Did you properly set xwiki.authentication.authclass property in xwiki.cfg file ? Are you sure you are looking at the right log file ? Do you have anything related to xwiki in those logs ? On Fri, Jul 11, 2014 at 6:11 PM, Markus Adler <[email protected]> wrote:

Hello,

I am having issues with configuring an LDAP connection to Active Directory. I have installed the LDAP Admin Extension and followed the instructions as per: http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP+Application#Commen...

Settings are as follows: Ldap: Yes Ldap server address: 10.0.0.11 Ldap server port: 389 Ldap login matching: CN={0},CN=Users,DC=city,DC=com Ldap password matching: {1} Ldap base dn: DC=city,DC=com Ldap UID attribute name: samaccountname Try local login: yes Update user from LDAP after login: no

The rest are blank or default. I've tried modifying the xwiki.cfg file manually and still no luck. I have tried monitoring the logs with the following set: com.xpn.xwiki.plugin.ldap - Trace com.xpn.xwiki.plugin.ldap.XWikiLDAPConfig - Trace com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection - Trace com.xpn.xwiki.user.impl.LDAP - Trace com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl - Trace As well as Error and Debug but can't find anything meaningful in the two log files I can locate: xwiki_db.log 2014_07_11.request.log

Any suggestions?

Markus _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne

On Fri, Jul 11, 2014 at 6:59 PM, Markus Adler <[email protected]> wrote:

I uncommented the xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl line and restarted xWiki with the stop_xwiki.bat and start_xwiki.bat scripts.

Those were the only two log files I could find. The request.log file appears unchanged when I tried to log in and the db.log just gives me: SET SCHEMA "PUBLIC"

If you enabled debug log it should be somwhere. When XWiki initialize it prints logs about SOLR server and other stuff, do you have any file with it ?

Just to confirm, when this is configured correctly, a user should only have to try to login with their domain credentials and xWiki will automatically register the account?

Yes.

...

Date: Fri, 11 Jul 2014 18:32:35 +0200 From: [email protected] To: [email protected] Subject: Re: [xwiki-users] xWiki 6.1 LDAP Issues

Did you properly set xwiki.authentication.authclass property in xwiki.cfg file ?

Are you sure you are looking at the right log file ? Do you have anything related to xwiki in those logs ?

On Fri, Jul 11, 2014 at 6:11 PM, Markus Adler <[email protected]> wrote:

...

Hello,

I am having issues with configuring an LDAP connection to Active Directory. I have installed the LDAP Admin Extension and followed the instructions as per: http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP+Application#Commen...

Settings are as follows: Ldap: Yes Ldap server address: 10.0.0.11 Ldap server port: 389 Ldap login matching: CN={0},CN=Users,DC=city,DC=com Ldap password matching: {1} Ldap base dn: DC=city,DC=com Ldap UID attribute name: samaccountname Try local login: yes Update user from LDAP after login: no

The rest are blank or default. I've tried modifying the xwiki.cfg file manually and still no luck. I have tried monitoring the logs with the following set: com.xpn.xwiki.plugin.ldap - Trace com.xpn.xwiki.plugin.ldap.XWikiLDAPConfig - Trace com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection - Trace com.xpn.xwiki.user.impl.LDAP - Trace com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl - Trace As well as Error and Debug but can't find anything meaningful in the two log files I can locate: xwiki_db.log 2014_07_11.request.log

Any suggestions?

Markus _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne

On Fri, Jul 11, 2014 at 9:10 PM, Markus Adler <[email protected]> wrote:

I have set the logging to "DEBUG" and just get the 2014_07_11.request.log file now. Is there another file extension I should be looking for?

I have no idea what application server you are using so I can't really tell you that, this is not an XWiki decision.

I also noticed a start_xwiki_debug.bat script but when I try to run that I get "\Microsoft was unexpected at this time."

I've attached the log file if it helps.

...

Date: Fri, 11 Jul 2014 19:04:39 +0200 From: [email protected] To: [email protected] Subject: Re: [xwiki-users] xWiki 6.1 LDAP Issues

On Fri, Jul 11, 2014 at 6:59 PM, Markus Adler <[email protected]> wrote:

...

I uncommented the xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl line and restarted xWiki with the stop_xwiki.bat and start_xwiki.bat scripts.

Those were the only two log files I could find. The request.log file appears unchanged when I tried to log in and the db.log just gives me: SET SCHEMA "PUBLIC"

If you enabled debug log it should be somwhere. When XWiki initialize it prints logs about SOLR server and other stuff, do you have any file with it ?

...

Just to confirm, when this is configured correctly, a user should only have to try to login with their domain credentials and xWiki will automatically register the account?

Yes.

...

...

Date: Fri, 11 Jul 2014 18:32:35 +0200 From: [email protected] To: [email protected] Subject: Re: [xwiki-users] xWiki 6.1 LDAP Issues

Did you properly set xwiki.authentication.authclass property in xwiki.cfg file ?

Are you sure you are looking at the right log file ? Do you have anything related to xwiki in those logs ?

On Fri, Jul 11, 2014 at 6:11 PM, Markus Adler <[email protected]> wrote:

...

Hello,

I am having issues with configuring an LDAP connection to Active Directory. I have installed the LDAP Admin Extension and followed the instructions as per: http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP+Application#Commen...

Settings are as follows: Ldap: Yes Ldap server address: 10.0.0.11 Ldap server port: 389 Ldap login matching: CN={0},CN=Users,DC=city,DC=com Ldap password matching: {1} Ldap base dn: DC=city,DC=com Ldap UID attribute name: samaccountname Try local login: yes Update user from LDAP after login: no

The rest are blank or default. I've tried modifying the xwiki.cfg file manually and still no luck. I have tried monitoring the logs with the following set: com.xpn.xwiki.plugin.ldap - Trace com.xpn.xwiki.plugin.ldap.XWikiLDAPConfig - Trace com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection - Trace com.xpn.xwiki.user.impl.LDAP - Trace com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl - Trace As well as Error and Debug but can't find anything meaningful in the two log files I can locate: xwiki_db.log 2014_07_11.request.log

Any suggestions?

Markus _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne

Ah, sorry. It's the stand alone version running on a windows platform. Also, I think I got it. The debug info shows up on the command prompt screen which gave me some idea of what was failing. It appears to not like binding with the login account. I've resolved the issue by binding to LDAP with a dedicated service account as I have with other systems and it appears to work now. Thanks for your help.

Date: Sat, 12 Jul 2014 10:51:39 +0200 From: [email protected] To: [email protected] Subject: Re: [xwiki-users] xWiki 6.1 LDAP Issues

On Sat, Jul 12, 2014 at 10:50 AM, Thomas Mortagne <[email protected]> wrote:

...

On Fri, Jul 11, 2014 at 9:10 PM, Markus Adler <[email protected]> wrote:

...

I have set the logging to "DEBUG" and just get the 2014_07_11.request.log file now. Is there another file extension I should be looking for?

I have no idea what application server you are using so I can't really tell you that, this is not an XWiki decision.

...

I also noticed a start_xwiki_debug.bat script but when I try to run that I get "\Microsoft was unexpected at this time."

I've attached the log file if it helps.

As suggested by it's name this seems to just be the list of requests you receive and nothing more.

...

...

...

Date: Fri, 11 Jul 2014 19:04:39 +0200 From: [email protected] To: [email protected] Subject: Re: [xwiki-users] xWiki 6.1 LDAP Issues

On Fri, Jul 11, 2014 at 6:59 PM, Markus Adler <[email protected]> wrote:

...

I uncommented the xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl line and restarted xWiki with the stop_xwiki.bat and start_xwiki.bat scripts.

Those were the only two log files I could find. The request.log file appears unchanged when I tried to log in and the db.log just gives me: SET SCHEMA "PUBLIC"

If you enabled debug log it should be somwhere. When XWiki initialize it prints logs about SOLR server and other stuff, do you have any file with it ?

...

Just to confirm, when this is configured correctly, a user should only have to try to login with their domain credentials and xWiki will automatically register the account?

Yes.

...

...

Date: Fri, 11 Jul 2014 18:32:35 +0200 From: [email protected] To: [email protected] Subject: Re: [xwiki-users] xWiki 6.1 LDAP Issues

Did you properly set xwiki.authentication.authclass property in xwiki.cfg file ?

Are you sure you are looking at the right log file ? Do you have anything related to xwiki in those logs ?

On Fri, Jul 11, 2014 at 6:11 PM, Markus Adler <[email protected]> wrote: > Hello, > > I am having issues with configuring an LDAP connection to Active Directory. > I have installed the LDAP Admin Extension and followed the instructions as per: > http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP+Application#Commen... > > Settings are as follows: > Ldap: Yes > Ldap server address: 10.0.0.11 > Ldap server port: 389 > Ldap login matching: CN={0},CN=Users,DC=city,DC=com > Ldap password matching: {1} > Ldap base dn: DC=city,DC=com > Ldap UID attribute name: samaccountname > Try local login: yes > Update user from LDAP after login: no > > The rest are blank or default. I've tried modifying the xwiki.cfg file manually and still no luck. > I have tried monitoring the logs with the following set: > com.xpn.xwiki.plugin.ldap - Trace > com.xpn.xwiki.plugin.ldap.XWikiLDAPConfig - Trace > com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection - Trace > com.xpn.xwiki.user.impl.LDAP - Trace > com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl - Trace > As well as Error and Debug but can't find anything meaningful in the two log files I can locate: > xwiki_db.log > 2014_07_11.request.log > > Any suggestions? > > Markus > _______________________________________________ > users mailing list > [email protected] > http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne

-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

I am having issues getting the ldap to work as well with the same stand alone install with Windows. I know I have all the settings because we use it on another system, but I am just unsure how they should be formatted. I need to do the bind account and have that info listed but still it isn't working. Here is what I have. My inputs are in bold. I also have had no luck turning on logging for the ldap. I tried Lilith, but as soon as I attempt to log into the system, it disconnects. Any help would be greatly appreciated. #-# LDAP authentication service # xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl #-# Turn LDAP authentication on - otherwise only XWiki authentication #-# - 0: disable #-# - 1: enable #-# The default is 0 xwiki.authentication.ldap=1 #-# LDAP Server (Active Directory, eDirectory, OpenLDAP, etc.) xwiki.authentication.ldap.server=*(I have the IP here)* xwiki.authentication.ldap.port=389 #-# LDAP login, empty = anonymous access, otherwise specify full dn #-# {0} is replaced with the user name, {1} with the password xwiki.authentication.ldap.bind_DN=cn=*(the bind account username only here)* xwiki.authentication.ldap.bind_pass=*(bind account password only)* #-# The Base DN used in LDAP searches xwiki.authentication.ldap.base_DN=*OU=_USERS,DC=na,DC=nice,DC=com* #-# LDAP query to search the user in the LDAP database (in case a static admin user is provided in #-# xwiki.authentication.ldap.bind_DN) #-# {0} is replaced with the user uid field name and {1} with the user name #-# The default is ({0}={1}) xwiki.authentication.ldap.user_search_fmt=({0}={1}) #-# Only members of the following group can authenticate. #-# The following kind of groups are supported: #-# * LDAP static groups (users/subgroups are listed statically in the group object) #-# * [Since 3.3M1] LDAP organization units (users/subgroups are sub object of the provided organization unit) #-# * [Since 3.3M1] LDAP filter (users/groups are object found in a search with the provided filter) # #xwiki.authentication.ldap.user_group=cn=developers,ou=groups,o=MegaNova,c=US #-# [Since 1.5RC1, XWikiLDAPAuthServiceImpl] #-# Only users not member of the following group can authenticate. #-# The following kind of groups are supported: #-# * LDAP static groups (users/subgroups are listed statically in the group object) #-# * [Since 3.3M1] LDAP organization units (users/subgroups are sub object of the provided organization unit) #-# * [Since 3.3M1] LDAP filter (users/groups are object found in a search with the provided filter) # xwiki.authentication.ldap.exclude_group=cn=admin,ou=groups,o=MegaNova,c=US #-# Specifies the LDAP attribute containing the identifier to be used as the XWiki name #-# The default is cn xwiki.authentication.ldap.UID_attr=*samAccountName* #-# [Since 1.5M1, XWikiLDAPAuthServiceImpl] #-# The potential LDAP groups classes. Separated by commas. # xwiki.authentication.ldap.group_classes=group,groupOfNames,groupOfUniqueNames,dynamicGroup,dynamicGroupAux,groupWiseDistributionList,posixGroup,apple-group #-# [Since 1.5M1, XWikiLDAPAuthServiceImpl] #-# The potential names of the LDAP groups fields containings the members. Separated by commas. # xwiki.authentication.ldap.group_memberfields=member,uniqueMember,memberUid #-# retrieve the following fields from LDAP and store them in the XWiki user object (xwiki-attribute=ldap-attribute) xwiki.authentication.ldap.fields_mapping=last_name=sn,first_name=givenName,email=mail #-# [Since 1.3M2, XWikiLDAPAuthServiceImpl] #-# On every login update the mapped attributes from LDAP to XWiki otherwise this happens only once when the XWiki #-# account is created. #-# - 0: only when creating user #-# - 1: at each authentication #-# The default is 0 xwiki.authentication.ldap.update_user=*1* #-# [Since 1.3M2, XWikiLDAPAuthServiceImpl] #-# Maps XWiki groups to LDAP groups, separator is "|". #-# The following kind of groups are supported: #-# * LDAP static groups (users/subgroups are listed statically in the group object) #-# * [Since 3.3M1] LDAP organization units (users/subgroups are sub object of the provided organization unit) #-# * [Since 3.3M1] LDAP filter (users/groups are object found in a search with the provided filter), #-# | character in the filter need to be escaped with backslash (\). #-# -- View this message in context: http://xwiki.475771.n2.nabble.com/xWiki-6-1-LDAP-Issues-tp7591284p7591496.ht... Sent from the XWiki- Users mailing list archive at Nabble.com.

Thanks for the response Clemens. I tried adjusting the setting per your suggestions with no help. One setting I am seeing I am not seeing in the xwiki settings is for security level. On the other server we have a security setting for Starttls that I am not seeing a place for in the xwiki.cfg. That could be the problem, but I am not positive. Do you think I am on the right track and if so, where would I put that? Thanks again Ron -- View this message in context: http://xwiki.475771.n2.nabble.com/xWiki-6-1-LDAP-Issues-tp7591284p7591501.ht... Sent from the XWiki- Users mailing list archive at Nabble.com.

Well the port is definitely 389 but I did tried enabling the ssl to no avail. Hehe, it should be this hard. I am missing something entirely evidently....I will keep banging it. I will find the combination eventually. Thank for the help Clemens. Let me know if you can think of anything else. Ron -- View this message in context: http://xwiki.475771.n2.nabble.com/xWiki-6-1-LDAP-Issues-tp7591284p7591505.ht... Sent from the XWiki- Users mailing list archive at Nabble.com.

You can enable the log you need in the Logging section of the administration page (bin/admin/XWiki/XWikiPreferences?editor=globaladmin§ion=Logging). Set TRACE for the packages listed in http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HEnableLD... (I really need to update that page), no need to restart. Then you need to know where your application server is writing the log. Once you have the log it's usually very clear what is wrong exactly. On Thu, Jul 31, 2014 at 3:20 PM, Pascal BASTIEN <[email protected]> wrote:

Hello,

My xwiki site authentificated on LDAPS. I applied this tip http://jira.xwiki.org/browse/XWIKI-865 to make it work.

Pascal B

________________________________ De : RonHancock <[email protected]> À : [email protected] Envoyé le : Mardi 29 juillet 2014 17h57 Objet : Re: [xwiki-users] xWiki 6.1 LDAP Issues

Well the port is definitely 389 but I did tried enabling the ssl to no avail. Hehe, it should be this hard. I am missing something entirely evidently....I will keep banging it. I will find the combination eventually. Thank for the help Clemens. Let me know if you can think of anything else.

Ron

-- View this message in context: http://xwiki.475771.n2.nabble.com/xWiki-6-1-LDAP-Issues-tp7591284p7591505.ht... Sent from the XWiki- Users mailing list archive at Nabble.com. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne