On November 16, 2007 6:37 AM, <[EMAIL PROTECTED]> wrote: > On Nov 16, 2007 1:51 AM, <[EMAIL PROTECTED]> wrote: > > > What is wrong? Does the user need to have an account on the system > > > before LDAP will work? How do I get it to not add the user to the > > > XWikiAllGroup three times on each login? > > > > This is weird. I have the same setup and my config looks similar. Users > > get created and added to XWikiAllGroup automatically. > > > > The following things come to mind: > > > > - Make really sure the user doesn't exist already, e.g. from previous > > login attempt, or from forgotten cookies > > - What format do your sAMAccountNAmes have? I heard that names with > dots > > or @ signs can cause problems. > > - Are there any users at all created, maybe with the wrong username? > > Thanks for responding. > > I made sure that the user didn't exist. When I first ran into this > problem (when I turned the LDAP authentication on), I had someone who > had never been on the system log in. They got the errors mentioned in > the original email. After some debugging, I decided to delete the > Derby database for the wiki, essentially starting over. I removed all > the cookies from my system, then logged in as superadmin and imported > the XAR to recreate the wiki and tried to login. I got the errors > mentioned. > > There are two users listed in the user page: admin and pgardell (the > one with problems). The group XWikiAllGroup has four entries, > administrator and my name three times. > > Looking at the xwiki.log I see that all the entires are repeated three > times, starting with "LDAP Password check for user pgardell" and > ending with "Accept user even without account" > > sAMAccountName is the same as our old windows login. 8 characters > (a-z) In the case here, "pgardell" > > Ideas anyone? > > Patrick > _______________________________________________ > users mailing list > [email protected] > http://lists.xwiki.org/mailman/listinfo/users
I can confirm that I had this same symptom when I was trying to use LDAP. I didn't bother to check debug logs, but users with LDAP accounts could not log in until I explicitly added their user name to the XWikiAllGroup. I had assumed this was due to turning up the Access control such that a Guest user did not have permission to do anything but login. But I was too busy to investigate further. Unfortunately, for the time being, I've been forced to give up on LDAP authentication. I'm now manually registering users. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
