Re: [xwiki-users] display external webpage in xwiki page (Paul Pinkerton (ACLCO))

7 Jan 2014

      Further to this - I seem to be having trouble displaying using the
docviewer macro as well!  It seems to insert just fine, but there is no
output.

Paul Pinkerton
KnowledgeNow Project Lead
-----Original Message-----
From: users [mailto:[email protected]] On Behalf Of
[email protected]
Sent: January-07-14 1:11 PM
To: [email protected]
Subject: users Digest, Vol 78, Issue 9

Send users mailing list submissions to
	[email protected]

To subscribe or unsubscribe via the World Wide Web, visit
	http://lists.xwiki.org/mailman/listinfo/users
or, via email, send a message with subject or body 'help' to
	[email protected]

You can reach the person managing the list at
	[email protected]

When replying, please edit your Subject line so it is more specific than
"Re: Contents of users digest..."

Today's Topics:

   1. Re: subwiki ldap authentication (Kelly Steinke)
   2. Re: subwiki ldap authentication (Thomas Mortagne)
   3. display external webpage in xwiki page (Paul Pinkerton  (ACLCO))
   4. Re: display external webpage in xwiki page (Thomas Mortagne)
   5. Re: [xwiki-devs] [ANN] Welcome our new committer Clemens
      Robbenhaar (Eduard Moraru)

----------------------------------------------------------------------

Message: 1
Date: Tue, 7 Jan 2014 09:15:49 -0700 (MST)
From: Kelly Steinke <[email protected]>
To: XWiki Users <[email protected]>
Subject: Re: [xwiki-users] subwiki ldap authentication
Message-ID: <31648105.233.1389111376992.JavaMail.ksteinke@EDM-DEV03>
Content-Type: text/plain; charset=utf-8

Thanks for your quick response Thomas, I was under the impression that
if I chose to set up the subwiki with the option of "Only local users
are available in the wiki" and then change the base_DN to define where
those local users should be authenticated from, that the subwiki could
be used as a totally separate instance where users could go straight to
the login of the subwiki instead of "requesting to join" from the main
wiki. 

With your explanation I see that this is not possible, so I will have to
rethink my strategy. Perhaps by changing permissions on the main wiki
spaces so that the users of my subwiki do not see anything on the main
wiki but give them the ability to request to join the subwiki. I tried
this originally but was running into to many problems, as the request
functionality was failing due to them not being able to send
notifications with limited permissions. 

If I have some time perhaps I will look into creating a new patch as you
have suggested. 

----- Original Message -----

From: "Thomas Mortagne" <[email protected]>
To: "XWiki Users" <[email protected]>
Sent: Tuesday, January 7, 2014 8:36:00 AM
Subject: Re: [xwiki-users] subwiki ldap authentication 

This is actually a general XWiki behavior: first try to auth on the
current wiki and then on the main wiki and it's true for the LDAP auth
too. Note that this user is supposed to really have been authenticated
and created on main wiki, you should not have a new XWiki user on your
subwiki so you should have the behavior if you log on main wiki and then
go to subwiki (the session keeping the user from main wiki). 

You could create a new feature issue on http://jira.xwiki.org for a new
parameter controlling if the LDAP auth should fallback on main wiki or
not for example (like we have an option to control the fallback on
standard auth) and even better provide a patch if you have some Java
experience (it should not be very hard to do, I can help you look at the
right place if you plan to look at it). 

On Tue, Jan 7, 2014 at 4:25 PM, Kelly Steinke <[email protected]>
wrote:
...
I have performed the following steps:
* Installed the LDAP Admin Application on the subwiki. 
* Changed the LDAP BASE_DN to point to a different location than the
main wiki . ( OU=Accounting,OU=myBranch,OU=All
Users,DC=mycompanyt,DC=com ) as opposed to ( OU=All
Users,DC=mycompanyt,DC=com) on the main. 
* Created a new group in my AD called "maintenance_wiki" that has a
membership of users that I wish to authenticate against (as there is the
odd user that I want to authenticate that will not reside in the
OU=Accounting,OU=myBranch,OU=All Users,DC=mycompanyt,DC=com branch). 
* Changed the "Restricted To Group" setting in the LDAP application to
point to my new maintenance_wiki group. 
* Restarted the tomcat services.
After turning LDAP logging on and performing some tests it appears
that If I log on with a user that does not exist in the
"maintenance_wiki" group it will next try to authenticate using the Main
Wiki's search DN as opposed to the more granular one that I have defined
in the Subwiki. So instead of getting an "Invalid Credentials" message,
which I was hoping for, it instead creates the user in the main wiki and
lets the user into the subwiki with the message "ERROR you are not
allowed to view this document or perform this action".
What I was hoping would happen is that the subwiki would only
authenticate users from the search DN defined in the subwiki or that
belong in the group that I defined, and not create accounts for users
that exist in the main wiki's search DN. Is this possible?
Kelly Steinke
Software Developer/System Support
STEEL-CRAFT DOOR PRODUCTS LTD.
13504 St. Albert Trail
Edmonton, AB T5L 4P4
Bus: 780.453.3761 ext.3310
Fax: 780.454.1584
Toll Free: 1.800.463.3667
www.steel-craft.ca
Information contained in this communication may be confidential and is
intended only for the use of the individual(s) named above. If you are
not the named addressee you should not disseminate, distribute or copy
this e-mail. If you have received this e-mail in error please notify the
sender. 
----- Original Message -----
From: "Thomas Mortagne" <[email protected]>
To: "XWiki Users" <[email protected]>
Sent: Tuesday, December 31, 2013 12:27:47 AM
Subject: Re: [xwiki-users] subwiki ldap authentication
Yes you have only one xwiki.cfg which contains the default 
configuration for each wiki but "You can also setup the LDAP 
configuration in the XWiki.XWikiPreferences page by going to the 
object editor. Simply replace xwiki.authentication.ldap. with ldap_.
For example xwiki.authentication.ldap.base_DN becomes ldap_base_DN."
You can install
http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP+Application
which is doing exactly that (modifying XWikiPreferences page) in the 
wikis you want to modify.
On Tue, Dec 31, 2013 at 12:52 AM, Kelly Steinke
<[email protected]> wrote:
...
Hi all,
I just recently upgraded to 5.3 and have now created a sub wiki for
the first time. My main wiki is configured to authenticate using LDAP
and has a base search DN set to an OU called "AllUsers". In Active
Directory the AllUsers OU contains several sub OU's which separate users
according to branch, department ect. Having the LDAP set up to search
the AllUsers OU allows for anyone in our company to use the main wiki by
logging in with their network credentials and works great.
When I created the sub wiki, I went through the wizard and selected
to only have local users be available in it, as this sub wiki is to be
used and administrated by a specific department only. What I would like
to achieve now is to have the users of the sub wiki be authenticated
using a different search base than that of the main wiki (aka the OU
that contains only users for that department).
So instead of using the following, which is defined in the xwiki.cfg:
...
...
xwiki.authentication.ldap.base_DN=OU=All Users,DC=mycompanyt,DC=com
The sub wiki would use this for authentication:
xwiki.authentication.ldap.base_DN=OU=Accounting,OU=myBranch,OU=All 
Users,DC=mycompanyt,DC=com
I read in the documentation " Use cases of configuration to
authenticate users with LDAP " that each wiki in a multiwiki environment
can have its own LDAP configuration, however I am unable to determine
how to do this, as there is only one xwiki.cfg file that contains my
LDAP configuration and there is no mention of any LDAP settings in the
xwiki.preferences page of the sub wiki.
...
any help is greatly appreciated!
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users 

------------------------------

Message: 2
Date: Tue, 7 Jan 2014 17:35:32 +0100
From: Thomas Mortagne <[email protected]>
To: XWiki Users <[email protected]>
Subject: Re: [xwiki-users] subwiki ldap authentication
Message-ID:

<CAPnKnLF_4NYL7_htHYO7cF8vz6b=CR09Os4X3C3oWCA1ykOoeQ@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1

Actually "Only local users are available in the wiki" is something new
in 5.3 and not everything take it into account, LDAP authenticator is
one of them. You might want to add your use case to
http://jira.xwiki.org/browse/XWIKI-9856 and watch the issue.

On Tue, Jan 7, 2014 at 5:15 PM, Kelly Steinke <[email protected]>
wrote:
...
Thanks for your quick response Thomas, I was under the impression that
if I chose to set up the subwiki with the option of "Only local users
are available in the wiki" and then change the base_DN to define where
those local users should be authenticated from, that the subwiki could
be used as a totally separate instance where users could go straight to
the login of the subwiki instead of "requesting to join" from the main
wiki.
With your explanation I see that this is not possible, so I will have
to rethink my strategy. Perhaps by changing permissions on the main wiki
spaces so that the users of my subwiki do not see anything on the main
wiki but give them the ability to request to join the subwiki. I tried
this originally but was running into to many problems, as the request
functionality was failing due to them not being able to send
notifications with limited permissions.
If I have some time perhaps I will look into creating a new patch as
you have suggested.
----- Original Message -----
From: "Thomas Mortagne" <[email protected]>
To: "XWiki Users" <[email protected]>
Sent: Tuesday, January 7, 2014 8:36:00 AM
Subject: Re: [xwiki-users] subwiki ldap authentication
This is actually a general XWiki behavior: first try to auth on the 
current wiki and then on the main wiki and it's true for the LDAP auth
...
too. Note that this user is supposed to really have been authenticated
...
and created on main wiki, you should not have a new XWiki user on your
...
subwiki so you should have the behavior if you log on main wiki and 
then go to subwiki (the session keeping the user from main wiki).
You could create a new feature issue on http://jira.xwiki.org for a 
new parameter controlling if the LDAP auth should fallback on main 
wiki or not for example (like we have an option to control the 
fallback on standard auth) and even better provide a patch if you have
...
some Java experience (it should not be very hard to do, I can help you
...
look at the right place if you plan to look at it).
On Tue, Jan 7, 2014 at 4:25 PM, Kelly Steinke
<[email protected]> wrote:
...
I have performed the following steps:
* Installed the LDAP Admin Application on the subwiki.
* Changed the LDAP BASE_DN to point to a different location than the
main wiki . ( OU=Accounting,OU=myBranch,OU=All
Users,DC=mycompanyt,DC=com ) as opposed to ( OU=All
Users,DC=mycompanyt,DC=com) on the main.
* Created a new group in my AD called "maintenance_wiki" that has a
membership of users that I wish to authenticate against (as there is the
odd user that I want to authenticate that will not reside in the
OU=Accounting,OU=myBranch,OU=All Users,DC=mycompanyt,DC=com branch).
* Changed the "Restricted To Group" setting in the LDAP application
to point to my new maintenance_wiki group.
* Restarted the tomcat services.
After turning LDAP logging on and performing some tests it appears
that If I log on with a user that does not exist in the
"maintenance_wiki" group it will next try to authenticate using the Main
Wiki's search DN as opposed to the more granular one that I have defined
in the Subwiki. So instead of getting an "Invalid Credentials" message,
which I was hoping for, it instead creates the user in the main wiki and
lets the user into the subwiki with the message "ERROR you are not
allowed to view this document or perform this action".
What I was hoping would happen is that the subwiki would only
authenticate users from the search DN defined in the subwiki or that
belong in the group that I defined, and not create accounts for users
that exist in the main wiki's search DN. Is this possible?
Kelly Steinke
Software Developer/System Support
STEEL-CRAFT DOOR PRODUCTS LTD.
13504 St. Albert Trail
Edmonton, AB T5L 4P4
Bus: 780.453.3761 ext.3310
Fax: 780.454.1584
Toll Free: 1.800.463.3667
www.steel-craft.ca
Information contained in this communication may be confidential and
is intended only for the use of the individual(s) named above. If you
are not the named addressee you should not disseminate, distribute or
copy this e-mail. If you have received this e-mail in error please
notify the sender.
----- Original Message -----
From: "Thomas Mortagne" <[email protected]>
To: "XWiki Users" <[email protected]>
Sent: Tuesday, December 31, 2013 12:27:47 AM
Subject: Re: [xwiki-users] subwiki ldap authentication
Yes you have only one xwiki.cfg which contains the default 
configuration for each wiki but "You can also setup the LDAP 
configuration in the XWiki.XWikiPreferences page by going to the 
object editor. Simply replace xwiki.authentication.ldap. with ldap_.
For example xwiki.authentication.ldap.base_DN becomes ldap_base_DN."
You can install
http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP+Application
which is doing exactly that (modifying XWikiPreferences page) in the 
wikis you want to modify.
On Tue, Dec 31, 2013 at 12:52 AM, Kelly Steinke
<[email protected]> wrote:
...
Hi all,
I just recently upgraded to 5.3 and have now created a sub wiki for
the first time. My main wiki is configured to authenticate using LDAP
and has a base search DN set to an OU called "AllUsers". In Active
Directory the AllUsers OU contains several sub OU's which separate users
according to branch, department ect. Having the LDAP set up to search
the AllUsers OU allows for anyone in our company to use the main wiki by
logging in with their network credentials and works great.
When I created the sub wiki, I went through the wizard and selected
to only have local users be available in it, as this sub wiki is to be
used and administrated by a specific department only. What I would like
to achieve now is to have the users of the sub wiki be authenticated
using a different search base than that of the main wiki (aka the OU
that contains only users for that department).
So instead of using the following, which is defined in the
xwiki.cfg:
xwiki.authentication.ldap.base_DN=OU=All Users,DC=mycompanyt,DC=com
The sub wiki would use this for authentication:
xwiki.authentication.ldap.base_DN=OU=Accounting,OU=myBranch,OU=All 
Users,DC=mycompanyt,DC=com
I read in the documentation " Use cases of configuration to
authenticate users with LDAP " that each wiki in a multiwiki environment
can have its own LDAP configuration, however I am unable to determine
how to do this, as there is only one xwiki.cfg file that contains my
LDAP configuration and there is no mention of any LDAP settings in the
xwiki.preferences page of the sub wiki.
any help is greatly appreciated!
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne

------------------------------

Message: 3
Date: Tue, 7 Jan 2014 11:45:18 -0500
From: "Paul Pinkerton  (ACLCO)" <[email protected]>
To: <[email protected]>
Subject: [xwiki-users] display external webpage in xwiki page
Message-ID: <[email protected]>
Content-Type: text/plain;	charset="us-ascii"

I want to display an external webpage in a wiki page.  I have tried a
variety of methods including html using both iframe and embed.  I cannot
seem to get the page to display.  Ideas?

Paul Pinkerton

KnowledgeNow Project Lead

[email protected] <mailto:[email protected]> 

Association of Community Legal Clinics of Ontario

416-847-1418 or 1-866-965-1416x 5177

www.aclco.org <http://www.aclco.org>  

------------------------------

Message: 4
Date: Tue, 7 Jan 2014 17:48:41 +0100
From: Thomas Mortagne <[email protected]>
To: XWiki Users <[email protected]>
Subject: Re: [xwiki-users] display external webpage in xwiki page
Message-ID:

<CAPnKnLGdC3n6AvUNoiykQn=CYhBP24WBa38u7+4uZsdfPse0eg@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1

iframe seems to work well for me, see
http://tuska.myxwiki.org/xwiki/bin/view/Test/Iframe (and
http://tuska.myxwiki.org/xwiki/bin/view/Test/Iframe?viewer=code).

On Tue, Jan 7, 2014 at 5:45 PM, Paul Pinkerton  (ACLCO)
<[email protected]> wrote:
...
I want to display an external webpage in a wiki page.  I have tried a
variety of methods including html using both iframe and embed.  I
cannot
seem to get the page to display.  Ideas?
Paul Pinkerton
KnowledgeNow Project Lead
[email protected] <mailto:[email protected]>
Association of Community Legal Clinics of Ontario
416-847-1418 or 1-866-965-1416x 5177
www.aclco.org <http://www.aclco.org>
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users
-- 
Thomas Mortagne

------------------------------

Message: 5
Date: Tue, 7 Jan 2014 20:10:22 +0200
From: Eduard Moraru <[email protected]>
To: XWiki Users <[email protected]>
Subject: Re: [xwiki-users] [xwiki-devs] [ANN] Welcome our new
	committer Clemens Robbenhaar
Message-ID:

<CADGDyY+u4VS82QU0_pJwZKBVG7hGZUBuVqF8aGOiuxZLWH3sqQ@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8

Congrats Clemens!

-Eduard

On Tue, Jan 7, 2014 at 2:11 PM, Clemens Klein-Robbenhaar <
[email protected]> wrote:
...
Hi Thomas and all the others,
thanks for the welcome :)
Actually I have been watching the development of XWiki since somewhat
1.6
(or so I think, it got a bit lost in the mists of my memory),
but never got around to contribute  until recently; so I am happy
that after much procrastinating I finally managed to start
contributing.
Thanks for the XWiki developer team to accept me into the team!
Cheers,
Clemens
...
Hi xwikiers,
The committers discussed and voted to include Clemens Robbenhaar in
the team which he agreed so a warm welcome to him !
He has been very active since he started working on XWiki, he
already
spend a lot of time answering questions on the mailing list and on
IRC
(more than me I think).
On the technical aspect everything I saw from him was good and very
clean and he is clearly no afraid to look at advanced stuff (he
spent
a long time last month trying to help Kaisen and Denis on migration
stuff which I'm
sure was not that critically related to his own work).
Note that he is working on XWiki for EsPresto AG (don't forget to
add
it to http://main.xwiki.org/xwiki/bin/view/Main/Support).
I'm sure he will be great addition to the team and it's always a
nice
bonus
to see non XWiki SAS members so active ;)
Welcome !
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users
------------------------------

Subject: Digest Footer

_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users

------------------------------

End of users Digest, Vol 78, Issue 9
************************************

Paul Pinkerton (ACLCO)

tags

participants (1)