Hi,
finaly solved the problem and authentication via activ directory works.
the correct authentication class
xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl
and correcting an error in the bind_DN did it.
Thanks
Helmut
FabienB wrote:
>
> Here is my config working with the new and the old LDAP plugin.
>
> What I find strange in your config is the line
> xwiki.authentication.ldap.bind_DN
>
>
> #-# Turn LDAP authentication on - otherwise only XWiki authentication
> #-# 0 : disable
> #-# 1 : enable
> xwiki.authentication.ldap=1
>
> # Turn LDAP validate password on
> # 1 : enable
> # 0 : disable
> xwiki.authentication.ldap.validate_password=0
>
> #-# LDAP Server (Active Directory, eDirectory, OpenLDAP, etc.)
> xwiki.authentication.ldap.server=frvilsidc01.ad2.ad.toto.com
> xwiki.authentication.ldap.port=389
>
> #-# LDAP login, empty = anonymous access, otherwise specify full dn
> #-# {0} is replaced with the username, {1} with the password
> xwiki.authentication.ldap.bind_DN=ad2\\{0}
> xwiki.authentication.ldap.bind_pass={1}
>
> #-# only members of the following group will be verified in the LDAP
> # otherwise only users that are found after searching starting from the
> base_DN
> #xwiki.authentication.ldap.user_group=cn=developers,ou=groups,o=MegaNova,c=US
>
> #-# base DN for searches
> xwiki.authentication.ldap.base_DN=dc=ad,dc=toto,dc=com
>
> #-# specifies the LDAP attribute containing the identifier to be used as
> the
> XWiki name (default=cn)
> xwiki.authentication.ldap.UID_attr=sAMAccountName
>
> #-# retrieve the following fields from LDAP and store them in the XWiki
> user
> object (xwiki-attribute=ldap-attribute)
> #-# ldap_dn=dn -- dn is set by class, caches dn in XWiki.user object for
> faster access
> xwiki.authentication.ldap.fields_mapping=name=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,mail=mail
>
> #-# [SINCE 1.3M2, XWikiLDAPAuthServiceImpl]
> #-# on every login update the mapped attributes from LDAP to XWiki
> otherwise
> this happens only once when the XWiki account is created.
> xwiki.authentication.ldap.update_user=0
>
>
> With this config I am able to bind to the LDAP but not authenticate
>
>
--
View this message in context:
http://www.nabble.com/LDAP-Authentication-%28Active-Directory%29-tp17626760p17644340.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
