yes, it depends mailing how much users yours groups contains since
they are resolved and cached on XWiki side so that can be a bit long
for very big groups the first time. It's not first log on of each
users, the cache is kept for all users it's just the first time an
authentication is done (and then when the cache is outdated, see
xwiki.authentication.ldap.groupcache_expiration).
On Fri, Mar 14, 2014 at 4:04 PM, Pascal BASTIEN <pbasnews-xwiki(a)yahoo.fr> wrote:
Yes thanks you.
I already use maping ldap group in my xwiki.cfg. It was working but
performence is lower (first log on is long)
________________________________
De : Thomas Mortagne <thomas.mortagne(a)xwiki.com>
À : Pascal BASTIEN <pbasnews-xwiki(a)yahoo.fr>
Cc : XWiki Users <users(a)xwiki.org>
Envoyé le : Vendredi 14 mars 2014 15h48
Objet : Re: [xwiki-users] Some question about ACL
Depends how advanced you need it to be but you can map LDAP "groups"
(it's actually more than what is generally called groups in LDAP
world) and you a few related documentation on
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/LDAPAuthenticationUseCa…
and above xwiki.authentication.ldap.group_mapping property in
xwiki.cfg itself.
On Fri, Mar 14, 2014 at 2:43 PM, Pascal BASTIEN <pbasnews-xwiki(a)yahoo.fr>
wrote:
> K Thanks you.
>
> I think I can use xwiki.users.initialGroups property for my ldap user
> because the first time my ldap user log on my new xwiki, a new user
> associate is created.
>
> Anyway, actually I'm testing ACL with some different user case like:
> someone
> are in 2 differents groups and must access at space protected by
> differents
> access rights with this 2 groups...
> Have you a advanced documentation about this?
>
>
--
Thomas Mortagne