Try to configure it using AD's WwwHomepage field as the username or another
such field. For some reason I had to do that on my install to get ldap/ad
to work, I used an LDAP admin program to create everyones username in the
WwwHomepage field and used that as my username.
#-# new LDAP authentication service
xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthSer
viceImpl
#-# Turn LDAP authentication on - otherwise only XWiki authentication
#-# 0: disable
#-# 1: enable
xwiki.authentication.ldap=1
#-# LDAP Server (Active Directory, eDirectory, OpenLDAP, etc.)
xwiki.authentication.ldap.server=Local.Ip.Address.here
xwiki.authentication.ldap.port=389
#-# LDAP login, empty = anonymous access, otherwise specify full dn
#-# {0} is replaced with the username, {1} with the password
xwiki.authentication.ldap.bind_DN=CN=*account with ldap browsing privledges
using
CN*,OU=Path,DC=TO,DC=THE,DC=Domain/OU,DC=HEREusingstandardldapformating
xwiki.authentication.ldap.bind_pass=*previously mentioned cn's password*
#-# Force to check password after LDAP connection
#-# 0: disable
#-# 1: enable
xwiki.authentication.ldap.validate_password=0
#-# base DN for searches
xwiki.authentication.ldap.base_DN=
DC=TO,DC=THE,DC=Domain,DC=HEREusingstandardldapformating
#-# Specifies the LDAP attribute containing the identifier to be used as the
XWiki name (default=cn)
xwiki.authentication.ldap.UID_attr=wWWHomePage
#-# retrieve the following fields from LDAP and store them in the XWiki user
object (xwiki-attribute=ldap-attribute)
#-# ldap_dn=dn -- dn is set by class, caches dn in XWiki.user object for
faster access
xwiki.authentication.ldap.fields_mapping=last_name=sn,first_name=givenName,f
ullname=wWWHomePage,email=mail,ldap_dn=dn
#-# [SINCE 1.3M2, XWikiLDAPAuthServiceImpl]
#-# on every login update the mapped attributes from LDAP to XWiki otherwise
this happens only once when the XWiki account is created.
xwiki.authentication.ldap.update_user=1
#-# [SINCE 1.3M2, XWikiLDAPAuthServiceImpl]
#-# if ldap authentication fails for any reason, try XWiki DB authentication
with the same credentials
xwiki.authentication.ldap.trylocal=1
Philip Wright
Reports Analyst
ACS: BPS
Affiliated Computer Services, Inc
Affiliated Computer Services, Inc (ACS) Proprietary and Confidential
Information
This document (or any part thereof) may not be disseminated outside of ACS
in either electronic or physical form without specific authorization of the
office of the ACS Chief Information Security Officer. The information
included in this document represents no commitment by ACS to any other
party. The policies and standards described do not consider any country law
or other directive outside of the United States.
P Please consider the environment before printing this email
-----Original Message-----
From: users-bounces(a)xwiki.org [mailto:users-bounces@xwiki.org] On Behalf Of
Zoltan Gyula Beck
Sent: Thursday, July 17, 2008 12:56 AM
To: XWiki Users
Subject: Re: [xwiki-users] Active Directory 2.
Hi Eric!
So I did some changes of config:
1. xwiki.authentication.ldap.bind_DN=COMPANY\\{0}
2.
xwiki.authentication.ldap.bind_DN=COMPANY\\{0},ou=COMPANY,dc=company,dc=intr
anet
Both time if I try to connect with the sAMAccontName value then I got an
error that "Wrong user name", but if I try with cn then I got "Wrong
password" error message :(
Best Regards,
bzg
2008/7/16 Eric Johnson <emj10(a)vt.edu>du>:
Try checking to see if you need to be using a
subdomain on your binddn.
My company uses a subdomain for logging in:
Example, for windows login, we enter our username and password and
where to login (either to the network or to the local machine). IF
THIS IS THE CASE, then an admin username and admin password will most
likely NOT be
required.
If you are logging into a subdomain, try changing the bind_DN=***\\{0}
and bind_pass={1}, where *** is the subdomain you log into. As far as
I know the double \'s are needed.
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users