Help with LDAP configuration

List overview All Threads
Download

newer

older

Bug-Key XWIKI-181

Xwiki and Geronimo

wb＠zootweb.com

3 Nov 2005 3 Nov '05

4:56 p.m.

Does anyone have any suggestions for me on what I might be missing getting xwiki integrated with my open-ldap? I've added the following to xwiki.cfg, then no users (including Admin) have the ability to log in. I've tried both existing xwiki users and non-existing xwiki users, and neither work: xwiki.authentication.ldap=1 xwiki.authentication.ldap.server=ldaphost xwiki.authentication.ldap.port=389 xwiki.authentication.ldap.base_DN=ou=People,dc=mydomain,dc=com xwiki.authentication.ldap.UID_attr=uid My LDAP administrator didn't think I needed any settings for the following configuration options, so these are currently commented out:

...

#xwiki.authentication.ldap.check_level #xwiki.authentication.ldap.bind_DN #xwiki.authentication.ldap.bind_pass #xwiki.authentication.ldap.fields_mapping

Any assistance is appreciated.

Show replies by date

kenk＠ucar.edu

3 Nov 3 Nov

5:04 p.m.

wb,

...

My LDAP administrator didn't think I needed any settings for the following configuration options, so these are currently commented out: #xwiki.authentication.ldap.check_level #xwiki.authentication.ldap.bind_DN #xwiki.authentication.ldap.bind_pass #xwiki.authentication.ldap.fields_mapping

In my limited experience with this, I found that you need a simple bind to make it work. -Ken

Andreas Haumer

7:49 p.m.

New subject: [xwiki-users] Help with LDAP configuration

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi! wb(a)zootweb.com schrieb:

...

#xwiki.authentication.ldap.check_level #xwiki.authentication.ldap.bind_DN #xwiki.authentication.ldap.bind_pass #xwiki.authentication.ldap.fields_mapping

You'll need these as well! Here's the LDAP part of my xwiki.cfg: xwiki.authentication.ldap=1 xwiki.authentication.ldap.check_level=1 xwiki.authentication.ldap.server=ldap.intern.xss.co.at xwiki.authentication.ldap.base_DN=ou=people,ou=accounts,dc=xss,dc=co,dc=at xwiki.authentication.ldap.bind_DN=uid={0},ou=people,ou=accounts,dc=xss,dc=co,dc=at xwiki.authentication.ldap.bind_pass={1} xwiki.authentication.ldap.UID_attr=uid xwiki.authentication.ldap.fields_mapping=name=uid,last_name=sn,first_name=givenName,fullname=cn,mail=mail,ldap_dn=dn Please note the placeholders {0} and {1} in the bind_DN and bind_pass attribute settings. These are replaced by the username and password the user gives at the login page. With this information xwiki performs the following actions against the LDAP server: 1.) bind with bind_DN and bind_pass 2.) Lookup of the user entry using UID_attr attribute and base_DN search base Look at the following log messages my OpenLDAP server produces when I log in to xwiki: [...] Nov 3 19:43:51 kant slapd[27005]: conn=20146 fd=32 ACCEPT from IP=192.168.162.2:56549 (IP=0.0.0.0:389) Nov 3 19:43:51 kant slapd[27032]: conn=20146 op=0 BIND dn="uid=andreas,ou=people,ou=accounts,dc=xss,dc=co,dc=at" method=128 Nov 3 19:43:51 kant slapd[27032]: conn=20146 op=0 BIND dn="uid=andreas,ou=people,ou=accounts,dc=xss,dc=co,dc=at" mech=SIMPLE ssf=0 Nov 3 19:43:51 kant slapd[27032]: conn=20146 op=0 RESULT tag=97 err=0 text= Nov 3 19:43:51 kant slapd[16011]: conn=20146 op=1 SRCH base="ou=people,ou=accounts,dc=xss,dc=co,dc=at" scope=2 deref=0 filter="(uid=andreas)" Nov 3 19:43:51 kant slapd[16011]: conn=20146 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Nov 3 19:43:51 kant slapd[27018]: conn=20146 op=2 UNBIND Nov 3 19:43:51 kant slapd[27018]: conn=20146 fd=32 closed [...] HTH - - andreas - -- Andreas Haumer | mailto:andreas@xss.co.at *x Software + Systeme | http://www.xss.co.at/ Karmarschgasse 51/2/20 | Tel: +43-1-6060114-0 A-1100 Vienna, Austria | Fax: +43-1-6060114-71

...PGP SIGNATURE...

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDaluwxJmyeGcXPhERAqdkAKCG4V3PNbw4IsbdlyvX50RpTQ21RgCgvmoF p43vIFHffybmQrzupxy0Oes= =W0Wr -----END PGP SIGNATURE-----

Tim Suter

7 Nov 7 Nov

9:01 p.m.

New subject: [xwiki-users] Help with LDAP configuration

Andreas is right. I banged my way through this integration. I couldn't get it to work anonymously so I had to create a user and a pass to login to LDAP with. Andreas Haumer wrote:

...

Hi! wb(a)zootweb.com schrieb:

Does anyone have any suggestions for me on what I might be missing

getting xwiki integrated with my open-ldap?

I've added the following to xwiki.cfg, then no users (including

Admin) have the ability to log in. I've tried both existing xwiki users and non-existing xwiki users, and neither work:

xwiki.authentication.ldap=1 xwiki.authentication.ldap.server=ldaphost xwiki.authentication.ldap.port=389 xwiki.authentication.ldap.base_DN=ou=People,dc=mydomain,dc=com xwiki.authentication.ldap.UID_attr=uid

My LDAP administrator didn't think I needed any settings for the

following configuration options, so these are currently commented out:

>#xwiki.authentication.ldap.check_level >#xwiki.authentication.ldap.bind_DN >#xwiki.authentication.ldap.bind_pass >#xwiki.authentication.ldap.fields_mapping

You'll need these as well! Here's the LDAP part of my xwiki.cfg: xwiki.authentication.ldap=1 xwiki.authentication.ldap.check_level=1 xwiki.authentication.ldap.server=ldap.intern.xss.co.at xwiki.authentication.ldap.base_DN=ou=people,ou=accounts,dc=xss,dc=co,dc=at xwiki.authentication.ldap.bind_DN=uid={0},ou=people,ou=accounts,dc=xss,dc=co,dc=at xwiki.authentication.ldap.bind_pass={1} xwiki.authentication.ldap.UID_attr=uid xwiki.authentication.ldap.fields_mapping=name=uid,last_name=sn,first_name=givenName,fullname=cn,mail=mail,ldap_dn=dn Please note the placeholders {0} and {1} in the bind_DN and bind_pass attribute settings. These are replaced by the username and password the user gives at the login page. With this information xwiki performs the following actions against the LDAP server: 1.) bind with bind_DN and bind_pass 2.) Lookup of the user entry using UID_attr attribute and base_DN search base Look at the following log messages my OpenLDAP server produces when I log in to xwiki: [...] Nov 3 19:43:51 kant slapd[27005]: conn=20146 fd=32 ACCEPT from IP=192.168.162.2:56549 (IP=0.0.0.0:389) Nov 3 19:43:51 kant slapd[27032]: conn=20146 op=0 BIND dn="uid=andreas,ou=people,ou=accounts,dc=xss,dc=co,dc=at" method=128 Nov 3 19:43:51 kant slapd[27032]: conn=20146 op=0 BIND dn="uid=andreas,ou=people,ou=accounts,dc=xss,dc=co,dc=at" mech=SIMPLE ssf=0 Nov 3 19:43:51 kant slapd[27032]: conn=20146 op=0 RESULT tag=97 err=0 text= Nov 3 19:43:51 kant slapd[16011]: conn=20146 op=1 SRCH base="ou=people,ou=accounts,dc=xss,dc=co,dc=at" scope=2 deref=0 filter="(uid=andreas)" Nov 3 19:43:51 kant slapd[16011]: conn=20146 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Nov 3 19:43:51 kant slapd[27018]: conn=20146 op=2 UNBIND Nov 3 19:43:51 kant slapd[27018]: conn=20146 fd=32 closed [...] HTH - andreas -- Andreas Haumer | mailto:andreas@xss.co.at *x Software + Systeme | http://www.xss.co.at/ Karmarschgasse 51/2/20 | Tel: +43-1-6060114-0 A-1100 Vienna, Austria | Fax: +43-1-6060114-71

Ludovic Dubost

8 Nov 8 Nov

1:15 a.m.

New subject: [xwiki-users] Help with LDAP configuration

We might need a task in JIRA to implemented anonymous binding Ludovic Tim Suter a écrit :

...

Andreas is right. I banged my way through this integration. I couldn't get it to work anonymously so I had to create a user and a pass to login to LDAP with. Andreas Haumer wrote:

Hi! wb(a)zootweb.com schrieb:

Does anyone have any suggestions for me on what I might be missing

getting xwiki integrated with my open-ldap?

I've added the following to xwiki.cfg, then no users (including

Admin) have the ability to log in. I've tried both existing xwiki users and non-existing xwiki users, and neither work:

following configuration options, so these are currently commented out:

> #xwiki.authentication.ldap.check_level > #xwiki.authentication.ldap.bind_DN > #xwiki.authentication.ldap.bind_pass > #xwiki.authentication.ldap.fields_mapping >

You'll need these as well! Here's the LDAP part of my xwiki.cfg: xwiki.authentication.ldap=1 xwiki.authentication.ldap.check_level=1 xwiki.authentication.ldap.server=ldap.intern.xss.co.at xwiki.authentication.ldap.base_DN=ou=people,ou=accounts,dc=xss,dc=co,dc=at xwiki.authentication.ldap.bind_DN=uid={0},ou=people,ou=accounts,dc=xss,dc=co,dc=at xwiki.authentication.ldap.bind_pass={1} xwiki.authentication.ldap.UID_attr=uid xwiki.authentication.ldap.fields_mapping=name=uid,last_name=sn,first_name=givenName,fullname=cn,mail=mail,ldap_dn=dn Please note the placeholders {0} and {1} in the bind_DN and bind_pass attribute settings. These are replaced by the username and password the user gives at the login page. With this information xwiki performs the following actions against the LDAP server: 1.) bind with bind_DN and bind_pass 2.) Lookup of the user entry using UID_attr attribute and base_DN search base Look at the following log messages my OpenLDAP server produces when I log in to xwiki: [...] Nov 3 19:43:51 kant slapd[27005]: conn=20146 fd=32 ACCEPT from IP=192.168.162.2:56549 (IP=0.0.0.0:389) Nov 3 19:43:51 kant slapd[27032]: conn=20146 op=0 BIND dn="uid=andreas,ou=people,ou=accounts,dc=xss,dc=co,dc=at" method=128 Nov 3 19:43:51 kant slapd[27032]: conn=20146 op=0 BIND dn="uid=andreas,ou=people,ou=accounts,dc=xss,dc=co,dc=at" mech=SIMPLE ssf=0 Nov 3 19:43:51 kant slapd[27032]: conn=20146 op=0 RESULT tag=97 err=0 text= Nov 3 19:43:51 kant slapd[16011]: conn=20146 op=1 SRCH base="ou=people,ou=accounts,dc=xss,dc=co,dc=at" scope=2 deref=0 filter="(uid=andreas)" Nov 3 19:43:51 kant slapd[16011]: conn=20146 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Nov 3 19:43:51 kant slapd[27018]: conn=20146 op=2 UNBIND Nov 3 19:43:51 kant slapd[27018]: conn=20146 fd=32 closed [...] HTH - andreas -- Andreas Haumer | mailto:andreas@xss.co.at *x Software + Systeme | http://www.xss.co.at/ Karmarschgasse 51/2/20 | Tel: +43-1-6060114-0 A-1100 Vienna, Austria | Fax: +43-1-6060114-71

------------------------- -- You receive this message as a subscriber of the xwiki-users(a)objectweb.org mailing list. To unsubscribe: mailto:xwiki-users-unsubscribe@objectweb.org For general help: mailto:sympa@objectweb.org?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws ------------------------------------------------------------------------ -- You receive this message as a subscriber of the xwiki-users(a)objectweb.org mailing list. To unsubscribe: mailto:xwiki-users-unsubscribe@objectweb.org For general help: mailto:sympa@objectweb.org?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws

-- Ludovic Dubost XPertNet: http://www.xpertnet.fr/ Blog: http://www.ludovic.org/blog/ XWiki: http://www.xwiki.com Skype: ldubost AIM: nvludo Yahoo: ludovic

6919

days inactive

6924

days old

xwiki-users@xwiki.org

Manage subscription

4 comments

5 participants

tags (0)

participants (5)

Andreas Haumer
kenk＠ucar.edu
Ludovic Dubost
Tim Suter
wb＠zootweb.com