Re: [xwiki-users] XWiki Integration with Active Directory
Thanks Thomas. It seems to be working now. On Sat, May 11, 2013 at 8:13 PM, Thomas Mortagne wrote: > On Sat, May 11, 2013 at 3:18 PM, Mohit Gupta wrote: > > Thanks Thomas. As per usecase link here is my updated configuration but > > still i get the same issue i.e > > > > com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP > > bind failed with LDAPException. > > Wrapped Exception: Invalid Credentials > > > > Here is my configuration > > > > > xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl > > xwiki.authentication.ldap=1 > > xwiki.authentication.ldap.server=int.myCompany.net > > xwiki.authentication.ldap.port=389 > > xwiki.authentication.ldap.base_DN=dc=int,dc=myCompany,dc=net > > > xwiki.authentication.ldap.bind_DN=int{0} > > Shouldn't it be xwiki.authentication.ldap.bind_DN=int\\{0} instead ? > > The best you can do right now is to get a LDAP client an try various > bind DN/password with it, when you find what is working then you can > use that to setup XWiki. > > > xwiki.authentication.ldap.bind_pass={1} > > xwiki.authentication.ldap.UID_attr=sAMAccountName > > > xwiki.authentication.ldap.fields_mapping=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,email=mail,ldap_dn=dn > > > > i am not sure , Am i still missing something? > > I am also not sure value given against xwiki.authentication.My active > > directory administrator just asked me to mention the value i stated > above? > > > > > > > > > > > > On Sat, May 11, 2013 at 4:20 PM, Thomas Mortagne > > wrote: > > > >> On Sat, May 11, 2013 at 12:18 PM, Mohit Gupta > wrote: > >> > Folks any pointers would be great help as Invalid Credentials is > wrong > >> > error message (becoz i credentials). I am not sure where exactly a > >> problem > >> > is. > >> > > >> > > >> > On Fri, May 10, 2013 at 8:18 PM, Mohit Gupta > wrote: > >> > > >> >> This issue is regarding my second try to integrate xwiki with my > company > >> >> active directory,but no success.I am getting the below issue > >> >> > >> >> com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: > LDAP > >> >> bind failed with LDAPException. > >> >> Wrapped Exception: Invalid Credentials > >> >> at > >> >> > >> > com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:172) > >> >> ~[xwiki-platform-legacy-oldcore-3.5.jar:na] > >> >> at > >> >> > >> > com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:101) > >> >> ~[xwiki-platform-legacy-oldcore-3.5.jar:na] > >> >> at > >> >> > >> > com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:305) > >> >> [xwiki-platform-legacy-oldcore-3.5.jar:na] > >> >> at > >> >> > >> > com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:182) > >> >> [xwiki-platform-legacy-oldcore-3.5.jar:na] > >> >> > >> >> I contacted my company ActiveDirectory Administrator and provided me > >> the > >> >> deatils required in xwiki.cfg file > >> >> Here is my my configuration in xwiki.cfg file > >> >> > >> >> > >> >> > >> > xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl > >> >> xwiki.authentication.ldap=1 > >> >> xwiki.authentication.ldap.server=int.myCompany.net > >> >> xwiki.authentication.ldap.port=389 > >> >> xwiki.authentication.ldap.UID_attr=sAMAccountName > >> >> > >> >> > >> > xwiki.authentication.ldap.fields_mapping=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,email=mail,ldap_dn=dn > >> >> xwiki.authentication.ldap.update_user=1 > >> >> xwiki.authentication.ldap.base_DN=dc=int,dc=myCompany,dc=net > >> >> > >> >> for below below attribute, i was told "New account will be created". > >> >> Though i am ot sure what does it mean. So i tried both the > >> >> options i.e keeping them default and also commented them out, but no > >> help > >> >> > >> >> > >> > xwiki.authentication.ldap.bind_DN=cn={0},department=USER,department=INFORMATIK,department=1230,o=MP > >> >> xwiki.authentication.ldap.bind_pass={1} > >> > >> This setup means that XWiki will access the LDAP server with the > >> following user: > >> > >> > "cn={whateveryouputintheloginform},department=USER,department=INFORMATIK,department=1230,o=MP" > >> and the password you indicate in the login form. This does not looks > >> like proper setup for AD, expecially the cn since as you indicated > >> yourself in xwiki.authentication.ldap.UID_attr the uid is in the field > >> sAMAccountName. > >> > >> Did ou tried what's on > >> > >> > http://platform.xwiki.org/xwiki/bin/view/AdminGuide/LDAPAuthenticationUseCases#HActiveDirectory > >> ? It generally working well. > >> > >> >> > >> > ___ > >> > users mailing list > >> > users@xwiki.org > >> > http://lists.xwiki.org/mailman/listinfo/users > >> > >> > >> > >> -- > >> Thomas Mortagne > >> ___ >
Re: [xwiki-users] XWiki Integration with Active Directory
On Sat, May 11, 2013 at 3:18 PM, Mohit Gupta wrote: > Thanks Thomas. As per usecase link here is my updated configuration but > still i get the same issue i.e > > com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP > bind failed with LDAPException. > Wrapped Exception: Invalid Credentials > > Here is my configuration > > xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl > xwiki.authentication.ldap=1 > xwiki.authentication.ldap.server=int.myCompany.net > xwiki.authentication.ldap.port=389 > xwiki.authentication.ldap.base_DN=dc=int,dc=myCompany,dc=net > xwiki.authentication.ldap.bind_DN=int{0} Shouldn't it be xwiki.authentication.ldap.bind_DN=int\\{0} instead ? The best you can do right now is to get a LDAP client an try various bind DN/password with it, when you find what is working then you can use that to setup XWiki. > xwiki.authentication.ldap.bind_pass={1} > xwiki.authentication.ldap.UID_attr=sAMAccountName > xwiki.authentication.ldap.fields_mapping=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,email=mail,ldap_dn=dn > > i am not sure , Am i still missing something? > I am also not sure value given against xwiki.authentication.My active > directory administrator just asked me to mention the value i stated above? > > > > > > On Sat, May 11, 2013 at 4:20 PM, Thomas Mortagne > wrote: > >> On Sat, May 11, 2013 at 12:18 PM, Mohit Gupta wrote: >> > Folks any pointers would be great help as Invalid Credentials is wrong >> > error message (becoz i credentials). I am not sure where exactly a >> problem >> > is. >> > >> > >> > On Fri, May 10, 2013 at 8:18 PM, Mohit Gupta wrote: >> > >> >> This issue is regarding my second try to integrate xwiki with my company >> >> active directory,but no success.I am getting the below issue >> >> >> >> com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP >> >> bind failed with LDAPException. >> >> Wrapped Exception: Invalid Credentials >> >> at >> >> >> com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:172) >> >> ~[xwiki-platform-legacy-oldcore-3.5.jar:na] >> >> at >> >> >> com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:101) >> >> ~[xwiki-platform-legacy-oldcore-3.5.jar:na] >> >> at >> >> >> com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:305) >> >> [xwiki-platform-legacy-oldcore-3.5.jar:na] >> >> at >> >> >> com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:182) >> >> [xwiki-platform-legacy-oldcore-3.5.jar:na] >> >> >> >> I contacted my company ActiveDirectory Administrator and provided me >> the >> >> deatils required in xwiki.cfg file >> >> Here is my my configuration in xwiki.cfg file >> >> >> >> >> >> >> xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl >> >> xwiki.authentication.ldap=1 >> >> xwiki.authentication.ldap.server=int.myCompany.net >> >> xwiki.authentication.ldap.port=389 >> >> xwiki.authentication.ldap.UID_attr=sAMAccountName >> >> >> >> >> xwiki.authentication.ldap.fields_mapping=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,email=mail,ldap_dn=dn >> >> xwiki.authentication.ldap.update_user=1 >> >> xwiki.authentication.ldap.base_DN=dc=int,dc=myCompany,dc=net >> >> >> >> for below below attribute, i was told "New account will be created". >> >> Though i am ot sure what does it mean. So i tried both the >> >> options i.e keeping them default and also commented them out, but no >> help >> >> >> >> >> xwiki.authentication.ldap.bind_DN=cn={0},department=USER,department=INFORMATIK,department=1230,o=MP >> >> xwiki.authentication.ldap.bind_pass={1} >> >> This setup means that XWiki will access the LDAP server with the >> following user: >> >> "cn={whateveryouputintheloginform},department=USER,department=INFORMATIK,department=1230,o=MP" >> and the password you indicate in the login form. This does not looks >> like proper setup for AD, expecially the cn since as you indicated >> yourself in xwiki.authentication.ldap.UID_attr the uid is in the field >> sAMAccountName. >> >> Did ou tried what's on >> >> http://platform.xwiki.org/xwiki/bin/view/AdminGuide/LDAPAuthenticationUseCases#HActiveDirectory >> ? It generally working well. >> >> >> >> > ___ >> > users mailing list >> > users@xwiki.org >> > http://lists.xwiki.org/mailman/listinfo/users >> >> >> >> -- >> Thomas Mortagne >> ___ >> users mailing list >> users@xwiki.org >> http://lists.xwiki.org/mailman/listinfo/users >> > ___ > users mailing list > users@xwiki.org > http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] XWiki Integration with Active Directory
Thanks Thomas. As per usecase link here is my updated configuration but still i get the same issue i.e com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP bind failed with LDAPException. Wrapped Exception: Invalid Credentials Here is my configuration xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl xwiki.authentication.ldap=1 xwiki.authentication.ldap.server=int.myCompany.net xwiki.authentication.ldap.port=389 xwiki.authentication.ldap.base_DN=dc=int,dc=myCompany,dc=net xwiki.authentication.ldap.bind_DN=int{0} xwiki.authentication.ldap.bind_pass={1} xwiki.authentication.ldap.UID_attr=sAMAccountName xwiki.authentication.ldap.fields_mapping=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,email=mail,ldap_dn=dn i am not sure , Am i still missing something? I am also not sure value given against xwiki.authentication.My active directory administrator just asked me to mention the value i stated above? On Sat, May 11, 2013 at 4:20 PM, Thomas Mortagne wrote: > On Sat, May 11, 2013 at 12:18 PM, Mohit Gupta wrote: > > Folks any pointers would be great help as Invalid Credentials is wrong > > error message (becoz i credentials). I am not sure where exactly a > problem > > is. > > > > > > On Fri, May 10, 2013 at 8:18 PM, Mohit Gupta wrote: > > > >> This issue is regarding my second try to integrate xwiki with my company > >> active directory,but no success.I am getting the below issue > >> > >> com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP > >> bind failed with LDAPException. > >> Wrapped Exception: Invalid Credentials > >> at > >> > com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:172) > >> ~[xwiki-platform-legacy-oldcore-3.5.jar:na] > >> at > >> > com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:101) > >> ~[xwiki-platform-legacy-oldcore-3.5.jar:na] > >> at > >> > com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:305) > >> [xwiki-platform-legacy-oldcore-3.5.jar:na] > >> at > >> > com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:182) > >> [xwiki-platform-legacy-oldcore-3.5.jar:na] > >> > >> I contacted my company ActiveDirectory Administrator and provided me > the > >> deatils required in xwiki.cfg file > >> Here is my my configuration in xwiki.cfg file > >> > >> > >> > xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl > >> xwiki.authentication.ldap=1 > >> xwiki.authentication.ldap.server=int.myCompany.net > >> xwiki.authentication.ldap.port=389 > >> xwiki.authentication.ldap.UID_attr=sAMAccountName > >> > >> > xwiki.authentication.ldap.fields_mapping=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,email=mail,ldap_dn=dn > >> xwiki.authentication.ldap.update_user=1 > >> xwiki.authentication.ldap.base_DN=dc=int,dc=myCompany,dc=net > >> > >> for below below attribute, i was told "New account will be created". > >> Though i am ot sure what does it mean. So i tried both the > >> options i.e keeping them default and also commented them out, but no > help > >> > >> > xwiki.authentication.ldap.bind_DN=cn={0},department=USER,department=INFORMATIK,department=1230,o=MP > >> xwiki.authentication.ldap.bind_pass={1} > > This setup means that XWiki will access the LDAP server with the > following user: > > "cn={whateveryouputintheloginform},department=USER,department=INFORMATIK,department=1230,o=MP" > and the password you indicate in the login form. This does not looks > like proper setup for AD, expecially the cn since as you indicated > yourself in xwiki.authentication.ldap.UID_attr the uid is in the field > sAMAccountName. > > Did ou tried what's on > > http://platform.xwiki.org/xwiki/bin/view/AdminGuide/LDAPAuthenticationUseCases#HActiveDirectory > ? It generally working well. > > >> > > ___ > > users mailing list > > users@xwiki.org > > http://lists.xwiki.org/mailman/listinfo/users > > > > -- > Thomas Mortagne > ___ > users mailing list > users@xwiki.org > http://lists.xwiki.org/mailman/listinfo/users > ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] XWiki Integration with Active Directory
On Sat, May 11, 2013 at 12:18 PM, Mohit Gupta wrote: > Folks any pointers would be great help as Invalid Credentials is wrong > error message (becoz i credentials). I am not sure where exactly a problem > is. > > > On Fri, May 10, 2013 at 8:18 PM, Mohit Gupta wrote: > >> This issue is regarding my second try to integrate xwiki with my company >> active directory,but no success.I am getting the below issue >> >> com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP >> bind failed with LDAPException. >> Wrapped Exception: Invalid Credentials >> at >> com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:172) >> ~[xwiki-platform-legacy-oldcore-3.5.jar:na] >> at >> com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:101) >> ~[xwiki-platform-legacy-oldcore-3.5.jar:na] >> at >> com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:305) >> [xwiki-platform-legacy-oldcore-3.5.jar:na] >> at >> com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:182) >> [xwiki-platform-legacy-oldcore-3.5.jar:na] >> >> I contacted my company ActiveDirectory Administrator and provided me the >> deatils required in xwiki.cfg file >> Here is my my configuration in xwiki.cfg file >> >> >> xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl >> xwiki.authentication.ldap=1 >> xwiki.authentication.ldap.server=int.myCompany.net >> xwiki.authentication.ldap.port=389 >> xwiki.authentication.ldap.UID_attr=sAMAccountName >> >> xwiki.authentication.ldap.fields_mapping=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,email=mail,ldap_dn=dn >> xwiki.authentication.ldap.update_user=1 >> xwiki.authentication.ldap.base_DN=dc=int,dc=myCompany,dc=net >> >> for below below attribute, i was told "New account will be created". >> Though i am ot sure what does it mean. So i tried both the >> options i.e keeping them default and also commented them out, but no help >> >> xwiki.authentication.ldap.bind_DN=cn={0},department=USER,department=INFORMATIK,department=1230,o=MP >> xwiki.authentication.ldap.bind_pass={1} This setup means that XWiki will access the LDAP server with the following user: "cn={whateveryouputintheloginform},department=USER,department=INFORMATIK,department=1230,o=MP" and the password you indicate in the login form. This does not looks like proper setup for AD, expecially the cn since as you indicated yourself in xwiki.authentication.ldap.UID_attr the uid is in the field sAMAccountName. Did ou tried what's on http://platform.xwiki.org/xwiki/bin/view/AdminGuide/LDAPAuthenticationUseCases#HActiveDirectory ? It generally working well. >> > ___ > users mailing list > users@xwiki.org > http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] XWiki Integration with Active Directory
Folks any pointers would be great help as Invalid Credentials is wrong error message (becoz i credentials). I am not sure where exactly a problem is. On Fri, May 10, 2013 at 8:18 PM, Mohit Gupta wrote: > This issue is regarding my second try to integrate xwiki with my company > active directory,but no success.I am getting the below issue > > com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP > bind failed with LDAPException. > Wrapped Exception: Invalid Credentials > at > com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:172) > ~[xwiki-platform-legacy-oldcore-3.5.jar:na] > at > com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:101) > ~[xwiki-platform-legacy-oldcore-3.5.jar:na] > at > com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:305) > [xwiki-platform-legacy-oldcore-3.5.jar:na] > at > com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:182) > [xwiki-platform-legacy-oldcore-3.5.jar:na] > > I contacted my company ActiveDirectory Administrator and provided me the > deatils required in xwiki.cfg file > Here is my my configuration in xwiki.cfg file > > > xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl > xwiki.authentication.ldap=1 > xwiki.authentication.ldap.server=int.myCompany.net > xwiki.authentication.ldap.port=389 > xwiki.authentication.ldap.UID_attr=sAMAccountName > > xwiki.authentication.ldap.fields_mapping=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,email=mail,ldap_dn=dn > xwiki.authentication.ldap.update_user=1 > xwiki.authentication.ldap.base_DN=dc=int,dc=myCompany,dc=net > > for below below attribute, i was told "New account will be created". > Though i am ot sure what does it mean. So i tried both the > options i.e keeping them default and also commented them out, but no help > > xwiki.authentication.ldap.bind_DN=cn={0},department=USER,department=INFORMATIK,department=1230,o=MP > xwiki.authentication.ldap.bind_pass={1} > ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
[xwiki-users] XWiki Integration with Active Directory
This issue is regarding my second try to integrate xwiki with my company active directory,but no success.I am getting the below issue com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP bind failed with LDAPException. Wrapped Exception: Invalid Credentials at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:172) ~[xwiki-platform-legacy-oldcore-3.5.jar:na] at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:101) ~[xwiki-platform-legacy-oldcore-3.5.jar:na] at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:305) [xwiki-platform-legacy-oldcore-3.5.jar:na] at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:182) [xwiki-platform-legacy-oldcore-3.5.jar:na] I contacted my company ActiveDirectory Administrator and provided me the deatils required in xwiki.cfg file Here is my my configuration in xwiki.cfg file xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl xwiki.authentication.ldap=1 xwiki.authentication.ldap.server=int.myCompany.net xwiki.authentication.ldap.port=389 xwiki.authentication.ldap.UID_attr=sAMAccountName xwiki.authentication.ldap.fields_mapping=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,email=mail,ldap_dn=dn xwiki.authentication.ldap.update_user=1 xwiki.authentication.ldap.base_DN=dc=int,dc=myCompany,dc=net for below below attribute, i was told "New account will be created". Though i am ot sure what does it mean. So i tried both the options i.e keeping them default and also commented them out, but no help xwiki.authentication.ldap.bind_DN=cn={0},department=USER,department=INFORMATIK,department=1230,o=MP xwiki.authentication.ldap.bind_pass={1} ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users