[xwiki-users] Is there a plan to support LDAP authentication for WebDAV feature
Hi. I searched this mailing list and xwiki docs for this information but didn't find anything. Is there any plan to extend the authentication mechanism in WebDAV component to support LDAP? I felt that having access to page content and attachment folders via shared drive (using NetDrive) would be immensely attractive for end users because of the ability to use enhanced editors to directly edit page content and the ability to upload/manage multiple attachments. Thanks, Milind M
On Fri, Jan 15, 2010 at 16:48, Milind Kamble <[email protected]> wrote:
Hi. I searched this mailing list and xwiki docs for this information but didn't find anything. Is there any plan to extend the authentication mechanism in WebDAV component to support LDAP? I felt that having access to page content and attachment folders via shared drive (using NetDrive) would be immensely attractive for end users because of the ability to use enhanced editors to directly edit page content and the ability to upload/manage multiple attachments.
Well authentication mechanism is generic for the whole XWiki platform. If WebDAV support any authentication then it supports LDAP, i doubt an authentication system has been coded specifically for WebDAV module. It would be weird that WebDAV does not use it but i don't know WebDAV module very well.
Thanks, Milind M
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
The http://platform.xwiki.org/xwiki/bin/view/Features/WebDAV page says "Wiki's WebDAV implementation only supports Basic Access Authentication and it doesn't support locking and versioning DAV operations yet.". I confirmed this by using NetDrive webdav client to authenticate with my xwiki installation which uses LDAP and it failed to authenticate -- but I could connect as local user "Admin". So it definitely seems to need some enhancement to support LDAP. Regards, Milind ________________________________ From: Thomas Mortagne <[email protected]> To: XWiki Users <[email protected]> Sent: Fri, January 15, 2010 11:37:15 AM Subject: Re: [xwiki-users] Is there a plan to support LDAP authentication for WebDAV feature On Fri, Jan 15, 2010 at 16:48, Milind Kamble <[email protected]> wrote:
Hi. I searched this mailing list and xwiki docs for this information but didn't find anything. Is there any plan to extend the authentication mechanism in WebDAV component to support LDAP? I felt that having access to page content and attachment folders via shared drive (using NetDrive) would be immensely attractive for end users because of the ability to use enhanced editors to directly edit page content and the ability to upload/manage multiple attachments.
Well authentication mechanism is generic for the whole XWiki platform. If WebDAV support any authentication then it supports LDAP, i doubt an authentication system has been coded specifically for WebDAV module. It would be weird that WebDAV does not use it but i don't know WebDAV module very well.
Thanks, Milind M
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
Hi, On Fri, Jan 15, 2010 at 11:43 PM, Milind Kamble <[email protected]> wrote:
The http://platform.xwiki.org/xwiki/bin/view/Features/WebDAV page says "Wiki's WebDAV implementation only supports Basic Access Authentication and it doesn't support locking and versioning DAV operations yet.". I confirmed this by using NetDrive webdav client to authenticate with my xwiki installation which uses LDAP and it failed to authenticate -- but I could connect as local user "Admin". So it definitely seems to need some enhancement to support LDAP.
WebDAV specification has defined two authentication mechanisms in it. - Basic Access Authentication - Digest Authentication At the moment XWiki cannot support Digest Authentication and I'm not sure whether LDAP authentication can be done for WebDAV. I will look around a bit and get back to you on this. Thanks. - Asiri
Regards, Milind
________________________________ From: Thomas Mortagne <[email protected]> To: XWiki Users <[email protected]> Sent: Fri, January 15, 2010 11:37:15 AM Subject: Re: [xwiki-users] Is there a plan to support LDAP authentication for WebDAV feature
On Fri, Jan 15, 2010 at 16:48, Milind Kamble <[email protected]> wrote:
Hi. I searched this mailing list and xwiki docs for this information but didn't find anything. Is there any plan to extend the authentication mechanism in WebDAV component to support LDAP? I felt that having access to page content and attachment folders via shared drive (using NetDrive) would be immensely attractive for end users because of the ability to use enhanced editors to directly edit page content and the ability to upload/manage multiple attachments.
Well authentication mechanism is generic for the whole XWiki platform. If WebDAV support any authentication then it supports LDAP, i doubt an authentication system has been coded specifically for WebDAV module. It would be weird that WebDAV does not use it but i don't know WebDAV module very well.
Thanks, Milind M
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
On Fri, Jan 15, 2010 at 19:22, Asiri Rathnayake <[email protected]> wrote:
Hi,
On Fri, Jan 15, 2010 at 11:43 PM, Milind Kamble <[email protected]> wrote:
The http://platform.xwiki.org/xwiki/bin/view/Features/WebDAV page says "Wiki's WebDAV implementation only supports Basic Access Authentication and it doesn't support locking and versioning DAV operations yet.". I confirmed this by using NetDrive webdav client to authenticate with my xwiki installation which uses LDAP and it failed to authenticate -- but I could connect as local user "Admin". So it definitely seems to need some enhancement to support LDAP.
WebDAV specification has defined two authentication mechanisms in it.
- Basic Access Authentication
- Digest Authentication
At the moment XWiki cannot support Digest Authentication and I'm not sure whether LDAP authentication can be done for WebDAV. I will look around a bit and get back to you on this.
Basic or Diggest authentication are authentication entry point (which receive credentials), WebDav still have to use XWikiRightService to validate the credentials (authentication back-end where LDAP authenticator and others are).
Thanks.
- Asiri
Regards, Milind
________________________________ From: Thomas Mortagne <[email protected]> To: XWiki Users <[email protected]> Sent: Fri, January 15, 2010 11:37:15 AM Subject: Re: [xwiki-users] Is there a plan to support LDAP authentication for WebDAV feature
On Fri, Jan 15, 2010 at 16:48, Milind Kamble <[email protected]> wrote:
Hi. I searched this mailing list and xwiki docs for this information but didn't find anything. Is there any plan to extend the authentication mechanism in WebDAV component to support LDAP? I felt that having access to page content and attachment folders via shared drive (using NetDrive) would be immensely attractive for end users because of the ability to use enhanced editors to directly edit page content and the ability to upload/manage multiple attachments.
Well authentication mechanism is generic for the whole XWiki platform. If WebDAV support any authentication then it supports LDAP, i doubt an authentication system has been coded specifically for WebDAV module. It would be weird that WebDAV does not use it but i don't know WebDAV module very well.
Thanks, Milind M
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
Hi,
At the moment XWiki cannot support Digest Authentication and I'm not sure
whether LDAP authentication can be done for WebDAV. I will look around a bit and get back to you on this.
Basic or Diggest authentication are authentication entry point (which receive credentials), WebDav still have to use XWikiRightService to validate the credentials (authentication back-end where LDAP authenticator and others are).
Ok, I see. In that case it should be possible to provide LDAP support without much effort. I will have a look at how credential validation is currently done in webdav module as make necessary changes. Thanks. - Asiri
Thanks.
- Asiri
Regards, Milind
________________________________ From: Thomas Mortagne <[email protected]> To: XWiki Users <[email protected]> Sent: Fri, January 15, 2010 11:37:15 AM Subject: Re: [xwiki-users] Is there a plan to support LDAP
authentication
for WebDAV feature
On Fri, Jan 15, 2010 at 16:48, Milind Kamble <[email protected]> wrote:
Hi. I searched this mailing list and xwiki docs for this information but didn't find anything. Is there any plan to extend the authentication mechanism in WebDAV component to support LDAP? I felt that having access to page content and attachment folders via shared drive (using NetDrive) would be immensely attractive for end users because of the ability to use enhanced editors to directly edit page content and the ability to upload/manage multiple attachments.
Well authentication mechanism is generic for the whole XWiki platform. If WebDAV support any authentication then it supports LDAP, i doubt an authentication system has been coded specifically for WebDAV module. It would be weird that WebDAV does not use it but i don't know WebDAV module very well.
Thanks, Milind M
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
You folks (I mean all the XWiki developers and contributors) rock! The possibility of easy extendibility of WebDAV feature to support LDAP boosts my belief that XWiki is one of the best Wikis out there. I had begun to read about WebDAV and authentication and had started to realize that WebDAV assumes an independent authentication mechanism -- though most documents were in context of WebDAV over Apache. The clarification by Thomas supports this conclusion. I'll look forward to updates on this request :) Asiri's mention of Basic and Digest authentication raises another question in my mind. On reading the "Digest Authentication & XWiki" thread it seems that Digest authentication is probably out of question. Is there any documentation specifically for XWiki about how to setup https based login to send the user's password? ________________________________ From: Asiri Rathnayake <[email protected]> To: XWiki Users <[email protected]> Sent: Sat, January 16, 2010 3:12:48 AM Subject: Re: [xwiki-users] Is there a plan to support LDAP authentication for WebDAV feature Hi,
At the moment XWiki cannot support Digest Authentication and I'm not sure
whether LDAP authentication can be done for WebDAV. I will look around a bit and get back to you on this.
Basic or Diggest authentication are authentication entry point (which receive credentials), WebDav still have to use XWikiRightService to validate the credentials (authentication back-end where LDAP authenticator and others are).
Ok, I see. In that case it should be possible to provide LDAP support without much effort. I will have a look at how credential validation is currently done in webdav module as make necessary changes. Thanks. - Asiri
Thanks.
- Asiri
Regards, Milind
________________________________ From: Thomas Mortagne <[email protected]> To: XWiki Users <[email protected]> Sent: Fri, January 15, 2010 11:37:15 AM Subject: Re: [xwiki-users] Is there a plan to support LDAP
authentication
for WebDAV feature
On Fri, Jan 15, 2010 at 16:48, Milind Kamble <[email protected]> wrote:
Hi. I searched this mailing list and xwiki docs for this information but didn't find anything. Is there any plan to extend the authentication mechanism in WebDAV component to support LDAP? I felt that having access to page content and attachment folders via shared drive (using NetDrive) would be immensely attractive for end users because of the ability to use enhanced editors to directly edit page content and the ability to upload/manage multiple attachments.
Well authentication mechanism is generic for the whole XWiki platform. If WebDAV support any authentication then it supports LDAP, i doubt an authentication system has been coded specifically for WebDAV module. It would be weird that WebDAV does not use it but i don't know WebDAV module very well.
Thanks, Milind M
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Hi Milind, Asiri's mention of Basic and Digest authentication raises another question
in my mind. On reading the "Digest Authentication & XWiki" thread it seems that Digest authentication is probably out of question. Is there any documentation specifically for XWiki about how to setup https based login to send the user's password?
I'm not aware of such a documentation but I believe usual apache ssl configuration (along with modjk for connecting tomcat) would work fine here. However, If you have apache in front of tomcat (which is hosting XWiki) this might pose a problem for XWiki WebDAV implementation. I remember once that a user complained he was unable to configure XWiki WebDAV with apache sitting in front of tomcat. I'm not sure of this issue but it got buried because nobody had the time to look at WebDAV module at that time. It would be great if you can check whether this claim is true :) May be it's time we address this problem (if it is indeed addressable). I plan to look into LDAP authentication issue next few days. Hope I'll be able to fix it before I go on vacation ;) Your interest and enthusiasm for XWiki will keep us going forward :) - Asiri
________________________________ From: Asiri Rathnayake <[email protected]> To: XWiki Users <[email protected]> Sent: Sat, January 16, 2010 3:12:48 AM Subject: Re: [xwiki-users] Is there a plan to support LDAP authentication for WebDAV feature
Hi,
At the moment XWiki cannot support Digest Authentication and I'm not sure
whether LDAP authentication can be done for WebDAV. I will look around a bit and get back to you on this.
Basic or Diggest authentication are authentication entry point (which receive credentials), WebDav still have to use XWikiRightService to validate the credentials (authentication back-end where LDAP authenticator and others are).
Ok, I see.
In that case it should be possible to provide LDAP support without much effort. I will have a look at how credential validation is currently done in webdav module as make necessary changes.
Thanks.
- Asiri
Thanks.
- Asiri
Regards, Milind
________________________________ From: Thomas Mortagne <[email protected]> To: XWiki Users <[email protected]> Sent: Fri, January 15, 2010 11:37:15 AM Subject: Re: [xwiki-users] Is there a plan to support LDAP
authentication
for WebDAV feature
On Fri, Jan 15, 2010 at 16:48, Milind Kamble <[email protected]> wrote:
Hi. I searched this mailing list and xwiki docs for this information but didn't find anything. Is there any plan to extend the authentication mechanism in WebDAV component to support LDAP? I felt that having access to page content and attachment folders via shared drive (using NetDrive) would be immensely attractive for end users because of the ability to use enhanced editors to directly edit page content and the ability to upload/manage multiple attachments.
Well authentication mechanism is generic for the whole XWiki platform. If WebDAV support any authentication then it supports LDAP, i doubt an authentication system has been coded specifically for WebDAV module. It would be weird that WebDAV does not use it but i don't know WebDAV module very well.
Thanks, Milind M
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
Hi again, However, If you have apache in front of tomcat (which is hosting XWiki) this
might pose a problem for XWiki WebDAV implementation. I remember once that a user complained he was unable to configure XWiki WebDAV with apache sitting in front of tomcat. I'm not sure of this issue but it got buried because nobody had the time to look at WebDAV module at that time.
Seems my memory is wrong. May b i'm confusing myself with some other issue. I searched the mail archive but couldn't find the email i mentioned. Sorry for the noise. I'll verify this later. - Asiri
participants (3)
-
Asiri Rathnayake -
Milind Kamble -
Thomas Mortagne