Also I think http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HLDAPCon… is based in old LDAP authenticator (see http://platform.xwiki.org/xwiki/bin/view/AdminGuide/AuthenticationLdapOld). On Thu, Apr 17, 2008 at 7:35 PM, Thomas Mortagne <thomas.mortagne(a)xwiki.com> wrote: -- Thomas Mortagne

On Tue, Apr 29, 2008 at 1:30 PM, werner mueller <werner.mueller(a)mimacom.ch> wrote: Yes and it's the default way to work for LDAP authenticator. You can see in default xwiki.cfg : #-# LDAP login, empty = anonymous access, otherwise specify full dn #-# {0} is replaced with the username, {1} with the password #xwiki.authentication.ldap.bind_DN=cn={0},department=USER,department=INFORMATIK,department=1230,o=MP #xwiki.authentication.ldap.bind_pass={1} So in your case it would be : xwiki.authentication.ldap.bind_DN=cn={0},cn=Users,dc=domain,dc=com xwiki.authentication.ldap.bind_pass={1} -- Thomas Mortagne

On Wed, Apr 30, 2008 at 11:55 AM, werner mueller <werner.mueller(a)mimacom.ch> wrote: Yes, you really write "{0}" and "{1}" in the configuration and it will be replaced at runtime by user/pass provided by user in the login form. -- Thomas Mortagne

You can enable "debug" logging, see http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Logging On Wed, Apr 30, 2008 at 1:54 PM, werner mueller <werner.mueller(a)mimacom.ch> wrote: -- Thomas Mortagne

Try LDAP Browser to find the correct configuration. I've succeeded in connecting to AD, using the CN attribute, so in config it would be: bind_DN={0} /// here the user will type his cn UID_attr=cn Quoting werner mueller : hallo well i am a little stuck. i cant make it work although i copied the settings from a working example (well another tool but the same servers). i can only get to 'invalid credentials' does the server need to be in the same domain as the active directory to use the bind_DN=subdomain\{0} bind schema? the server is a linux machine and is not added to the windows domain. is there a unit test or little tool or something one could use for testing? its a little weird its not working. thanks for any ideas :) regards werner Thomas Mortagne schrieb: the same in my [http://dev.edoras.ch:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] LDAP 5: LDAP com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:178) com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:109) com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:194) com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:107) com.novell.ldap.LDAPResponse.getResultException(Unknown Source) Source) Source) >> at com.novell.ldap.LDAPConnection.bind(Unknown Source) >> at com.novell.ldap.LDAPConnection.bind(Unknown Source) com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:170) com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:109) com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:194) information? uses the specify full dn password #xwiki.authentication.ldap.bind_DN=cn={0},department=USER,o=MP it will login config file seems not every use a special that user can login is not an could share? bind to the AD login? LDAPbinddn = authenticator. You can specify full dn password #xwiki.authentication.ldap.bind_DN=cn={0},department=USER,department=INFORMATIK,department=1230,o=MP >> >> > #xwiki.authentication.ldap.bind_pass={1} >> >> > So in your case it would be : xwiki.authentication.ldap.bind_DN=cn={0},cn=Users,dc=domain,dc=com >> >> > xwiki.authentication.ldap.bind_pass={1} >> >> >> btw: yes i am sure its version 1.3.2.9174. its the one copy pasted from weird. http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HLDAPCon… >> >> >> > is based in old LDAP authenticator (see >> http://platform.xwiki.org/xwiki/bin/view/AdminGuide/AuthenticationLdapOld). >> >> >> >> > On Thu, Apr 17, 2008 at 7:35 PM, Thomas Mortagne >> >> >> > wrote: >> >> >> >> Hi, >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> On Thu, Apr 17, 2008 at 7:02 PM, werner mueller >> >> >> >> wrote: >> >> >> >> > hallo >> >> >> >> >> >> > i am currently trying to setup xwiki on taomcat 5.5/mysql. until now its >> >> >> >> > doing quite well :) >> >> >> >> >> >> > my next step is to get ldap authentication against an active directory http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HLDAPCon… get it to work. >> >> >> >> >> >> > i either end up with: >> >> >> >> > com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP >> >> >> >> > bind failed with LDAPException. >> >> >> >> > Wrapped Exception: Invalid Credentials >> >> >> >> >> >> > or worse (with in my eyes the propper config): >> >> >> >> > WARN LDAP.XWikiLDAPAuthS >> >> >> >> > erviceImpl - LDAP authentication failed. >> >> >> >> > java.lang.NullPointerException com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:256) com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:107) com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:194) com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:127) com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:112) com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:214) com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3307) com.xpn.xwiki.user.impl.xwiki.XWikiRightServiceImpl.checkAccess(XWikiRightServiceImpl.java:136) com.xpn.xwiki.XWiki.checkAccess(XWiki.java:3315) com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4259) com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:173) >> >> >> >> > ... >> >> >> >> >> >> >> >> Could you copy/paste your configuration. >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> > i've done ldap auth on several other tools (apache/subversion, to bind to the active itself. >> >> >> >> >> >> > in the xwiki config i can only see the user logging in is used to bind directory using search for provided >> >> >> >> login in ldap based on "UID_attr" property >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> > is the documentation current for xwiki 1.3.2.9174? or can someone give can't find in the >> >> >> >> code what could make NullPointerException at >> >> >> >> XWikiLDAPAuthServiceImpl.java:256 >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> > thanks a lot >> >> >> >> > regards >> >> >> >> >> >> > werner >> >> >> >> >> >> > _______________________________________________ >> >> >> >> > users mailing list >> >> >> >> > users(a)xwiki.org >> >> >> >> > http://lists.xwiki.org/mailman/listinfo/users >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> -- >> >> >> >> Thomas Mortagne >> >> >> >> >> >> >> >> >> >> >> >> >> _______________________________________________ >> >> >> users mailing list >> >> >> users(a)xwiki.org >> >> >> http://lists.xwiki.org/mailman/listinfo/users >> >> >> >> >> >> >> _______________________________________________ >> >> users mailing list >> >> users(a)xwiki.org >> >> http://lists.xwiki.org/mailman/listinfo/users >> >> >> > >> > >> > >> >> _______________________________________________ >> users mailing list >> users(a)xwiki.org >> http://lists.xwiki.org/mailman/listinfo/users >> > > > _______________________________________________ users mailing list users(a)xwiki.org http://lists.xwiki.org/mailman/listinfo/users Ar cieņu, Mihails Links: ------ [1] mailto:werner.mueller@mimacom.ch

Hallo yep, that was the first attempt. no matter what variation i try i get bind errors or invalid credentials (depending on what user i try to login). xwiki shows an 'internal error' on the login dialog. its very weird. he mediawiki configuration is alost exactly the same (using that domain\\user syntax rather than ldap) hard to tell what i'm doing wrong :) i'll do another attempt on a different server next week to make sure its nothing too stupid. thanks! regards werner Thomas Mortagne schrieb:

If your sAMAccountName is like name.surname, it won't work. XWiki has some problems with "." (or is this solved?) sign when logging in. Quoting Fabien : Hi, I don't know if this will help, but here is below my xwiki.cfg configuration file that enable me to bind. I still do not reach the field mapping step though, I get a "LDAPReferralException: Automatic referral following not enabled (10) Referral LDAPReferralException: Server Message: 0000202B: RefErr: DSID-0310063C, data 0, 1 access points Iref 1: 'ad.toto.com'" ------8 get to same sure its http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HLDAPCon… in copied the same linux use for uses they authenticated. but [http://dev.edoras.ch:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] LDAP.XWikiLDAPAuthServiceImpl - 0 in com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:178) com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:109) com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:194) com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:107) Credentials DSID-0C090334, Source) com.novell.ldap.LDAPResponse.chkResultCode(Unknown > >> Source) com.novell.ldap.LDAPConnection.chkResultCode(Unknown Source) Source) com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:170) com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:109) com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:194) more it fails. the configuration and the in the luck. it have to directory. the ad or she user to process the using #xwiki.authentication.ldap.bind_DN=cn={0},department=USER,department=INFORMATIK,department=1230,o=MP xwiki.authentication.ldap.bind_DN=cn={0},cn=Users,dc=domain,dc=com the one would be http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HLDAPCon… http://platform.xwiki.org/xwiki/bin/view/AdminGuide/AuthenticationLdapOld Mortagne mueller taomcat http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HLDAPCon… i cant com.xpn.xwiki.plugin.ldap.XWikiLDAPException: config): com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:256) com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:107) com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:194) com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:127) com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:112) com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:214) > >> >> >> >> >> > at > >> com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3307) com.xpn.xwiki.user.impl.xwiki.XWikiRightServiceImpl.checkAccess(XWikiRightServiceImpl.java:136) allowed useraccount user active will version, I _______________________________________________ http://lists.xwiki.org/mailman/listinfo/users _______________________________________________ users mailing list users(a)xwiki.org http://lists.xwiki.org/mailman/listinfo/users Ar cieņu, Mihails Links: ------ [1] mailto:fbataill@gmail.com

Hi all, I think I have got some new about the LDAP support in Xwiki. It does not support the LDAP Referral (at least by default, perhaps there is a flag somewhere to set ?) Where you are looking for a specific key into LDAP, sometime you get an information from your current searched LDAP that the information you are looking for is in another LDAP repository, and thus the first LDAP gives you the next LDAP URL to search. In the current Xwiki LDAP this ends with the LDAP Referral exception as indicated below: Automatic referral following not enabled. I have done another test looking directly into the rigth LDAP repository containing my information and I have gone a step further. Now I failed on an attribute that Xwiki seems to need: "userPassword" that I don't have in my user form. I am on my way of defining a dedicated AuthServiceImpl as I only need to check if the bind is ok to allow a user to enter into xwiki. Fabien On Tue, May 20, 2008 at 9:33 AM, Fabien <fbataill(a)gmail.com> wrote:

Could you create a jira issue for that at Done ! Ok putting validate_password to 0 works ! Thanks ! Fabien