Yes, you have "user_group" property: #-# Only members of the following group will be verified in the LDAP #-# otherwise only users that are found after searching starting from the base_DN # xwiki.authentication.ldap.user_group=cn=developers,ou=groups,o=MegaNova,c=US
Just note that it's probably slower than using the base_DN for filtering. On Tue, Dec 31, 2013 at 7:49 PM, Kelly Steinke <[email protected]> wrote: > Thanks for your help Thomas, > > I installed the LDAP Application to configure the sub wiki, which is working > as expected. Another quick question, instead of pointing the search DN to a > different OU for authentication, is it possible to instead limit login access > to the users within a specific AD group? > > > > ----- Original Message ----- > > From: "Thomas Mortagne" <[email protected]> > To: "XWiki Users" <[email protected]> > Sent: Tuesday, December 31, 2013 12:27:47 AM > Subject: Re: [xwiki-users] subwiki ldap authentication > > Yes you have only one xwiki.cfg which contains the default > configuration for each wiki but "You can also setup the LDAP > configuration in the XWiki.XWikiPreferences page by going to the > object editor. Simply replace xwiki.authentication.ldap. with ldap_. > For example xwiki.authentication.ldap.base_DN becomes ldap_base_DN." > > You can install > http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP+Application > which is doing exactly that (modifying XWikiPreferences page) in the > wikis you want to modify. > > On Tue, Dec 31, 2013 at 12:52 AM, Kelly Steinke <[email protected]> > wrote: >> Hi all, >> >> I just recently upgraded to 5.3 and have now created a sub wiki for the >> first time. My main wiki is configured to authenticate using LDAP and has a >> base search DN set to an OU called "AllUsers". In Active Directory the >> AllUsers OU contains several sub OU's which separate users according to >> branch, department ect. Having the LDAP set up to search the AllUsers OU >> allows for anyone in our company to use the main wiki by logging in with >> their network credentials and works great. >> >> When I created the sub wiki, I went through the wizard and selected to only >> have local users be available in it, as this sub wiki is to be used and >> administrated by a specific department only. What I would like to achieve >> now is to have the users of the sub wiki be authenticated using a different >> search base than that of the main wiki (aka the OU that contains only users >> for that department). >> >> So instead of using the following, which is defined in the xwiki.cfg: >> >> xwiki.authentication.ldap.base_DN=OU=All Users,DC=mycompanyt,DC=com >> >> The sub wiki would use this for authentication: >> >> xwiki.authentication.ldap.base_DN=OU=Accounting,OU=myBranch,OU=All >> Users,DC=mycompanyt,DC=com >> >> I read in the documentation " Use cases of configuration to authenticate >> users with LDAP " that each wiki in a multiwiki environment can have its own >> LDAP configuration, however I am unable to determine how to do this, as >> there is only one xwiki.cfg file that contains my LDAP configuration and >> there is no mention of any LDAP settings in the xwiki.preferences page of >> the sub wiki. >> >> any help is greatly appreciated! >> >> _______________________________________________ >> users mailing list >> [email protected] >> http://lists.xwiki.org/mailman/listinfo/users > > > > -- > Thomas Mortagne > _______________________________________________ > users mailing list > [email protected] > http://lists.xwiki.org/mailman/listinfo/users > > _______________________________________________ > users mailing list > [email protected] > http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
