Le mercredi 5 septembre 2012, Adrian Fita a écrit :
> Thanks for the suggestion, but it doesn't seem to help. The users in
> my LDAP contain indeed a dot in the uid.
>
> So, I put xwiki.authentication.convertemail=2 in xwiki.conf and
> the authentication failed. I monitored the LDAP communication with the
> "LDAP debugging" settings in
> classes/logback.xml and noticed that the uid that is sent to LDAP
> contains "_" instead of "." (dot).
>
> So using this conf setting, would mean transforming the
> uids in LDAP to a format with underscores ("_") instead of dots ("."),
> which is not possible.
This precisely the purpose of it. And this is what I mean by having some
flexibility with your LDAP.
The issue we have is that the username logged in by the LDAP authentication
differ from the username entered at the prompt. My suggested workaround
until a fix is available is therefore to avoid that discrepancy by
authenticating John_Doe when the user enter John.Doe .
You may use a different field in your LDAP to contain these modified names,
and configure XWiki to use that field to find the User DN. The
authentication may still be done against the same DN. But you need some
tuning and modification in your LDAP anyway.
Hope this helps,
> --
> Fita Adrian
>
>
> On Wed, Sep 5, 2012 at 7:54 PM, Denis Gervalle <[email protected]> wrote:
> > Hi,
> >
> > You are probably experiencing the issue describe in XWIKI-3469 (
> > http://jira.xwiki.org/browse/XWIKI-3469).
> > If you have usernames with dots and some flexibility on your LDAP, a
> > partial workaround could to add in xwiki.cfg:
> >
> > xwiki.authentication.convertemail=2
> >
> > This will convert usernames containing dots (and @), into usernames with
> > underscores (John.Doe => John_Doe).
> > Since this cleanup is done earlier, it may improve this issue if user
> > respect their name properly and your ldap is adapted.
> > Regards,
> >
> > On Tue, Sep 4, 2012 at 2:50 PM, Adrian Fita <[email protected]>
> wrote:
> >
> >> Hi. I have an Xwiki Enterprise 3.4 installation and I'm studying the
> >> integration with LDAP.
> >>
> >> I managed to configure the authentication, I created the users and
> >> mapped the groups with the LDAP server.
> >>
> >> But I noticed that the performance dropped dramatically when using
> >> LDAP auth, in comparison with local users, specifically it takes
> >> around 10 seconds to access a page (down from <3sec).
> >>
> >> So, I started monitoring the traffic between the xwiki machine and the
> >> LDAP machine with tshark and I noticed that every time I click a link
> >> in xwiki, there is a lot of traffic with LDAP. Is there some way to
> >> improve this behaviour (I really don't understand why xwiki needs to
> >> talk with the LDAP server on every page request...)? I see that this
> >> is not a new issue [1], [2]. I also tried setting
> >> xwiki.authentication.always=0 in xwiki.cfg but I didn't notice any
> >> change (it being set to 0 by default already...). Would upgrading to
> >> the latest stable version improve the situation?
> >>
> >> 1. http://lists.xwiki.org/pipermail/users/2011-April/019745.html
> >> 2. http://jira.xwiki.org/browse/XWIKI-2516
> >>
> >> Thanks for your time.
> >> --
> >> Fita Adrian
> >> _______________________________________________
> >> users mailing list
> >> [email protected]
> >> http://lists.xwiki.org/mailman/listinfo/users
> >>
> >
> >
> >
> > --
> > Denis Gervalle
> > SOFTEC sa - CEO
> > eGuilde sarl - CTO
> > _______________________________________________
> > users mailing list
> > [email protected]
> > http://lists.xwiki.org/mailman/listinfo/users
> _______________________________________________
> users mailing list
> [email protected]
> http://lists.xwiki.org/mailman/listinfo/users
--
Denis Gervalle
SOFTEC sa - CEO
eGuilde sarl - CTO
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users
