15 Dec
2008
15 Dec
'08
9:10 p.m.
Hi,
I'm using XWiki Enterprise v1.7 under Windows 2003 and Oracle Database
I set up 2 AD groups that map to the same XWiki group :
xwiki.authentication.ldap.group_mapping=XWiki.MyXWikiGroup=cn=ADGroup1,ou=Site,dc=company,dc=comI\
XWiki.MyGroup=cn=ADGroup2,ou=Site,dc=company,dc=com
Users that belong to MyXWikiGroup are able to EDIT a space, all others can't.
As long as a user from ADGroup2 is logged and visit the space, user's
permissions can't stop swapping from "able to edit" and "not able to
edit" the space.
I took a look on the group changes history and it seems that a change
is performed 10 times a minute. After one hour of connection the
history reached the version number 700+
I search through the mailing-list archives but I didn't see any things similar.
Any ideas ?
David
16 Dec
16 Dec
2:49 p.m.
New subject: [xwiki-users] Active directory + multiple group_mapping = strange behaviour
Hi,
On Mon, Dec 15, 2008 at 9:10 PM, couak couak <couakcouak(a)gmail.com> wrote:
Hi,
I'm using XWiki Enterprise v1.7 under Windows 2003 and Oracle Database
I set up 2 AD groups that map to the same XWiki group :
xwiki.authentication.ldap.group_mapping=XWiki.MyXWikiGroup=cn=ADGroup1,ou=Site,dc=company,dc=comI\
XWiki.MyGroup=cn=ADGroup2,ou=Site,dc=company,dc=com
Users that belong to MyXWikiGroup are able to EDIT a space, all others can't.
As long as a user from ADGroup2 is logged and visit the space, user's
permissions can't stop swapping from "able to edit" and "not able to
edit" the space.
I took a look on the group changes history and it seems that a change
is performed 10 times a minute. After one hour of connection the
history reached the version number 700+
I search through the mailing-list archives but I didn't see any things similar.
Any ideas ?
I think it's a bug in the way membership is managed when two different
LDAP groups is synchronised with same XWiki group.
I take a look.
David
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
3:05 p.m.
New subject: [xwiki-users] Active directory + multiple group_mapping = strange behaviour
On Tue, Dec 16, 2008 at 2:49 PM, Thomas Mortagne
<thomas.mortagne(a)xwiki.com> wrote:
Hi,
On Mon, Dec 15, 2008 at 9:10 PM, couak couak <couakcouak(a)gmail.com> wrote:
See http://jira.xwiki.org/jira/browse/XWIKI-2988
We are working on it, it will be fixed for 1.7.1
Hi,
I'm using XWiki Enterprise v1.7 under Windows 2003 and Oracle Database
I set up 2 AD groups that map to the same XWiki group :
xwiki.authentication.ldap.group_mapping=XWiki.MyXWikiGroup=cn=ADGroup1,ou=Site,dc=company,dc=comI\
XWiki.MyGroup=cn=ADGroup2,ou=Site,dc=company,dc=com
Users that belong to MyXWikiGroup are able to EDIT a space, all others can't.
As long as a user from ADGroup2 is logged and visit the space, user's
permissions can't stop swapping from "able to edit" and "not able to
edit" the space.
I took a look on the group changes history and it seems that a change
is performed 10 times a minute. After one hour of connection the
history reached the version number 700+
I search through the mailing-list archives but I didn't see any things similar.
Any ideas ?
I think it's a bug in the way membership is managed when two different
LDAP groups is synchronised with same XWiki group.
I take a look.
--
Thomas Mortagne
David
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
17 Dec
17 Dec
2:30 p.m.
New subject: [xwiki-users] Active directory + multiple group_mapping = strange behaviour
We have created an extra set of active directory groups that are linked 1 to
1 to xwiki groups.
The active directory groups contain all users (or other groups, of course)
that need to be mapped to a specific group in xwiki.
The advantage is, that user/group administration can completely be done in
active directory. Once set up, you never ever have to touch the xwiki user
administration tool or the xwiki.cfg any more (at least in terms of user
management ;-) ).
This can be a workaround for your problem too if you need to get it running
before 1.7.1.
steve
--
View this message in context:
http://n2.nabble.com/Active-directory-%2B-multiple-group_mapping-%3D-strang…
Sent from the XWiki- Users mailing list archive at Nabble.com.
2:41 p.m.
New subject: [xwiki-users] Active directory + multiple group_mapping = strange behaviour
On Wed, Dec 17, 2008 at 2:30 PM, Stefan Woehrer <stefan_woehrer(a)yahoo.de> wrote:
We have created an extra set of active directory groups that are linked 1 to
1 to xwiki groups.
The active directory groups contain all users (or other groups, of course)
that need to be mapped to a specific group in xwiki.
The advantage is, that user/group administration can completely be done in
active directory. Once set up, you never ever have to touch the xwiki user
administration tool or the xwiki.cfg any more (at least in terms of user
management ;-) ).
This can be a workaround for your problem too if you need to get it running
before 1.7.1.
And by the way if you can't wait for 1.7.1 the fix is already packaged
in the last 1.7 snapshot version at
http://maven.xwiki.org/snapshots/com/xpn/xwiki/platform/xwiki-core/1.7-SNAP….
I forgot to indicate this.
steve
--
View this message in context:
http://n2.nabble.com/Active-directory-%2B-multiple-group_mapping-%3D-strang…
Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
9:01 p.m.
New subject: [xwiki-users] Active directory + multiple group_mapping = strange behaviour
thanks
david
On Wed, Dec 17, 2008 at 2:41 PM, Thomas Mortagne
<thomas.mortagne(a)xwiki.com> wrote:
On Wed, Dec 17, 2008 at 2:30 PM, Stefan Woehrer
<stefan_woehrer(a)yahoo.de> wrote:
We have created an extra set of active directory groups that are linked 1 to
1 to xwiki groups.
The active directory groups contain all users (or other groups, of course)
that need to be mapped to a specific group in xwiki.
The advantage is, that user/group administration can completely be done in
active directory. Once set up, you never ever have to touch the xwiki user
administration tool or the xwiki.cfg any more (at least in terms of user
management ;-) ).
This can be a workaround for your problem too if you need to get it running
before 1.7.1.
And by the way if you can't wait for 1.7.1 the fix is already packaged
in the last 1.7 snapshot version at
http://maven.xwiki.org/snapshots/com/xpn/xwiki/platform/xwiki-core/1.7-SNAP….
I forgot to indicate this.
steve
--
View this message in context:
http://n2.nabble.com/Active-directory-%2B-multiple-group_mapping-%3D-strang…
Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
5752
days inactive
5754
days old
5 comments
3 participants
participants (3)
-
couak couak -
Stefan Woehrer -
Thomas Mortagne