Sounds like the way you configured LDAP your users are duplicated in all wikis. So when you are in a subwiki and then move to main wiki you move as the a subwiki user which usually don't have any right on main wiki. It's usually better to force all LDAP user to be created on main wiki only, see http://platform.xwiki.org/xwiki/bin/view/AdminGuide/LDAPAuthenticationUseCas.... On Wed, Oct 7, 2015 at 3:49 PM, AlexIv <[email protected]> wrote:

the problem was with the XWiki Enterprise 7.1.2 and it remained in the version 7.2 I think it's in cookies Maybe you have some settings for them?

-- View this message in context: http://xwiki.475771.n2.nabble.com/Authentication-problem-when-a-LDAP-User-fi... Sent from the XWiki- Users mailing list archive at Nabble.com. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne

On Fri, Oct 9, 2015 at 4:18 PM, AlexIv <[email protected]> wrote:

all is right, the subwiki creates its local ldap users but I already use the option: xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl

I think you misunderstood what I suggested. That "option" just mean you are using LDAP authenticator. What I'm telling you is that you have your LDAP users duplicated everywhere in your wiki farm and XWiki see them as different users whicle you should make sure they are all stored on the main wiki instead. Please read carefully what is explained in http://platform.xwiki.org/xwiki/bin/view/AdminGuide/LDAPAuthenticationUseCas....

Btw, forgot to mention, maybe it's important. When a user authenticates in the subwiki first, his way in navigation is built not from the main wiki - see the screenshot <http://xwiki.475771.n2.nabble.com/file/n7596411/XWiki_root_issue.png>

-- View this message in context: http://xwiki.475771.n2.nabble.com/Authentication-problem-when-a-LDAP-User-fi... Sent from the XWiki- Users mailing list archive at Nabble.com. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne

On Mon, Oct 12, 2015 at 4:19 PM, AlexIv <[email protected]> wrote:

thank you, everything works correctly

Due to the instruction, one of the following ways should be used: http://platform.xwiki.org/xwiki/bin/view/AdminGuide/LDAPAuthenticationUseCas...

But in fact it requires all three conditions The version 7.2, though, needs only two first conditions, as LDAP Extensions isn't now installed by default.

Actually the first bullet point was added recently I think and does not make much sense, I did not noticed it when I gave you the link. I just removed it and what need to be done is only one of the 2 ways left depending on your use case.

-- View this message in context: http://xwiki.475771.n2.nabble.com/Authentication-problem-when-a-LDAP-User-fi... Sent from the XWiki- Users mailing list archive at Nabble.com. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne