Re: [xwiki-users] User Screening at registration

2010-06-28 Thread Gonçalo Luiz
Hello,

I've followed your advise. What I need now is to manually confirm users'
accounts. The steps are:

1 - The user registers
2 - The system sends me an e-mail (this is already working)
3 - I get the e-mail, login as an admin and confirm the user
4 - The user logs in

How can I perform step 3?

Thank you for your valuable help.

Regards,
Gonçalo Luiz


On 26 June 2010 10:02, Caleb James DeLisle calebdeli...@lavabit.com wrote:

 This feature is not officially supported yet (but plans are in the works)

 What you can do is use the verified registration mechanism and set the
 verification email to not have the
 link for verifying the user but rather tell them that they will recieve
 word when their application is
 reviewed.
 See: 
 http://platform.xwiki.org/xwiki/bin/view/AdminGuide/AccessRights#HPrivateWikiwithpassword

 As far as telling the user that they have been approved, you may have to
 write a script to send out the email but you can use the mail sender plugin
 in your script.
 http://code.xwiki.org/xwiki/bin/view/Plugins/MailSenderPlugin

 Caleb

 Gonçalo Luiz wrote:
  Hello,
 
  I'm running a new installation on a public address. However, I'd like to
  screen new users. That is, new users insert their username and email, and
 I
  get a notification. Then they get a confirmation email only if I approve
 the
  user.
 
  Is this possible? If so, how? If not, is there any other way to screen
 user
  registrations?
 
  Thank you very much.
  Gonçalo Luiz
  ___
  users mailing list
  users@xwiki.org
  http://lists.xwiki.org/mailman/listinfo/users
 

 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users

___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


Re: [xwiki-users] User Screening at registration

2010-06-28 Thread Caleb James DeLisle
So you have the registration page tell the user that their registration will be 
reviewed,
and it sends _you_ and email? If so then you can just put the approval token in 
the email and
click it when you get it.

Alternatively you can log in and open the user's page in the object editor and 
set the Active
select menu to Active and save their page. This can also be done with a 
script but you'd have
to write it.

Caleb

Gonçalo Luiz wrote:
 Hello,
 
 I've followed your advise. What I need now is to manually confirm users'
 accounts. The steps are:
 
 1 - The user registers
 2 - The system sends me an e-mail (this is already working)
 3 - I get the e-mail, login as an admin and confirm the user
 4 - The user logs in
 
 How can I perform step 3?
 
 Thank you for your valuable help.
 
 Regards,
 Gonçalo Luiz
 
 
 On 26 June 2010 10:02, Caleb James DeLisle calebdeli...@lavabit.com wrote:
 
 This feature is not officially supported yet (but plans are in the works)

 What you can do is use the verified registration mechanism and set the
 verification email to not have the
 link for verifying the user but rather tell them that they will recieve
 word when their application is
 reviewed.
 See: 
 http://platform.xwiki.org/xwiki/bin/view/AdminGuide/AccessRights#HPrivateWikiwithpassword

 As far as telling the user that they have been approved, you may have to
 write a script to send out the email but you can use the mail sender plugin
 in your script.
 http://code.xwiki.org/xwiki/bin/view/Plugins/MailSenderPlugin

 Caleb

 Gonçalo Luiz wrote:
 Hello,

 I'm running a new installation on a public address. However, I'd like to
 screen new users. That is, new users insert their username and email, and
 I
 get a notification. Then they get a confirmation email only if I approve
 the
 user.

 Is this possible? If so, how? If not, is there any other way to screen
 user
 registrations?

 Thank you very much.
 Gonçalo Luiz
 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users

 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users

 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users
 

___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


Re: [xwiki-users] User Screening at registration

2010-06-28 Thread Gonçalo Luiz
Hello Caleb,

In fact there is another mail that is sent to the user (as there was before
my editing) without the token.

In the meanwhile I used the following snippet in a page to activate users:

{{velocity}}{{html wiki=false}}

#set ($results = $xwiki.wrapDocs($xwiki.searchDocuments(, BaseObject obj,
IntegerProperty act where obj.className = 'XWiki.XWikiUsers' and obj.name =
doc.fullName and act.id.id = obj.id and act.id.name = 'active' and act.value
 1)))

ul
#foreach($d in $results)
 li$xwiki.getUserName($d.fullName) (a href=$d.getURL('save',
'XWiki.XWikiUsers_0_active=1')xredirect=$doc.getURL()activate/a)/li
#end
/ul
{{/html}}

#if($results.empty)
No users lacking activation.
#end
{{/velocity}}

Not sure if it is the best solution, but it seems to be working.

Thanks very much.
Gonçalo Luiz


On 28 June 2010 12:06, Caleb James DeLisle calebdeli...@lavabit.com wrote:

 So you have the registration page tell the user that their registration
 will be reviewed,
 and it sends _you_ and email? If so then you can just put the approval
 token in the email and
 click it when you get it.

 Alternatively you can log in and open the user's page in the object editor
 and set the Active
 select menu to Active and save their page. This can also be done with a
 script but you'd have
 to write it.

 Caleb

 Gonçalo Luiz wrote:
  Hello,
 
  I've followed your advise. What I need now is to manually confirm users'
  accounts. The steps are:
 
  1 - The user registers
  2 - The system sends me an e-mail (this is already working)
  3 - I get the e-mail, login as an admin and confirm the user
  4 - The user logs in
 
  How can I perform step 3?
 
  Thank you for your valuable help.
 
  Regards,
  Gonçalo Luiz
 
 
  On 26 June 2010 10:02, Caleb James DeLisle calebdeli...@lavabit.com
 wrote:
 
  This feature is not officially supported yet (but plans are in the
 works)
 
  What you can do is use the verified registration mechanism and set the
  verification email to not have the
  link for verifying the user but rather tell them that they will recieve
  word when their application is
  reviewed.
  See:
 http://platform.xwiki.org/xwiki/bin/view/AdminGuide/AccessRights#HPrivateWikiwithpassword
 
  As far as telling the user that they have been approved, you may have to
  write a script to send out the email but you can use the mail sender
 plugin
  in your script.
  http://code.xwiki.org/xwiki/bin/view/Plugins/MailSenderPlugin
 
  Caleb
 
  Gonçalo Luiz wrote:
  Hello,
 
  I'm running a new installation on a public address. However, I'd like
 to
  screen new users. That is, new users insert their username and email,
 and
  I
  get a notification. Then they get a confirmation email only if I
 approve
  the
  user.
 
  Is this possible? If so, how? If not, is there any other way to screen
  user
  registrations?
 
  Thank you very much.
  Gonçalo Luiz
  ___
  users mailing list
  users@xwiki.org
  http://lists.xwiki.org/mailman/listinfo/users
 
  ___
  users mailing list
  users@xwiki.org
  http://lists.xwiki.org/mailman/listinfo/users
 
  ___
  users mailing list
  users@xwiki.org
  http://lists.xwiki.org/mailman/listinfo/users
 

 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users

___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


[xwiki-users] Page Rights Problem

2010-06-28 Thread Ramon Gomes Brandão - SERINT
Hi, 

 

Is there any news or work done on issue 
http://jira.xwiki.org/jira/browse/XWIKI-5256 ? I've realized that this issue 
doesn't appear on Firefox. I'm particularly interested on the solution of this 
one, as well as some news on when xwiki 2.4 stable will be available. 

 

Regards, 

 

Ramon Gomes Brandão

Analista Judiciário - Eng. de Computação

SERINT - Serviço de Inteligência /SUSEG/SEST

Tribunal de Justiça do Distrito Federal e Territórios

* ramon.bran...@tjdft.jus.br

*(61) 3343-7438, ramal 7438

 

Seja a mudança que queres ver no mundo  (Mahatma Gandhi)

 

Nota de Confidencialidade: Esta mensagem e seus eventuais anexos podem conter 
dados confidenciais ou privilegiados. Se você os recebeu por engano, ou não é 
um dos destinatários aos quais ela foi endereçada, por favor destrua-a e a 
todos os seus eventuais anexos ou cópias realizadas, imediatamente. É proibida 
a retenção, distribuição, divulgação ou utilização de quaisquer informações 
aqui contidas. Por favor, informe-nos sobre o recebimento indevido desta 
mensagem, retornando-a para o autor. Agradecemos a gentileza de sua cooperação.

 

___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


Re: [xwiki-users] User Screening at registration

2010-06-28 Thread Caleb James DeLisle
Looks right to me.

Gonçalo Luiz wrote:
 Hello Caleb,
 
 In fact there is another mail that is sent to the user (as there was before
 my editing) without the token.
 
 In the meanwhile I used the following snippet in a page to activate users:
 
 {{velocity}}{{html wiki=false}}
 
 #set ($results = $xwiki.wrapDocs($xwiki.searchDocuments(, BaseObject obj,
 IntegerProperty act where obj.className = 'XWiki.XWikiUsers' and obj.name =
 doc.fullName and act.id.id = obj.id and act.id.name = 'active' and act.value
  1)))
 
 ul
 #foreach($d in $results)
  li$xwiki.getUserName($d.fullName) (a href=$d.getURL('save',
 'XWiki.XWikiUsers_0_active=1')xredirect=$doc.getURL()activate/a)/li
 #end
 /ul
 {{/html}}
 
 #if($results.empty)
 No users lacking activation.
 #end
 {{/velocity}}
 
 Not sure if it is the best solution, but it seems to be working.
 
 Thanks very much.
 Gonçalo Luiz
 
 
 On 28 June 2010 12:06, Caleb James DeLisle calebdeli...@lavabit.com wrote:
 
 So you have the registration page tell the user that their registration
 will be reviewed,
 and it sends _you_ and email? If so then you can just put the approval
 token in the email and
 click it when you get it.

 Alternatively you can log in and open the user's page in the object editor
 and set the Active
 select menu to Active and save their page. This can also be done with a
 script but you'd have
 to write it.

 Caleb

 Gonçalo Luiz wrote:
 Hello,

 I've followed your advise. What I need now is to manually confirm users'
 accounts. The steps are:

 1 - The user registers
 2 - The system sends me an e-mail (this is already working)
 3 - I get the e-mail, login as an admin and confirm the user
 4 - The user logs in

 How can I perform step 3?

 Thank you for your valuable help.

 Regards,
 Gonçalo Luiz


 On 26 June 2010 10:02, Caleb James DeLisle calebdeli...@lavabit.com
 wrote:
 This feature is not officially supported yet (but plans are in the
 works)
 What you can do is use the verified registration mechanism and set the
 verification email to not have the
 link for verifying the user but rather tell them that they will recieve
 word when their application is
 reviewed.
 See:
 http://platform.xwiki.org/xwiki/bin/view/AdminGuide/AccessRights#HPrivateWikiwithpassword
 As far as telling the user that they have been approved, you may have to
 write a script to send out the email but you can use the mail sender
 plugin
 in your script.
 http://code.xwiki.org/xwiki/bin/view/Plugins/MailSenderPlugin

 Caleb

 Gonçalo Luiz wrote:
 Hello,

 I'm running a new installation on a public address. However, I'd like
 to
 screen new users. That is, new users insert their username and email,
 and
 I
 get a notification. Then they get a confirmation email only if I
 approve
 the
 user.

 Is this possible? If so, how? If not, is there any other way to screen
 user
 registrations?

 Thank you very much.
 Gonçalo Luiz
 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users

 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users

 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users

 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users

 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users
 

___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


[xwiki-users] LDAP challenges...

2010-06-28 Thread John Cavanaugh
Folks, 

 

Im looking for some assistance here in getting LDAP configured properly.
In the past Ive successfully enabled LDAP for other applications we use
(Coverity, XPlanner, Hudson, Reviewboard), but XWiki has proven to be quite
difficult.

 

I am trying to configure  connect with the following

. to a generic LDAP server (ie. Not active directory)

. In our particular instance uid is the manner in which people login
and this uid happens to be a fully qualified email address

. I want people to login with this uid (firstname.lastn...@foo.com)

. I would like to use an ldap filter to determine who can login

 

 

I have been able to login with the configuration below as a proof of concept
to prove SSL is working etc.  But there are several things here blocking me
from moving forward, Im hoping there is a way to reconfigure or file a
defect/enhancement to get the implementation changed.

 

. The xwiki.authentication.ldap.exclude_group 
xwiki.authentication.ldap.user_group.   We dont have a group in ou=Groups
that has all the people in our organization so there no way to use the
user_group field.   Is there some way to instead use a filter query.

. The xwiki.authentication.ldap.UID_attr field, seems like I should
want to leave it as cn but I was unable to get it to work unless I set it to
uid, because it appears that the queries into LDAP are hardcoded to use cn
otherwise.   But using uid as the username in XWiki creates accounts like
firstnamelastn...@hpcom where all the .'s have been eliminated.
Unfortunately with the strategy employed here there is no way to ensure that
the username mapping is unique because just dropping the .'s can lead to
conflicts, consider for example the following uid's,  john.c.h...@foo.com
and john.ch...@foo.com both get reduced to johnch...@foocom.   I know you
are thinking, geez that will never happen.   Unfortunately with lots of
employees, we have LOTS of multiple names (we must have like 20+ Tom
Smith's, etc) so all these corner cases do in fact crop up.

. Also it appears that once you configure ldap, you cant add local
users thru the ui.   I like to use local users for the occasional group
account or machine accounts.

 

At this point with all these challenges as much as I want to I cant roll out
xwiki to our org.   Any help on these  issues would be much appreciated.

 

 

As I reference I would suggest taking a look at Hudson CI.   Configuring
Hudson to use LDAP is *very* simple  covers all the features Ive ever
needed in the past.   As an example I can configure the user search filter
to be (((objectClass=person)(hpOrganizationChartAcronym=C_OR))(uid={0}))
to do the filtering by group etc.   

 

 


#

#-# new LDAP authentication service

xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthSer
viceImpl

 

#-# Turn LDAP authentication on - otherwise only XWiki authentication

#-# 0: disable

#-# 1: enable

xwiki.authentication.ldap=1

 

#-# LDAP Server (Active Directory, eDirectory, OpenLDAP, etc.)

xwiki.authentication.ldap.server=ldap.hp.com

xwiki.authentication.ldap.port=636

 

#-# LDAP login, empty = anonymous access, otherwise specify full dn

#-# {0} is replaced with the username, {1} with the password

xwiki.authentication.ldap.bind_DN=

xwiki.authentication.ldap.bind_pass=

 

#-# Force to check password after LDAP connection

#-# 0: disable

#-# 1: enable

xwiki.authentication.ldap.validate_password=0

 

#-# base DN for searches

xwiki.authentication.ldap.base_DN=o=hp.com

 

#-# Specifies the LDAP attribute containing the identifier to be used as the
XWiki name (default=cn)

xwiki.authentication.ldap.UID_attr=uid

 

#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl]

#-# Specifies the LDAP attribute containing the password to be used when
xwiki.authentication.ldap.validate_password is set to 1

xwiki.authentication.ldap.password_field=userPassword

 

#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl]

#-# The potential LDAP groups classes. Separated by commas.

xwiki.authentication.ldap.group_classes=group,groupOfNames,groupOfUniqueName
s,dynamicGroup,dynamicGroupAux,groupWiseDistributionList

 

#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl]

#-# The potential names of the LDAP groups fields containings the members.
Separated by commas.

xwiki.authentication.ldap.group_memberfields=member,uniqueMember

 

#-# retrieve the following fields from LDAP and store them in the XWiki user
object (xwiki-attribute=ldap-attribute)

xwiki.authentication.ldap.fields_mapping=last_name=sn,first_name=givenName,
email=uid,phone=telephoneNumber

 

#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]

#-# on every login update the mapped attributes from LDAP to XWiki otherwise
this happens only once when the XWiki account is created.

xwiki.authentication.ldap.update_user=1

 

#-# [Since 1.3M2,