Seems to be some AppServerTrustedAuthServiceImpl specfic thing. When looking at the code it looks like by default it does not even create the user at all, just set it as context user. As far as I can see in the code to actually create the user (and then for it to be automatically added to the default group(s)) this authenticator seems to expect the undocumented xwiki.authentication.createuser parameter in xwiki.cfg to be set to "empty" as in
xwiki.authentication.createuser=empty On Wed, Aug 26, 2015 at 6:13 PM, Tim Dudgeon <[email protected]> wrote: > So its not working for me. > > I've made sure the external user has the XWiki.XWikiAllGroup role and its > still not working. The user does not get the necessary rights and I get the > "Error. You are not allowed to view this document or perform this action" > error message. > Also, that user is not added to the XWiki users. > > Are there any example sof how to get this working? > > Tim > > > > > On 26/08/2015 02:51, Thomas Mortagne wrote: >> >> On Tue, Aug 25, 2015 at 5:04 PM, Tim Dudgeon >> <[email protected]> wrote: >>> >>> So it looks like the AppServerTrustedAuthServiceImpl class is calling >>> createUser(): >>> >>> https://github.com/xwiki/xwiki-platform/blob/dd5152e8ff39e6358c20becb4c9925628cf08ea4/xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/user/impl/xwiki/AppServerTrustedAuthServiceImpl.java >>> >>> But that should mean that my externally authenticated user should be >>> being >>> added and should get the XWiki.XWikiAllGroup. >>> >>> But that doesn't seem to be happening in my case as I'm being although >>> I'm >>> authenticated I'm denied access. >> >> >> It's easy to check in the administration who is part of XWikiAllGroup. >> >>> >>> Have I misunderstood the situation? >>> >>> Tim >>> >>> >>> >>> >>> On 24/08/2015 10:15, Thomas Mortagne wrote: >>>> >>>> >>>> Note that an authenticator is supposed to use >>>> com.xpn.xwiki.XWiki#createUser API which automatically add the user in >>>> the minimum groups. >>>> >>>> On Mon, Aug 24, 2015 at 4:11 PM, Thomas Mortagne >>>> <[email protected]> wrote: >>>>> >>>>> >>>>> The minimum group is XWiki.XWikiAllGroup. >>>>> >>>>> On Mon, Aug 24, 2015 at 1:50 PM, Tim Dudgeon >>>>> <[email protected]> wrote: >>>>>> >>>>>> >>>>>> On 24/08/2015 04:24, Thomas Mortagne wrote: >>>>>>> >>>>>>> >>>>>>> >>>>>>> Sounds like your user is not added in the right group(s) (which mean >>>>>>> it does not have any right). >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> Quite likely. But what groups are needed? >>>>>> >>>>>> >>>>>> Tim >>>>>> >>>>>> _______________________________________________ >>>>>> users mailing list >>>>>> [email protected] >>>>>> http://lists.xwiki.org/mailman/listinfo/users >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> -- >>>>> Thomas Mortagne >>>> >>>> >>>> >>>> >>>> >>> >>> >>> _______________________________________________ >>> users mailing list >>> [email protected] >>> http://lists.xwiki.org/mailman/listinfo/users >> >> >> >> > > > _______________________________________________ > users mailing list > [email protected] > http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
