- xwiki-users@xwiki.org - lists.xwiki.org

Re: [xwiki-users] AD group mapping problem
by Mark Jas 20 Jun '12

20 Jun '12

The LDAP debugging log revealed that my group dn was incorrect. :-S Thanks for your help!

1 0

[xwiki-users] AD group mapping problem
by Mark Jas 20 Jun '12

20 Jun '12

Hello, I’m using Xwiki enterprise 4.1 with LDAP authentication to an Active Directory server. Authentication works fine, but my group mappings don’t work. I think the problem is that I’m using sAMAccountName as UID_attr, but the memberfields of my groups contain the full ldap-dn of the user. So this way, they do not match and users are not seen as members in the group. Is my assumption correct? And is there a solution for this problem? (I have an other site with an OpenLDAP server which has normal uid’s in the group memberfields. This one works fine!) Regards, Mark

3 2

[xwiki-users] [ANN] XWiki Enterprise and XWiki Enterprise Manager 4.0.1 released
by Thomas Mortagne 20 Jun '12

20 Jun '12

The XWiki development team is pleased to announce the release of XWiki Enterprise and XWiki Enterprise Manager 4.0.1. Go grab it at http://www.xwiki.org/xwiki/bin/view/Main/Download This is a bugfix release for the 4.0 cycle. For more information see the Release notes at: http://www.xwiki.org/xwiki/bin/view/Main/ReleaseNotesXWikiEnterprise401 Thanks -The XWiki dev team

1 1

[xwiki-users] [ANN] XWiki Enterprise and XWiki Enterprise Manager 4.1 released
by Caleb James DeLisle 19 Jun '12

19 Jun '12

The XWiki Development team is proud to announce the second release of the 4.x cycle. This release brings Extension Manager improvements such as merging of configuration documents during extension upgrade, a more gentle learning curve by hiding internal documents from non-technical users, and lots of goodies for the developers such as easy sharing of variables between scripts in different languages. Download it hot off the press: http://www.xwiki.org/xwiki/bin/view/Main/Download Other new and notable features include: * Message sender macro for allowing users to send to the activity stream from any location. * Global and per-user timezone settings * Script access to load dependencies from the core using the Component Manager * Smarter velocity interpretation converts allows strings to be passed to methods which take enums * Stop run-away scripts after a configurable timeout * Shorthand HQL queries in the Query Manager For a full list with examples and explanations, check out the release notes: http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWikiEnterpris… Thanks everyone who contributed to make the 4.1 cycle a success. Caleb

3 3

[xwiki-users] Retrieve all users of a given group
by Stéphanie 18 Jun '12

18 Jun '12

Hello, I'm trying to retrieve all users of a given group, but maybe there is a problem with my code. First, this is my code : {{velocity}} #set($users = $xwiki.rightsmanager.usersApi.allUsersNames) #foreach($user in $users) $user #if($user.isUserInGroup('Gestionnaires')) $user #end #end {{/velocity}} I have 6 users in my group "Gestionnaires" but none of these users is displayed with this code. Do you have an idea of why it doesn't work ? Do I forget something ? Thank you very much in advance for everyone who will answer me ^^ Thanks, Stéphanie -- View this message in context: http://xwiki.475771.n2.nabble.com/Retrieve-all-users-of-a-given-group-tp757… Sent from the XWiki- Users mailing list archive at Nabble.com.

3 3

[xwiki-users] How to disable the workspace menu ?
by Maxime Sinclair 18 Jun '12

18 Jun '12

Hello XWiki admins, I just upgraded a wiki farm from 2.7 to 3.5. No particular problem encountered. The only annoyance is the MAIN new menu that appears on the top menu bar. I prefer to hide it, the time to understand what is "Workspace" and how it works in a XEM context. What is the easiest way to disable this extra menu ? Thank for your help. Maxime

1 1

[xwiki-users] Error -You are not allowed to view this document or perform this action.
by Gerritjan Koekkoek 18 Jun '12

18 Jun '12

I've created an app with app within minutes. A normal user gets the following error: Error You are not allowed to view this document or perform this action. What can cause this error, the space has the right rights set. (View, Comment and Edit; no Delete or Admin) No document level security. Other documents in the space can be seen… The page CdLSATEPrivat/WebHome is generated by app within minutes, but I have modified the documentsheetbinding The LiveTableViewSheet has been copied from app within minutes space into CdLSATEPrivat space Is there any groovy scripts that can not be used by normal users? Gerritjan

2 6

Re: [xwiki-users] XWiki + OpenLDAP Invalid credentials problem
by Patrycja Suchomska 15 Jun '12

15 Jun '12

I've managed to enable ldap authentication first for 'admin' user, and then for 'xwiki' user. I've changed these values on the site you've mentioned (http://yourdomain/xwiki/bin/edit/XWiki/XWikiPreferences?editor=object) Ldap login matching cn={0},dc=debuntu,dc=local Ldap base DN dc=debuntu,dc=local I also think that my ldap 'xwiki' user password was too short. Perhaps this is why the authentication failed. The correct output in catalina.out (maybe someone else will find it useful) 2012-06-15 08:58:16,204 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] TRACE u.i.L.XWikiLDAPAuthServiceImpl - Starting LDAP authentication 2012-06-15 08:58:16,205 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG c.x.x.p.l.XWikiLDAPConfig - ldap_group_classes: [groupofnames, groupwisedistributionlist, dynamicgroup, dynamicgroupaux, groupofuniquenames, group] 2012-06-15 08:58:16,205 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG c.x.x.p.l.XWikiLDAPConfig - ldap_group_memberfields: [member, uniquemember] 2012-06-15 08:58:16,205 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG c.x.x.p.l.XWikiLDAPConnection - Connection to LDAP server [127.0.0.1:389] 2012-06-15 08:58:16,211 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG c.x.x.p.l.XWikiLDAPConnection - Binding to LDAP server with credentials login=[uid=xwiki,ou=People,dc=debuntu,dc=local] 2012-06-15 08:58:16,213 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG c.x.x.p.l.XWikiLDAPUtils - Searching for the user in LDAP: user [xwiki] base [ou=People,dc=debuntu,dc=local] query [(uid=xwiki)] uid [uid] 2012-06-15 08:58:16,214 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG c.x.x.p.l.XWikiLDAPConnection - LDAP search: baseDN=[ou=People,dc=debuntu,dc=local] query=[(uid=xwiki)] attr=[[uid, uid, uid, uid]] ldapScope=[2] 2012-06-15 08:58:16,215 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG c.x.x.p.l.XWikiLDAPConnection - - values for attribute [uid] 2012-06-15 08:58:16,215 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG c.x.x.p.l.XWikiLDAPConnection - |- [xwiki] 2012-06-15 08:58:16,215 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG c.x.x.p.l.XWikiLDAPConnection - LDAP search found attributes [[{name=dn value=uid=xwiki,ou=People,dc=debuntu,dc=local}, {name=uid value=xwiki}]] 2012-06-15 08:58:16,215 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG c.x.x.p.l.XWikiLDAPUtils - LDAP attributes will be used to update XWiki attributes. 2012-06-15 08:58:16,215 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG c.x.x.p.l.XWikiLDAPUtils - Updating existing user with LDAP attribues located at [uid=xwiki,ou=People,dc=debuntu,dc=local] 2012-06-15 08:58:16,306 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG c.x.x.p.l.XWikiLDAPUtils - Start synchronization of LDAP profile [[{name=dn value=uid=xwiki,ou=People,dc=debuntu,dc=local}, {name=uid value=xwiki}]] with existing user profile based on mapping [{uid=fullname}] 2012-06-15 08:58:16,306 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG u.i.L.XWikiLDAPAuthServiceImpl - LDAP authentication succeed with principal [XWiki.xwiki] 2012-06-15 08:58:16,341 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] WARN o.x.v.i.DefaultVelocityEngine - Deprecated usage of method [com.xpn.xwiki.api.XWiki.parseMessage] in /templates/login.vm@29,33 Anyway, it works now, thank you very much for your help. Patricia

2 1

[xwiki-users] [myxwiki] new wiki request
by David Martin 14 Jun '12

14 Jun '12

Hi, I am a physician (with an engineering background) in Seattle, Washington, USA. I am interested in using myxwiki to develop a personal knowledge management system, particularly for studying anthroposophic medicine. my username is drmartin1 I request a myxwiki name of "coalesce". Thanks, David Martin

2 1

Re: [xwiki-users] XWiki + OpenLDAP Invalid credentials problem
by Patrycja Suchomska 14 Jun '12

14 Jun '12

> You sure it's exactly the same ? I don't see how you can get "Binding > to LDAP server with credentials login=[cn=xwiki]" with this > configuration. It should indeicate > "login=[uid=xwiki,ou=People,dc=debuntu,dc=local]". > Maybe you have some configuration set in XWiki.XWikiPreferences page > which override what you have in xwiki.cfg, did you tried the LDAP UI > before seting xwiki.cfg ? You're right, I've tried the LDAP UI before setting the xwiki.cfg. I removed it, but it seems that XWiki still stores those settings somewhere. I uninstalled it earlier in web interface and even removed directories such as /var/lib/xwiki/data/extension/repository/org.xwiki.platform%3Axwiki-platform-ldap-ui/ and /var/lib/xwiki/data/extension/repository/org.xwiki.platform%3Axwiki-platform-ldap-api/. LDAP UI extension disappeared in web administration. But still I could see in catalina.out that message "Binding to LDAP server with credentials login=[cn=xwiki]", despite the fact my xwiki.cfg was different. I did 'locate ldap | grep xwiki' on serrver to find where it may be. The only things it found are: /usr/lib/xwiki/WEB-INF/lib/jldap-4.3.jar /var/cache/tomcat6/Catalina/localhost/xwiki/aether-repository/com/novell/ldap /var/cache/tomcat6/Catalina/localhost/xwiki/aether-repository/com/novell/ldap/jldap /var/cache/tomcat6/Catalina/localhost/xwiki/aether-repository/com/novell/ldap/jldap/4.3 /var/cache/tomcat6/Catalina/localhost/xwiki/aether-repository/com/novell/ldap/jldap/4.3/_maven.repositories /var/cache/tomcat6/Catalina/localhost/xwiki/aether-repository/com/novell/ldap/jldap/4.3/jldap-4.3.pom /var/cache/tomcat6/Catalina/localhost/xwiki/aether-repository/com/novell/ldap/jldap/4.3/jldap-4.3.pom.sha1 I have no idea where does LDAP UI store its configuration. Anyway, after your response, I've tried to install and configure XWiki UI again (since I'm unable to fully remove its configuration), according to your proposals. I got different output in catalina.out, but still no luck: 2012-06-14 14:54:21,163 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] TRACE u.i.L.XWikiLDAPAuthServiceImpl - Starting LDAP authentication 2012-06-14 14:54:21,173 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG c.x.x.p.l.XWikiLDAPConfig - ldap_group_classes: [groupofnames, groupwisedistributionlist, dynamicgroup, dynamicgroupaux, groupofuniquenames, group] 2012-06-14 14:54:21,173 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG c.x.x.p.l.XWikiLDAPConfig - ldap_group_memberfields: [member, uniquemember] 2012-06-14 14:54:21,200 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG c.x.x.p.l.XWikiLDAPConnection - Connection to LDAP server [127.0.0.1:389] 2012-06-14 14:54:21,209 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG c.x.x.p.l.XWikiLDAPConnection - Binding to LDAP server with credentials login=[uid=xwiki,ou=People,dc=debuntu,dc=local] 2012-06-14 14:54:21,244 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG u.i.L.XWikiLDAPAuthServiceImpl - Local LDAP authentication failed. com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP bind failed with LDAPException. Wrapped Exception: Invalid Credentials at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:172) ~[xwiki-platform-legacy-oldcore-4.0.jar:na] at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:101) ~[xwiki-platform-legacy-oldcore-4.0.jar:na] at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:305) [xwiki-platform-legacy-oldcore-4.0.jar:na] (exception same as before) 2012-06-14 14:54:21,245 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG u.i.L.XWikiLDAPAuthServiceImpl - Trying authentication against XWiki DB 2012-06-14 14:54:21,276 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] DEBUG u.i.L.XWikiLDAPAuthServiceImpl - LDAP authentication failed for user [xwiki] 2012-06-14 14:54:21,356 [http://10.1.0.220:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] WARN o.x.v.i.DefaultVelocityEngine - Deprecated usage of method [com.xpn.xwiki.api.XWiki.parseMessage] in /templates/login.vm@29,33 And here's my detailed configuration in XWiki's LDAP UI, as (like I said) I didn't manage to remove it fully (and use xwiki.cfg instead): LDAP Yes LDAP SERVER ADDRESS 127.0.0.1 LDAP SERVER PORT 389 LDAP LOGIN MATCHING uid={0},ou=People,dc=debuntu,dc=local LDAP PASSWORD MATCHING {1} RESTRICT TO GROUP LDAP GROUP TO EXCLUDE LDAP BASE DN ou=People,dc=debuntu,dc=local LDAP UID ATTRIBUTE NAME uid TRY LOCAL LOGIN Yes UPDATE USER FROM LDAP AFTER LOGIN Yes LDAP USER FIELDS MAPPING name -> uid last_name -> uid first_name -> uid fullname -> uid LDAP GROUPS MAPPING LDAP GROUPS CACHE EXPIRATION WHEN TO SYNCHRONIZE LDAP GROUPS At each authentication of a user Is this wrong, or perhaps should I use only xwiki.cfg? If so, do you know where can I find Xwiki's LDAP UI configuration files? Thanks Patricia

2 1