March 2013 - xwiki-users@xwiki.org

[xwiki-users] XWiki Enterprise Manager 4.5.1: Editing a user profile
by Naoufel Chbihi 11 Mar '13

11 Mar '13

Hello I have just set up XWiki Enterprise Manager 4.5.1 and installed the Administration application. I logged in and went to the "Administration: Users" page. However, when I click on the "Edit" icon to edit a user profile, the popup area that appears doesn't show any fields. It just says "For more options to edit this user, please go to the user's profile" and there is a "Save" and "Cancel" button. There is supposed to be a lot more here. I think that I'm missing an extension. Does anyone know what I need to do? Thank you. Naoufel

4 8

[xwiki-users] User permissions
by Matt Lamoureux 11 Mar '13

11 Mar '13

Hi all, I am having trouble understanding user permissions again. I have Xwiki set up for LDAP authentication, so any user who signs in gets added to the XWikiAllGroup. For this example, let's say I have GroupA and GroupB, both of which have their own sets of protected pages. The way it works now is that I have to remove each user from XWikiAllGroup and add them to either GroupA or GroupB. This way, the protected pages are set to deny to anyone NOT a member of that particular group. My question is: how can I get a single member of Group A to be authorized for the GroupB protected pages? I cannot simply add them to GroupB - they would then not be allowed access to either set of pages because the deny rules take precedence. I could add them to a third group called GroupsA&B, but that seems a poor solution, as this would only increase in complexity in the future. Do I have my architecture of protected pages set up wrong - is there are more logical way to configure this? Thanks in advance! - Matt L.

2 2

Re: [xwiki-users] kerberos SSO -> strip domainname from username
by Mark Jas 10 Mar '13

10 Mar '13

Mailed to soon. Solved it. The default works just fine. xwiki.authentication.trustedldap.remoteUserParser=(.+)(a)(.+) xwiki.authentication.trustedldap.remoteUserMapping.1=login -----Oorspronkelijk bericht----- Van: users-bounces(a)xwiki.org [mailto:users-bounces@xwiki.org] Namens Mark Verzonden: zaterdag 9 maart 2013 17:08 Aan: XWiki Users Onderwerp: Re: [xwiki-users] kerberos SSO -> strip domainname from username I managed to compile and activate the xwiki-authentication-trusted-ldap plugin. But still the same result: login works with login prompt, fails with SSO. Debugging showed me that the xwiki doesn't accept the SSO because username doesn't match. I suppose my xwiki.authentication.trustedldap.remoteUserParser settings is incorrect. Can anyone tell me what this settings should be when my kerberos sso user is "user(a)DOMAIN.COM" and my sAMAccountName in ldap is just "user"? On Fri, Mar 8, 2013 at 1:53 PM, Mark Jas <mark(a)nieuwenborg.nl> wrote: > Hi Thomas, > > Thanks for your reply. I should have given you some more info. > I'm using the default authenticator, because if I use the com.xpn.xwiki.user.impl.xwiki.AppServerTrustedKerberosAuthServiceImpl, my ldap stops working. > > If I use com.xpn.xwiki.user.impl.xwiki.AppServerTrustedKerberosAuthServiceImpl Kerberos works fine, but new users aren't created, and group sync isn't working etc etc... com.xpn.xwiki.user.impl.xwiki.AppServerTrustedKerberosAuthServiceImpl only know about remote user and just create the user page, it's not connecting to LDAP to update informations or group membership like the LDAP authenticator do. There is no such authenticator by default but you can look at https://github.com/xwiki-contrib/sandbox/tree/master/authenticators/xwiki-a…. > > Maybe my question should be: How do I get LDAP working with the Kerberos authenticator? > > Mark > > > On Tue, Mar 5, 2013 at 4:35 PM, Mark Jas <mark(a)nieuwenborg.nl> wrote: >> Hi all, >> >> >> I have configured xwiki with LDAP authentication and kerberos SSO. >> >> When I use a browser without automatic Kerberos SSO, I get a keberos login page. When I fill in username and password manually it works great. >> >> But when I set the browser to use automatic logon, I get the xwiki >> login page! (at least in FireFox, IE says “cannot show page”) >> >> I get the same results when I manually login with “username@DOMAIN” >> and “password”. So I think the domain part is used in the automatic >> logon. (and is the actual problem…) >> >> >> I see there is java code that strips the @DOMAIN part from the username. But I have no idea how or where to implement this. I hope some can help me! > > I never used it myself but from what I see in the code it's supposed to do that all the time. Maybe there is a bug. > > You can try to enable debug log[1] for class > com.xpn.xwiki.user.impl.xwiki.AppServerTrustedKerberosAuthServiceImpl > (that's the authenticator you are using, right ?) to see what's going on. At least ou should get what remote user XWiki is getting if any. > > [1] http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Logging > >> >> >> Mark >> >> >> _______________________________________________ >> users mailing list >> users(a)xwiki.org >> http://lists.xwiki.org/mailman/listinfo/users > > > > -- > Thomas Mortagne > _______________________________________________ > users mailing list > users(a)xwiki.org > http://lists.xwiki.org/mailman/listinfo/users > > _______________________________________________ > users mailing list > users(a)xwiki.org > http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne _______________________________________________ users mailing list users(a)xwiki.org http://lists.xwiki.org/mailman/listinfo/users _______________________________________________ users mailing list users(a)xwiki.org http://lists.xwiki.org/mailman/listinfo/users

2 1

Re: [xwiki-users] kerberos SSO -> strip domainname from username
by Mark Jas 09 Mar '13

09 Mar '13

I managed to compile and activate the xwiki-authentication-trusted-ldap plugin. But still the same result: login works with login prompt, fails with SSO. Debugging showed me that the xwiki doesn't accept the SSO because username doesn't match. I suppose my xwiki.authentication.trustedldap.remoteUserParser settings is incorrect. Can anyone tell me what this settings should be when my kerberos sso user is "user(a)DOMAIN.COM" and my sAMAccountName in ldap is just "user"? On Fri, Mar 8, 2013 at 1:53 PM, Mark Jas <mark(a)nieuwenborg.nl> wrote: > Hi Thomas, > > Thanks for your reply. I should have given you some more info. > I'm using the default authenticator, because if I use the com.xpn.xwiki.user.impl.xwiki.AppServerTrustedKerberosAuthServiceImpl, my ldap stops working. > > If I use com.xpn.xwiki.user.impl.xwiki.AppServerTrustedKerberosAuthServiceImpl Kerberos works fine, but new users aren't created, and group sync isn't working etc etc... com.xpn.xwiki.user.impl.xwiki.AppServerTrustedKerberosAuthServiceImpl only know about remote user and just create the user page, it's not connecting to LDAP to update informations or group membership like the LDAP authenticator do. There is no such authenticator by default but you can look at https://github.com/xwiki-contrib/sandbox/tree/master/authenticators/xwiki-a…. > > Maybe my question should be: How do I get LDAP working with the Kerberos authenticator? > > Mark > > > On Tue, Mar 5, 2013 at 4:35 PM, Mark Jas <mark(a)nieuwenborg.nl> wrote: >> Hi all, >> >> >> I have configured xwiki with LDAP authentication and kerberos SSO. >> >> When I use a browser without automatic Kerberos SSO, I get a keberos login page. When I fill in username and password manually it works great. >> >> But when I set the browser to use automatic logon, I get the xwiki >> login page! (at least in FireFox, IE says “cannot show page”) >> >> I get the same results when I manually login with “username@DOMAIN” >> and “password”. So I think the domain part is used in the automatic >> logon. (and is the actual problem…) >> >> >> I see there is java code that strips the @DOMAIN part from the username. But I have no idea how or where to implement this. I hope some can help me! > > I never used it myself but from what I see in the code it's supposed to do that all the time. Maybe there is a bug. > > You can try to enable debug log[1] for class > com.xpn.xwiki.user.impl.xwiki.AppServerTrustedKerberosAuthServiceImpl > (that's the authenticator you are using, right ?) to see what's going on. At least ou should get what remote user XWiki is getting if any. > > [1] http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Logging > >> >> >> Mark >> >> >> _______________________________________________ >> users mailing list >> users(a)xwiki.org >> http://lists.xwiki.org/mailman/listinfo/users > > > > -- > Thomas Mortagne > _______________________________________________ > users mailing list > users(a)xwiki.org > http://lists.xwiki.org/mailman/listinfo/users > > _______________________________________________ > users mailing list > users(a)xwiki.org > http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne _______________________________________________ users mailing list users(a)xwiki.org http://lists.xwiki.org/mailman/listinfo/users

1 0

[xwiki-users] myxwiki: terrible performance on initial connect
by Stefan Taferner 09 Mar '13

09 Mar '13

Hello all! I do not know if this is normal, but we have terrible performance upon the initial connect to our wiki (selfbus.myxwiki.org) Often the connection times out or hangs. Retrying shows the start page. Once the wiki is initially loaded one can work as normal. Another person trying to open the wiki page at the same time has the same timeout problems. Even using another browser shows the same delay in loading. So I do not think the wiki is swapped out or something like that. It rather looks like problems in the name resolution, if I may guess. Is there anything that can be done to improve the situation? Kind regards, Stefan

2 2

Re: [xwiki-users] kerberos SSO -> strip domainname from username
by Mark Jas 08 Mar '13

08 Mar '13

Hi Thomas, I think xwiki-authentication-trusted-ldap is exactly what I need. But I'm not that experienced to compiling java. Can I download it somewhere as a .jar file? Or can you point me the way to extract this from git and compile it myself? Thanks, Mark On Fri, Mar 8, 2013 at 1:53 PM, Mark Jas <mark(a)nieuwenborg.nl> wrote: > Hi Thomas, > > Thanks for your reply. I should have given you some more info. > I'm using the default authenticator, because if I use the com.xpn.xwiki.user.impl.xwiki.AppServerTrustedKerberosAuthServiceImpl, my ldap stops working. > > If I use com.xpn.xwiki.user.impl.xwiki.AppServerTrustedKerberosAuthServiceImpl Kerberos works fine, but new users aren't created, and group sync isn't working etc etc... com.xpn.xwiki.user.impl.xwiki.AppServerTrustedKerberosAuthServiceImpl only know about remote user and just create the user page, it's not connecting to LDAP to update informations or group membership like the LDAP authenticator do. There is no such authenticator by default but you can look at https://github.com/xwiki-contrib/sandbox/tree/master/authenticators/xwiki-a…. > > Maybe my question should be: How do I get LDAP working with the Kerberos authenticator? > > Mark > > > On Tue, Mar 5, 2013 at 4:35 PM, Mark Jas <mark(a)nieuwenborg.nl> wrote: >> Hi all, >> >> >> I have configured xwiki with LDAP authentication and kerberos SSO. >> >> When I use a browser without automatic Kerberos SSO, I get a keberos login page. When I fill in username and password manually it works great. >> >> But when I set the browser to use automatic logon, I get the xwiki >> login page! (at least in FireFox, IE says “cannot show page”) >> >> I get the same results when I manually login with “username@DOMAIN” >> and “password”. So I think the domain part is used in the automatic >> logon. (and is the actual problem…) >> >> >> I see there is java code that strips the @DOMAIN part from the username. But I have no idea how or where to implement this. I hope some can help me! > > I never used it myself but from what I see in the code it's supposed to do that all the time. Maybe there is a bug. > > You can try to enable debug log[1] for class > com.xpn.xwiki.user.impl.xwiki.AppServerTrustedKerberosAuthServiceImpl > (that's the authenticator you are using, right ?) to see what's going on. At least ou should get what remote user XWiki is getting if any. > > [1] http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Logging > >> >> >> Mark >> >> >> _______________________________________________ >> users mailing list >> users(a)xwiki.org >> http://lists.xwiki.org/mailman/listinfo/users > > > > -- > Thomas Mortagne > _______________________________________________ > users mailing list > users(a)xwiki.org > http://lists.xwiki.org/mailman/listinfo/users > > _______________________________________________ > users mailing list > users(a)xwiki.org > http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne _______________________________________________ users mailing list users(a)xwiki.org http://lists.xwiki.org/mailman/listinfo/users

1 0

Re: [xwiki-users] kerberos SSO -> strip domainname from username
by Mark Jas 08 Mar '13

08 Mar '13

Hi Thomas, Thanks for your reply. I should have given you some more info. I'm using the default authenticator, because if I use the com.xpn.xwiki.user.impl.xwiki.AppServerTrustedKerberosAuthServiceImpl, my ldap stops working. If I use com.xpn.xwiki.user.impl.xwiki.AppServerTrustedKerberosAuthServiceImpl Kerberos works fine, but new users aren't created, and group sync isn't working etc etc... Maybe my question should be: How do I get LDAP working with the Kerberos authenticator? Mark On Tue, Mar 5, 2013 at 4:35 PM, Mark Jas <mark(a)nieuwenborg.nl> wrote: > Hi all, > > > I have configured xwiki with LDAP authentication and kerberos SSO. > > When I use a browser without automatic Kerberos SSO, I get a keberos login page. When I fill in username and password manually it works great. > > But when I set the browser to use automatic logon, I get the xwiki > login page! (at least in FireFox, IE says “cannot show page”) > > I get the same results when I manually login with “username@DOMAIN” > and “password”. So I think the domain part is used in the automatic > logon. (and is the actual problem…) > > > I see there is java code that strips the @DOMAIN part from the username. But I have no idea how or where to implement this. I hope some can help me! I never used it myself but from what I see in the code it's supposed to do that all the time. Maybe there is a bug. You can try to enable debug log[1] for class com.xpn.xwiki.user.impl.xwiki.AppServerTrustedKerberosAuthServiceImpl (that's the authenticator you are using, right ?) to see what's going on. At least ou should get what remote user XWiki is getting if any. [1] http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Logging > > > Mark > > > _______________________________________________ > users mailing list > users(a)xwiki.org > http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne _______________________________________________ users mailing list users(a)xwiki.org http://lists.xwiki.org/mailman/listinfo/users

2 1

[xwiki-users] [ANN] XWiki 5.0 Milestone 1 released
by Thomas Mortagne 07 Mar '13

07 Mar '13

The XWiki development team is proud to announce the availability of XWiki 5.0 Milestone 1. This release is the first release for the 5.x cycle with a new Release application and contains various Extension Manager and Distribution Wizard improvements. You can download it here: http://www.xwiki.org/xwiki/bin/view/Main/Download Make sure to review the release notes: http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki50M1 Thanks -The XWiki dev team

3 5

[xwiki-users] kerberos SSO -> strip domainname from username
by Mark Jas 07 Mar '13

07 Mar '13

Hi all, I have configured xwiki with LDAP authentication and kerberos SSO. When I use a browser without automatic Kerberos SSO, I get a keberos login page. When I fill in username and password manually it works great. But when I set the browser to use automatic logon, I get the xwiki login page! (at least in FireFox, IE says “cannot show page”) I get the same results when I manually login with “username@DOMAIN” and “password”. So I think the domain part is used in the automatic logon. (and is the actual problem…) I see there is java code that strips the @DOMAIN part from the username. But I have no idea how or where to implement this. I hope some can help me! Mark

2 1

[xwiki-users] Tabs Macro
by Jeremie BOUSQUET 07 Mar '13

07 Mar '13

Hello, I've been using the Tabs Macro [1], and have some feedback on it. First a very positive because I really like that macro ;-) But ... : - in extension page [1], it is said that it's not compatible with 4.x, though I use it without any issue on a 4.4.1 instance. - only issue I have (already with XE 3.x) is that several empty lines are added BEFORE the tabs. The empty lines consist of 5 lines of : <div class="wikimodel-emptyline"></div> To fix the issue, I updated the Macro.TabsMacro macro code, there was a misplaced empty line in it: ///// BEGIN ////// {{velocity}} $xwiki.jsx.use("Macro.TabsMacro") #set ($tabsSortedMapString = $context.macro.params.idsToLabels) ## split incoming string into 2 velocity arrays #set ($tabMapEntriesStringArray = $tabsSortedMapString.split(',')) #set( $tabIdsArray = []) #set( $tabNamesArray = []) #foreach($tabEntryString in $tabMapEntriesStringArray ) #if ("$!tabEntryString" == "" ) ## ignore null or empty (see http://wiki.apache.org/velocity/CheckingForNull) #else #set ($tabEntryArray = $tabEntryString.trim().split('=')) #if ($tabEntryArray.size()!=2) {{error}}Parameter $tabEntryString is not a valid key=value pair in the provided map: $tabsSortedMapString{{/error}} #else #set ($addResult = $tabIdsArray.add($tabEntryArray.get(0).trim())) #set ($addResult = $tabNamesArray.add($tabEntryArray.get(1).trim())) #end (*) #end #end ## generate tabs (**) {{html}} <div class="floatcontainer"> ///// END ///// I had to remove line marked with (*), and add 2 empty lines right after (**). This result in having only 1 empty line added before the tabs, which is not perfect but better. As I didn't find a JIRA project for this macro, I'm posting it here ... BR, Jeremie [1] http://extensions.xwiki.org/xwiki/bin/view/Extension/Tabs+Macro

4 16