that I have defined
in the Subwiki. So instead of getting an "Invalid Credentials" message,
which I was hoping for, it instead creates the user in the main wiki and
lets the user into the subwiki with the message "ERROR you are not
allowed to view this document or perform this action".
>
> What I was hoping would happen is that the subwiki would only
authenticate
users from the search DN defined in the subwiki or that
belong in the group that I defined, and not create accounts for users
that exist in the main wiki's search DN. Is this possible?
>
>
> Kelly Steinke
> Software Developer/System Support
> STEEL-CRAFT DOOR PRODUCTS LTD.
>
> 13504 St. Albert Trail
> Edmonton, AB T5L 4P4
> Bus: 780.453.3761 ext.3310
> Fax: 780.454.1584
> Toll Free: 1.800.463.3667
>
>
www.steel-craft.ca
>
> Information contained in this communication may be confidential and
is intended
only for the use of the individual(s) named above. If you
are not the named addressee you should not disseminate, distribute or
copy this e-mail. If you have received this e-mail in error please
notify the sender.
> ----- Original Message -----
>
> From: "Thomas Mortagne" <thomas.mortagne(a)xwiki.com>
> To: "XWiki Users" <users(a)xwiki.org>
> Sent: Tuesday, December 31, 2013 12:27:47 AM
> Subject: Re: [xwiki-users] subwiki ldap authentication
>
> Yes you have only one xwiki.cfg which contains the default
> configuration for each wiki but "You can also setup the LDAP
> configuration in the XWiki.XWikiPreferences page by going to the
> object editor. Simply replace xwiki.authentication.ldap. with ldap_.
> For example xwiki.authentication.ldap.base_DN becomes ldap_base_DN."
>
> You can install
>
http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP+Application
> which is doing exactly that (modifying XWikiPreferences page) in the
> wikis you want to modify.
>
> On Tue, Dec 31, 2013 at 12:52 AM, Kelly Steinke
<ksteinke(a)steel-craft.ca>
wrote:
>> Hi all,
>>
>> I just recently upgraded to 5.3 and have now created a sub wiki for
the
first time. My main wiki is configured to authenticate using LDAP
and has a base search DN set to an OU called "AllUsers". In Active
Directory the AllUsers OU contains several sub OU's which separate users
according to branch, department ect. Having the LDAP set up to search
the AllUsers OU allows for anyone in our company to use the main wiki by
logging in with their network credentials and works great.
>>
>> When I created the sub wiki, I went through the wizard and selected
to only
have local users be available in it, as this sub wiki is to be
used and administrated by a specific department only. What I would like
to achieve now is to have the users of the sub wiki be authenticated
using a different search base than that of the main wiki (aka the OU
that contains only users for that department).
>>
>> So instead of using the following, which is defined in the
xwiki.cfg:
>>
>> xwiki.authentication.ldap.base_DN=OU=All Users,DC=mycompanyt,DC=com
>>
>> The sub wiki would use this for authentication:
>>
>> xwiki.authentication.ldap.base_DN=OU=Accounting,OU=myBranch,OU=All
>> Users,DC=mycompanyt,DC=com
>>
>> I read in the documentation " Use cases of configuration to
authenticate users with LDAP " that each wiki in a multiwiki environment
can have its own LDAP configuration, however I am unable to determine
how to do this, as there is only one xwiki.cfg file that contains my
LDAP configuration and there is no mention of any LDAP settings in the
xwiki.preferences page of the sub wiki.
any help is greatly appreciated!
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
------------------------------
Message: 3
Date: Tue, 7 Jan 2014 11:45:18 -0500
From: "Paul Pinkerton (ACLCO)" <pinkerp(a)lao.on.ca>
To: <users(a)xwiki.org>
Subject: [xwiki-users] display external webpage in xwiki page
Message-ID: <5ADF7493B6AD244BB1AA71BC4034DA3A09AF44AB(a)ontario.lao.res>
Content-Type: text/plain; charset="us-ascii"
I want to display an external webpage in a wiki page. I have tried a
variety of methods including html using both iframe and embed. I cannot
seem to get the page to display. Ideas?
Paul Pinkerton
KnowledgeNow Project Lead
pinkerp(a)lao.on.ca <mailto:pinkerp@lao.on.ca>
Association of Community Legal Clinics of Ontario
416-847-1418 or 1-866-965-1416x 5177
www.aclco.org <http://www.aclco.org>
------------------------------
Message: 4
Date: Tue, 7 Jan 2014 17:48:41 +0100
From: Thomas Mortagne <thomas.mortagne(a)xwiki.com>
To: XWiki Users <users(a)xwiki.org>
Subject: Re: [xwiki-users] display external webpage in xwiki page
Message-ID:
<CAPnKnLGdC3n6AvUNoiykQn=CYhBP24WBa38u7+4uZsdfPse0eg(a)mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
iframe seems to work well for me, see
http://tuska.myxwiki.org/xwiki/bin/view/Test/Iframe (and
http://tuska.myxwiki.org/xwiki/bin/view/Test/Iframe?viewer=code).
On Tue, Jan 7, 2014 at 5:45 PM, Paul Pinkerton (ACLCO)
<pinkerp(a)lao.on.ca> wrote:
I want to display an external webpage in a wiki page.
I have tried a
variety of methods including html using both iframe and embed. I
cannot
seem to get the page to display. Ideas?
Paul Pinkerton
KnowledgeNow Project Lead
pinkerp(a)lao.on.ca <mailto:pinkerp@lao.on.ca>
Association of Community Legal Clinics of Ontario
416-847-1418 or 1-866-965-1416x 5177
www.aclco.org <http://www.aclco.org>
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
------------------------------
Message: 5
Date: Tue, 7 Jan 2014 20:10:22 +0200
From: Eduard Moraru <enygma2002(a)gmail.com>
To: XWiki Users <users(a)xwiki.org>
Subject: Re: [xwiki-users] [xwiki-devs] [ANN] Welcome our new
committer Clemens Robbenhaar
Message-ID:
<CADGDyY+u4VS82QU0_pJwZKBVG7hGZUBuVqF8aGOiuxZLWH3sqQ(a)mail.gmail.com>
Content-Type: text/plain; charset=UTF-8
Congrats Clemens!
-Eduard
On Tue, Jan 7, 2014 at 2:11 PM, Clemens Klein-Robbenhaar <
c.robbenhaar(a)espresto.com> wrote:
Hi Thomas and all the others,
thanks for the welcome :)
Actually I have been watching the development of XWiki since somewhat
1.6
(or so I think, it got a bit lost in the mists of my
memory),
but never got around to contribute until recently; so I am happy
that after much procrastinating I finally managed to start
contributing.
Thanks for the XWiki developer team to accept me into the team!
Cheers,
Clemens
> Hi xwikiers,
>
> The committers discussed and voted to include Clemens Robbenhaar in
> the team which he agreed so a warm welcome to him !
>
> He has been very active since he started working on XWiki, he
already
> spend a lot of time answering questions on the
mailing list and on
IRC
> (more than me I think).
>
> On the technical aspect everything I saw from him was good and very
> clean and he is clearly no afraid to look at advanced stuff (he
spent
> a long time last month trying to help Kaisen and
Denis on migration
> stuff which I'm
> sure was not that critically related to his own work).
>
> Note that he is working on XWiki for EsPresto AG (don't forget to
add
> it to
http://main.xwiki.org/xwiki/bin/view/Main/Support).
>
> I'm sure he will be great addition to the team and it's always a
nice
bonus
to see non XWiki SAS members so active ;)
Welcome !
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
------------------------------
Subject: Digest Footer
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
------------------------------
End of users Digest, Vol 78, Issue 9
************************************