Hi, I am a new user of xwiki and new to LDAP too. I modified the xwiki.cfg and created a few testing entries in LDAP. Then, I can log in with LDAP users and superroot. But with LDAP users, I always see an error, which is "You are not allowed to view this document or perform this action." I searched for solution for quite a while, and I found some others also suffer from the same issue. The only clue I get is MAYBE I need to import users from LDAP. But the import users from LDAP code from xwiki codebase give me another error. (If you want I can paste the complete error stack trace). So, could anyone advice on what I should do? Thanks a lot
Hi all, I created a user with the same user name as LDAP user but different password, when I log in again, it solves the problem. So the problem is no user group is assigned when LDAP user logged in, which I guess is being addressed (http://jira.xwiki.org/jira/browse/XWIKI-1079). Thanks for the effort. wyz wrote:
Hi, I am a new user of xwiki and new to LDAP too. I modified the xwiki.cfg and created a few testing entries in LDAP. Then, I can log in with LDAP users and superroot. But with LDAP users, I always see an error, which is "You are not allowed to view this document or perform this action."
I searched for solution for quite a while, and I found some others also suffer from the same issue. The only clue I get is MAYBE I need to import users from LDAP. But the import users from LDAP code from xwiki codebase give me another error. (If you want I can paste the complete error stack trace). So, could anyone advice on what I should do?
Thanks a lot
Hi, Right now user groups have to be managed inside xwiki and cannot be delegated to LDAP. The XWIKI-1079 patch adds this new feature. -Vincent On Jan 11, 2008, at 11:44 AM, wyz wrote:
Hi all, I created a user with the same user name as LDAP user but different password, when I log in again, it solves the problem.
So the problem is no user group is assigned when LDAP user logged in, which I guess is being addressed (http://jira.xwiki.org/jira/browse/XWIKI-1079). Thanks for the effort.
wyz wrote:
Hi, I am a new user of xwiki and new to LDAP too. I modified the xwiki.cfg and created a few testing entries in LDAP. Then, I can log in with LDAP users and superroot. But with LDAP users, I always see an error, which is "You are not allowed to view this document or perform this action."
I searched for solution for quite a while, and I found some others also suffer from the same issue. The only clue I get is MAYBE I need to import users from LDAP. But the import users from LDAP code from xwiki codebase give me another error. (If you want I can paste the complete error stack trace). So, could anyone advice on what I should do?
Thanks a lot
_______________________________________________ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
For me the solution was migration to XWiki version 1.1.2, then user would automatically be created in XWikiAllGroup group. Quoting Vincent Massol :Hi, Right now user groups have to be managed inside xwiki and cannot be delegated to LDAP. The XWIKI-1079 patch adds this new feature. -Vincent On Jan 11, 2008, at 11:44 AM, wyz wrote: Hi all, I created a user with the same user name as LDAP user but different password, when I log in again, it solves the problem. So the problem is no user group is assigned when LDAP user logged in, which I guess is being addressed (http://jira.xwiki.org/jira/browse/XWIKI-1079). Thanks for the effort. wyz wrote: Hi, I am a new user of xwiki and new to LDAP too. I modified the xwiki.cfg and created a few testing entries in LDAP. Then, I can log in with LDAP users and superroot. But with LDAP users, I always see an error, which is "You are not allowed to view this document or perform this action." I searched for solution for quite a while, and I found some others also suffer from the same issue. The only clue I get is MAYBE I need to import users from LDAP. But the import users from LDAP code from xwiki codebase give me another error. (If you want I can paste the complete error stack trace). So, could anyone advice on what I should do? Thanks a lot _______________________________________________ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users _______________________________________________ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users Ar cieņu, Mihails Links: ------ [1] mailto:vincent@massol.net
That XWIKI-1079 patch will be included into the 1.2 final release ? Vincent Massol a écrit :
Hi,
Right now user groups have to be managed inside xwiki and cannot be delegated to LDAP.
The XWIKI-1079 patch adds this new feature.
-Vincent
On Jan 11, 2008, at 11:44 AM, wyz wrote:
Hi all, I created a user with the same user name as LDAP user but different password, when I log in again, it solves the problem.
So the problem is no user group is assigned when LDAP user logged in, which I guess is being addressed (http://jira.xwiki.org/jira/browse/XWIKI-1079). Thanks for the effort.
wyz wrote:
Hi, I am a new user of xwiki and new to LDAP too. I modified the xwiki.cfg and created a few testing entries in LDAP. Then, I can log in with LDAP users and superroot. But with LDAP users, I always see an error, which is "You are not allowed to view this document or perform this action."
I searched for solution for quite a while, and I found some others also suffer from the same issue. The only clue I get is MAYBE I need to import users from LDAP. But the import users from LDAP code from xwiki codebase give me another error. (If you want I can paste the complete error stack trace). So, could anyone advice on what I should do?
Thanks a lot
users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
-- __________________________________________ Gaëtan GUYODO Chargé de mission Centre Antipoison - Hôpital Fernand WIDAL 200, rue du faubourg St Denis 75475 PARIS Cedex 10 Tél: 01 40 05 49 63 / Fax: 01 40 05 48 56 __________________________________________
On Jan 11, 2008, at 12:47 PM, Gaëtan GUYODO wrote:
That XWIKI-1079 patch will be included into the 1.2 final release ?
No, that's way too late for that. I'd like to apply it for 1.3M1 but I need someone to verify the patch works for all cases. The comments in that issue seem to indicate there are things not finished in it. Thanks -Vincent
Vincent Massol a écrit :
Hi,
Right now user groups have to be managed inside xwiki and cannot be delegated to LDAP.
The XWIKI-1079 patch adds this new feature.
-Vincent
On Jan 11, 2008, at 11:44 AM, wyz wrote:
Hi all, I created a user with the same user name as LDAP user but different password, when I log in again, it solves the problem.
So the problem is no user group is assigned when LDAP user logged in, which I guess is being addressed (http://jira.xwiki.org/jira/browse/XWIKI-1079). Thanks for the effort.
wyz wrote:
Hi, I am a new user of xwiki and new to LDAP too. I modified the xwiki.cfg and created a few testing entries in LDAP. Then, I can log in with LDAP users and superroot. But with LDAP users, I always see an error, which is "You are not allowed to view this document or perform this action."
I searched for solution for quite a while, and I found some others also suffer from the same issue. The only clue I get is MAYBE I need to import users from LDAP. But the import users from LDAP code from xwiki codebase give me another error. (If you want I can paste the complete error stack trace). So, could anyone advice on what I should do?
Thanks a lot
users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
-- __________________________________________ Gaëtan GUYODO Chargé de mission Centre Antipoison - Hôpital Fernand WIDAL 200, rue du faubourg St Denis 75475 PARIS Cedex 10 Tél: 01 40 05 49 63 / Fax: 01 40 05 48 56 __________________________________________
_______________________________________________ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
I can test it with Active Directory, I'll do that asap. Question about java : the latest change is LDAPAuthenticater.java (47 kb) 18/jun/2007. How can I compile to have the jar file ? Vincent Massol a écrit :
On Jan 11, 2008, at 12:47 PM, Gaëtan GUYODO wrote:
That XWIKI-1079 patch will be included into the 1.2 final release ?
No, that's way too late for that.
I'd like to apply it for 1.3M1 but I need someone to verify the patch works for all cases. The comments in that issue seem to indicate there are things not finished in it.
Thanks -Vincent
Vincent Massol a écrit :
Hi,
Right now user groups have to be managed inside xwiki and cannot be delegated to LDAP.
The XWIKI-1079 patch adds this new feature.
-Vincent
On Jan 11, 2008, at 11:44 AM, wyz wrote:
Hi all, I created a user with the same user name as LDAP user but different password, when I log in again, it solves the problem.
So the problem is no user group is assigned when LDAP user logged in, which I guess is being addressed (http://jira.xwiki.org/jira/browse/XWIKI-1079). Thanks for the effort.
wyz wrote:
Hi, I am a new user of xwiki and new to LDAP too. I modified the xwiki.cfg and created a few testing entries in LDAP. Then, I can log in with LDAP users and superroot. But with LDAP users, I always see an error, which is "You are not allowed to view this document or perform this action."
I searched for solution for quite a while, and I found some others also suffer from the same issue. The only clue I get is MAYBE I need to import users from LDAP. But the import users from LDAP code from xwiki codebase give me another error. (If you want I can paste the complete error stack trace). So, could anyone advice on what I should do?
Thanks a lot
users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
-- __________________________________________ Gaëtan GUYODO Chargé de mission Centre Antipoison - Hôpital Fernand WIDAL 200, rue du faubourg St Denis 75475 PARIS Cedex 10 Tél: 01 40 05 49 63 / Fax: 01 40 05 48 56 __________________________________________
_______________________________________________ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
-- __________________________________________ Gaëtan GUYODO Chargé de mission Centre Antipoison - Hôpital Fernand WIDAL 200, rue du faubourg St Denis 75475 PARIS Cedex 10 Tél: 01 40 05 49 63 / Fax: 01 40 05 48 56 __________________________________________
On Jan 11, 2008, at 1:35 PM, Gaëtan GUYODO wrote:
I can test it with Active Directory, I'll do that asap. Question about java : the latest change is LDAPAuthenticater.java (47 kb) 18/jun/2007. How can I compile to have the jar file ?
You can get a more recent xwiki version or if you want to build it yourself check http://dev.xwiki.org/xwiki/bin/view/Community/Building -Vincent
Vincent Massol a écrit :
On Jan 11, 2008, at 12:47 PM, Gaëtan GUYODO wrote:
That XWIKI-1079 patch will be included into the 1.2 final release ?
No, that's way too late for that.
I'd like to apply it for 1.3M1 but I need someone to verify the patch works for all cases. The comments in that issue seem to indicate there are things not finished in it.
Thanks -Vincent
Vincent Massol a écrit :
Hi,
Right now user groups have to be managed inside xwiki and cannot be delegated to LDAP.
The XWIKI-1079 patch adds this new feature.
-Vincent
On Jan 11, 2008, at 11:44 AM, wyz wrote:
Hi all, I created a user with the same user name as LDAP user but different password, when I log in again, it solves the problem.
So the problem is no user group is assigned when LDAP user logged in, which I guess is being addressed (http://jira.xwiki.org/jira/browse/XWIKI-1079). Thanks for the effort.
wyz wrote:
Hi, I am a new user of xwiki and new to LDAP too. I modified the xwiki.cfg and created a few testing entries in LDAP. Then, I can log in with LDAP users and superroot. But with LDAP users, I always see an error, which is "You are not allowed to view this document or perform this action."
I searched for solution for quite a while, and I found some others also suffer from the same issue. The only clue I get is MAYBE I need to import users from LDAP. But the import users from LDAP code from xwiki codebase give me another error. (If you want I can paste the complete error stack trace). So, could anyone advice on what I should do?
Thanks a lot
users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
-- __________________________________________ Gaëtan GUYODO Chargé de mission Centre Antipoison - Hôpital Fernand WIDAL 200, rue du faubourg St Denis 75475 PARIS Cedex 10 Tél: 01 40 05 49 63 / Fax: 01 40 05 48 56 __________________________________________
_______________________________________________ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
-- __________________________________________ Gaëtan GUYODO Chargé de mission Centre Antipoison - Hôpital Fernand WIDAL 200, rue du faubourg St Denis 75475 PARIS Cedex 10 Tél: 01 40 05 49 63 / Fax: 01 40 05 48 56 __________________________________________
_______________________________________________ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Vincent Massol wrote:
On Jan 11, 2008, at 1:35 PM, Gaëtan GUYODO wrote:
I can test it with Active Directory, I'll do that asap. Question about java : the latest change is LDAPAuthenticater.java (47 kb) 18/jun/2007. How can I compile to have the jar file ?
You can get a more recent xwiki version or if you want to build it yourself check http://dev.xwiki.org/xwiki/bin/view/Community/Building
-Vincent
Hi all, Please allow me to try to do a brief summary of the situation with this LDAP issue. Gunter Leeb has done a bog job by developing a new with contributions from Jir(í Hanus( that I am not able to evaluate (sorry if I am missing something as credits). This thread initiated by wyz and followed by Vincent, Mihails and Gaëtan allows me to regain access to this issue trying to get an idea about how things are doing concerning this issue. So, please, correct me if I am wrong. 1. The updated code for LDAPAuthenticater.java was posted past June the 18th, 2007 by Gunter (as stated by Gaëtan in a previous entry). 2. To compile this class we don't need to follow the building instructions for the whole XWiki modules, but to reference just class dependencies: xwiki.jar. jldap.jar from Novell, commons DBCP,... I'm getting this by reading this from a message from Gunter dated on November the 7th (see "support for LDAP over SSL" thread)... The code checked in the JIRA issue is a suggestion for improvement of XWiki coming out of the community. It is a plug-in and therefore is fairly independent from the regular XWiki development and build process. By referencing xwiki.jar (and novell's ldap jar) you should be able to compile the sources that I provided. I have also added the class files. You are corret the last bug fixes I checked in in the mentioned attachment. and by snooping LDAPAuthenticater.java code. Even if these entries are correct, I am not being able to correctly reference the concerned classes to get LDAPAuthenticater.java compiled. I could test it against eDirectory. In fact, I'm testing the last available .class dated on May the 29th, 2007. We have had to remove it from the production server because I've been not able to synchronize passwords yet. Please, could you help us to get compiled the updated LDAPAuthenticater.java? Or an updated compiled LDAPAuthenticater.class? Thank you very much. Ricardo -- Ricardo Rodríguez Your XEN ICT Team
Gaëtan GUYODO wrote:
I can test it with Active Directory, I'll do that asap. Question about java : the latest change is LDAPAuthenticater.java (47 kb) 18/jun/2007. How can I compile to have the jar file ? Hi all,
I've managed to reference all the required classes but Cache. There is a Cache.class included in XWiki-1079, so I am guessing this is the class we must reference. All the others are included in jar files distributed with XWiki but ldap.jar coming from novell-jldap-devel-2007.10.12-1unix.zip. It can be downloaded from http://developer.novell.com/wiki/index.php/Jldap Here the error message I get when I run javac... sh-3.2# javac -cp /Library/Tomcat/webapps/xwiki/WEB-INF/lib/xwiki-core-1.2-rc-1.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/lib/commons-lang-2.1.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/lib/commons-logging-1.1.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/lib/ldap-UNKNOWN.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/lib/ldap-UNKNOWN.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/lib/ldap.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/lib/securityfilter-2.0.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/classes/com/xpn/xwiki/ldap/authentication/cache.jar LDAPAuthenticater.java LDAPAuthenticater.java:61: cannot find symbol symbol : class Cache location: class com.xpn.xwiki.ldap.authentication.LDAPAuthenticater protected static Cache<String, HashMap<String,String>> cache = new Cache<String, HashMap<String,String>>(21800, 0); ^ LDAPAuthenticater.java:61: cannot find symbol symbol : class Cache location: class com.xpn.xwiki.ldap.authentication.LDAPAuthenticater protected static Cache<String, HashMap<String,String>> cache = new Cache<String, HashMap<String,String>>(21800, 0); ^ Note: LDAPAuthenticater.java uses or overrides a deprecated API. Note: Recompile with -Xlint:deprecation for details. Note: LDAPAuthenticater.java uses unchecked or unsafe operations. Note: Recompile with -Xlint:unchecked for details. 2 errors sh-3.2# I've tried by creating a cache.jar file including only Cache.class, but it didn't work. As you can see, I am not a Java guru! Please, could anybody help with this issue? How must I reference Cache.class? We can not go ahead with XWiki without a fully functional LDAP authentication service. So I must find a way of helping with this. Any help will be welcome! Thanks. -- Ricardo Rodríguez Your XEN ICT Team
Gaëtan GUYODO wrote:
I can test it with Active Directory, I'll do that asap. Question about java : the latest change is LDAPAuthenticater.java (47 kb) 18/jun/2007. How can I compile to have the jar file ?
Hi, Gaëtan, Here you have the javac command to compile LDAPAuthenticater while working with the brand new 1.2 release. You won't get a jar, but a class file. javac -cp /Library/Tomcat/webapps/xwiki/WEB-INF/lib/xwiki-core-1.2.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/lib/commons-lang-2.1.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/lib/commons-logging-1.1.1.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/lib/ldap-UNKNOWN.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/lib/ldap-UNKNOWN.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/lib/ldap.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/lib/securityfilter-2.0.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/classes LDAPAuthenticater.java It is supposed you are in the /xwiki/WEB-INF/classes/com/xpn/xwiki/ldap/authentication folder. And /Library/Tomcat/webapps is the web applications folder of your servlets container. You must modify these path accordingly or look for any other way of referencing this classes. All classes but Novell ldap.jar are included with XWiki distribution. You must also copy the classes folder from XWiki.zip (http://jira.xwiki.org/jira/secure/attachment/10851/XWiki.zip) in xwiki/WEB-INF directory. Then, overwrite the LDAPAuthenticater java code with the updated release. So far, it is the one you mentioned dated on June the 18th, 2007 ldap.jar can be obtained from http://developer.novell.com/wiki/index.php/Jldap I am now using this new class but have some problems while binding to my eDirectory server. No I have to trace the process in the server to see where does the problem arise. I will move this discussion to the JIRA-1079 issue. I think it is the right place to go on with this. I am sure the Building page contents the solution to many of my doubts so I have to keep trying to understand the whole building process. Cheers, Ricardo -- Ricardo Rodríguez Your XEN ICT Team
Thanks for all this information. I'll try that ASAP, and I'll post results of my tests. Gaëtan Your XEN ICT Team - Ricardo Rodriguez a écrit :
Gaëtan GUYODO wrote:
I can test it with Active Directory, I'll do that asap. Question about java : the latest change is LDAPAuthenticater.java (47 kb) 18/jun/2007. How can I compile to have the jar file ?
Hi, Gaëtan,
Here you have the javac command to compile LDAPAuthenticater while working with the brand new 1.2 release. You won't get a jar, but a class file.
javac -cp /Library/Tomcat/webapps/xwiki/WEB-INF/lib/xwiki-core-1.2.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/lib/commons-lang-2.1.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/lib/commons-logging-1.1.1.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/lib/ldap-UNKNOWN.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/lib/ldap-UNKNOWN.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/lib/ldap.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/lib/securityfilter-2.0.jar:/Library/Tomcat/webapps/xwiki/WEB-INF/classes LDAPAuthenticater.java
It is supposed you are in the /xwiki/WEB-INF/classes/com/xpn/xwiki/ldap/authentication folder. And /Library/Tomcat/webapps is the web applications folder of your servlets container. You must modify these path accordingly or look for any other way of referencing this classes.
All classes but Novell ldap.jar are included with XWiki distribution. You must also copy the classes folder from XWiki.zip (http://jira.xwiki.org/jira/secure/attachment/10851/XWiki.zip) in xwiki/WEB-INF directory. Then, overwrite the LDAPAuthenticater java code with the updated release. So far, it is the one you mentioned dated on June the 18th, 2007
ldap.jar can be obtained from http://developer.novell.com/wiki/index.php/Jldap
I am now using this new class but have some problems while binding to my eDirectory server. No I have to trace the process in the server to see where does the problem arise.
I will move this discussion to the JIRA-1079 issue. I think it is the right place to go on with this.
I am sure the Building page contents the solution to many of my doubts so I have to keep trying to understand the whole building process.
Cheers,
Ricardo
-- __________________________________________ Gaëtan GUYODO Chargé de mission Centre Antipoison - Hôpital Fernand WIDAL 200, rue du faubourg St Denis 75475 PARIS Cedex 10 Tél: 01 40 05 49 63 / Fax: 01 40 05 48 56 __________________________________________
Gaëtan GUYODO wrote:
Thanks for all this information. I'll try that ASAP, and I'll post results of my tests. Gaëtan Great!
I do think that it will better to move the discussion to http://jira.xwiki.org/jira/browse/XWIKI-1079, doesn't you? Cheers, Ricardo -- Ricardo Rodríguez Your XEN ICT Team
Gaëtan GUYODO wrote:
Thanks for all this information. I'll try that ASAP, and I'll post results of my tests. Gaëtan
I'm afraid I've added some noise to my previous answer. Sorry about that. 1. ldap-UNKNOWN.jar was referenced twice 2. ldap.jar includes the same Novell classes than ldap-UNKNOWN.jar. Some only one of them is required. I've compiled with one or the other without any problem. I don't know why the one included with XWiki is called ldap-UNKNOWN.jar. I will ask in the devs list. Best, Ricardo -- Ricardo Rodríguez Your XEN ICT Team
participants (5)
-
Gaëtan GUYODO -
Mihails Agafonovs -
Vincent Massol -
wyz -
Your XEN ICT Team - Ricardo Rodriguez