Re: [xwiki-users] Multiple LDAP backends?

2008-12-18 Thread BSayatovic
I'd also be interested in such a feature so we could fall back to our
backup LDAP server (actually, Active Directory).

Regards,
Brian.

-
CONFIDENTIALITY STATEMENT:
This e-mail transmission contains information that is intended to
be confidential.  It is intended only for the addressee named
above.  If you receive this e-mail in error, please do not read,
copy, or disseminate it.  If you are not the intended recipient,
any disclosure, copying, distribution or use of the contents of
this information is prohibited.   Please reply to the message
immediately by informing the sender that the message was
misdirected.  After replying, please erase it from your computer
system.  Your assistance in correcting this error is appreciated.
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


Re: [xwiki-users] Upgrading XWiki Enterprise From 1.2.2 to 1.6.1

2008-11-25 Thread BSayatovic
I recently upgraded from a 1.1 milestone to 1.6.0 in one fell swoop.

I did an export from my old installation, installed the new version in a
separate location, tweaked the out-of-the-box config (I kept notes on what
I customized last time so I could re-do it) and then did a selective
import.

I did have some troubles.  My exported XAR was huge and the 1.6.0 VM kept
running out of heap on import.  I ended up excluding history (*sniff*) and
also manually deleting unwanted items from the XAR, as well as increasing
the heap size.

But in the end, it worked!

Regards,
Brian.


   
 Chad Gorshing 
 [EMAIL PROTECTED] 
 il.comTo 
 Sent by:  users@xwiki.org   
 [EMAIL PROTECTED]  cc 
 ki.org
   Subject 
   [xwiki-users] Upgrading XWiki   
 11/25/2008 11:57  Enterprise From 1.2.2 to 1.6.1  
 AM
   
   
 Please respond to 
XWiki Users
 users@xwiki.org 
   
   





Greetings-

I am need to upgrade an installation of XWiki from 1.2.2 to the latest
(currently 1.6.1) and I am trying to put together an attack plan.  Should I
attempt an upgrade all the way to 1.6.1 in one fell swoop or should I
upgrade to 1.3.2 - 1.4.1 ...etc.  Do I need to upgrade the XAR for every
release or just once?

I am using hsqldb as my database, but after getting everything upgraded
correctly, I will be moving the database to MySQL.

I have searched the archives but I haven't found anything more recent and
also dealing with wide range of upgrading I need to do.

Regards

_
Get more done, have more fun, and stay more connected with Windows MobileĀ®.

http://clk.atdmt.com/MRT/go/119642556/direct/01/
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


-
CONFIDENTIALITY STATEMENT:
This e-mail transmission contains information that is intended to
be confidential.  It is intended only for the addressee named
above.  If you receive this e-mail in error, please do not read,
copy, or disseminate it.  If you are not the intended recipient,
any disclosure, copying, distribution or use of the contents of
this information is prohibited.   Please reply to the message
immediately by informing the sender that the message was
misdirected.  After replying, please erase it from your computer
system.  Your assistance in correcting this error is appreciated.
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


Re: [xwiki-users] Trouble with LDAP/ActiveDirectory authentication

2008-10-29 Thread BSayatovic
Thanks, Thomas.  I'll have to find time to upgrade to 1.6.1 to see if that
helps my intermediate plan.  For my ultimate plan, I just voted for #2518.

Regards,
Brian.

-
CONFIDENTIALITY STATEMENT:
This e-mail transmission contains information that is intended to
be confidential.  It is intended only for the addressee named
above.  If you receive this e-mail in error, please do not read,
copy, or disseminate it.  If you are not the intended recipient,
any disclosure, copying, distribution or use of the contents of
this information is prohibited.   Please reply to the message
immediately by informing the sender that the message was
misdirected.  After replying, please erase it from your computer
system.  Your assistance in correcting this error is appreciated.
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


Re: [xwiki-users] Trouble with LDAP/ActiveDirectory authentication

2008-10-28 Thread BSayatovic
 I think I know what is the problem: I just seen you used 1.6, did you
 tried 1.6.1 ?

I've not tried 1.6.1.  We were on 1.1-m1 for a LONG time.  I upgraded to
1.6 after a lot of red tape on my end.  Seems like the next day, 1.6.1 came
out :-(

 There is another thing user_group is used for : when listing LDAP
 group to find the user, LDAP authenticator get group's members DNs. So
 the user DN is already found during this process and don't need to be
 searched. But there is a bug in 1.6 (and fixed in 1.6.1) that makes
 search of DN by uid to fail.

I'd like to find that reported bug so I can develop a better understanding.

My ultimate goal is to have the ability to specify multiple groups (not
one) to filter for out of LDAP an have users in those automatically created
and NOT fall back to internal XWiki DB authentication.  The only reason I
turned off the group filter was because it doesn't support multiple groups
(I'm considering submitting a patch) hoping that I could just allow users
in any LDAP group to participate.

Regards,
Brian.


   
 Thomas Mortagne 
 thomas.mortagne@ 
 xwiki.com To 
 Sent by:  XWiki Users users@xwiki.org 
 [EMAIL PROTECTED]  cc 
 ki.org
   Subject 
   Re: [xwiki-users] Trouble with  
 10/28/2008 10:10  LDAP/ActiveDirectory authentication 
 AM
   
   
 Please respond to 
XWiki Users
 users@xwiki.org 
   
   




I think I know what is the problem: I just seen you used 1.6, did you
tried 1.6.1 ?

There is another thing user_group is used for : when listing LDAP
group to find the user, LDAP authenticator get group's members DNs. So
the user DN is already found during this process and don't need to be
searched. But there is a bug in 1.6 (and fixed in 1.6.1) that makes
search of DN by uid to fail.

On Tue, Oct 28, 2008 at 5:03 AM,  [EMAIL PROTECTED] wrote:
 user_group is really just a filter and do nothing else, so I don't
 have any idea how it can have influence on the skin.

 I also didn't expect it to have the effect it did.

 Is the user's profile is correctly created and contains rights
 informations ?

 I believe so.  I can go to the user's page in XWiki and it shows up as I
 expect it.

 Is this append all the time for any user ?

 Sadly, I can only test for myself at the moment as I don't have access to
 the other users' passwords.

 - - - - - - - - - -

 Now here's some more details:

 After I commented out the xwiki.authentication.ldap.user_group, I still
 couldn't log in (well, half way, as I said before).  Then I looked deeper
 in teh config and noticed that my search base DN was not what I expected.
 I changed it to include cn=Users:

xwiki.authentication.ldap.base_DN=cn=Users,dc=,dc=

 However, even then I couldn't log in.  I'm not confident that is the
right
 base_DN to use, but I'm unsure of what else to test.

 I also discovered that I had it falling back to XWiki's DB, so the
 problematic could still log in if I created her account manually:

xwiki.authentication.ldap.trylocal=1

 However, I'm not sure I like that solution.

 Regards,
 Brian.


 -
 CONFIDENTIALITY STATEMENT:
 This e-mail transmission contains information that is intended to
 be confidential.  It is intended only for the addressee named
 above.  If you receive this e-mail in error, please do not read,
 copy, or disseminate it.  If you are not the intended recipient,
 any disclosure, copying, distribution or use of the contents of
 this information is prohibited.   Please reply to the message
 immediately by informing the sender that the message was
 misdirected.  After replying, please erase it from your computer
 system.  Your assistance in correcting this error is appreciated.
 ___
 users mailing list
 users@xwiki.org
 http://lists.xwiki.org/mailman/listinfo/users




--
Thomas Mortagne
___
users mailing list

[xwiki-users] Trouble with LDAP/ActiveDirectory authentication

2008-10-21 Thread BSayatovic

I've set up XWiki 1.6 for my IT department, and configured the LDAP
authentication (the new, default XWikiLDAPAuthServiceImpl) to point to our
corporate Active Directory server.  For all users in the US-IS
ActievDirectory group, it works fine; however, I have some users that are
split off into US-info_mgmt that can't log in.  I don't have the power to
alter the Active Directory group membership or structure, so I'm stuck with
it how it is.

#-# only members of the following group will be verified in the LDAP
#-# otherwise only users that are found after searching starting from
the base_DN
xwiki.authentication.ldap.user_group=cn=US-IS,cn=Users,dc=,dc=

After looking through the XWikiLDAPAuthServiceImpl, it looks like this is a
single value, not multiple.  So, I can't simply list two groups.

My next thought was to comment this out because the
XWikiLDAPAuthServiceImpl looks like it will ignore the group check if its
not set to a value.  However, when I did this, no one could log in... sort
of.  Actually, I was able to log in, but then the custom logo in the skin
didn't show up, and the comments area showed another login screen embedded
within the page.

Any ideas on how I can configure this?

Regards,
Brian.


-
CONFIDENTIALITY STATEMENT:
This e-mail transmission contains information that is intended to
be confidential.  It is intended only for the addressee named
above.  If you receive this e-mail in error, please do not read,
copy, or disseminate it.  If you are not the intended recipient,
any disclosure, copying, distribution or use of the contents of
this information is prohibited.   Please reply to the message
immediately by informing the sender that the message was
misdirected.  After replying, please erase it from your computer
system.  Your assistance in correcting this error is appreciated.
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


[xwiki-users] Xwiki 1.6 installed but can't log in

2008-10-10 Thread BSayatovic

I've got XWiki 1.6 now downloaded and installed.  I've configured it to
authenticate using the LDAP implementation against my Active Directory
(which I already have working in an XWiki 1.1-m1 installation).  However,
my attempts to log in are futile.  I've turned on DEBUG logging and found
this:

  LDAP Bind starting
  LDAP Bind successfull
  LDAP Bind returned with result true
  LDAP searching user
  LDAP searching found user
  LDAP searching found DN: CN=Brij0429,CN=Users,DC=mid7000nt,DC=mlan
  LDAP comparing password
  LDAP Password check for user brij0429 failed with exception No Such
Attribute
  LDAP check in finally block
  LDAP Password check reverting to XWiki
  Password check for user null failed
  User brij0429 login has failed

The password check is failing?  However, in my xwiki.cfg, I've left the
password validation DISABLED:

  #-# Force to check password after LDAP connection
  #-# 0: disable
  #-# 1: enable
  xwiki.authentication.ldap.validate_password=0

What am I missing?

Regards,
Brian.


-
CONFIDENTIALITY STATEMENT:
This e-mail transmission contains information that is intended to
be confidential.  It is intended only for the addressee named
above.  If you receive this e-mail in error, please do not read,
copy, or disseminate it.  If you are not the intended recipient,
any disclosure, copying, distribution or use of the contents of
this information is prohibited.   Please reply to the message
immediately by informing the sender that the message was
misdirected.  After replying, please erase it from your computer
system.  Your assistance in correcting this error is appreciated.
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users


Re: [xwiki-users] Xwiki 1.6 installed but can't log in

2008-10-10 Thread BSayatovic

 Which LDAP authenticator are you using ? LDAPAuthServiceImpl or
 XWikiLDAPAuthServiceImpl ? Since XWiki 1.6 XWikiLDAPAuthServiceImpl is
 the default LDAP authenticator and have some differences in
 configurations.

I'm a bit confused.  When I used 1.1-m1, there was only the old
implementation (LDAPAuthServiceImpl?).  When I got 1.6, the xwiki.cfg
contained this by default:

#-# new LDAP authentication service
#xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl

That is the new implementation, as I understand it, but it was commented
out.  So, I assumed it was using the old one by default.  Is this not the
case?

Regardless, I'd like to use the new one.  So, in light of that, I've
uncommented that line now so that I am using XWikiLDAPAuthServiceImpl.

 By the way there is a bug in LDAP 1.6. It's already fixed and it will
 be included in 1.6.1. In the meantime you can use last snapshot of
 xwiki-core jar (download it at

http://maven.xwiki.org/snapshots/com/xpn/xwiki/platform/xwiki-core/1.6-SNAPSHOT/)

 or use the old authenticator (which is the one you used before I think
 as the new LDAP authenticator only exists since XWiki 1.3).

What is the bug?  I searched JIRA breifly, but nothign jumped out at me.


-
CONFIDENTIALITY STATEMENT:
This e-mail transmission contains information that is intended to
be confidential.  It is intended only for the addressee named
above.  If you receive this e-mail in error, please do not read,
copy, or disseminate it.  If you are not the intended recipient,
any disclosure, copying, distribution or use of the contents of
this information is prohibited.   Please reply to the message
immediately by informing the sender that the message was
misdirected.  After replying, please erase it from your computer
system.  Your assistance in correcting this error is appreciated.
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users