Again, the same error from LDAP:
LDAPMessage compareResponse(7) noSuchAttribute (00002080: AtrErr:
DSID-03080139, #1:
0: 00002080: DSID-03080139, problem 1001 (NO_ATTRIBUTE_OR_VAL), data
0, Att 23 (userPassword)
)
Quoting Thomas Mortagne : 2008/5/7 Mihails Agafonovs
<[EMAIL PROTECTED]>:
> Hi!
>
> I've been trying to setup LDAP connection on XWiki 1.3.2.
Using
> Wireshark, I've discovered, that LDAP performs unbindRequest()
after
> the following error:
>
> LDAPMessage compareResponse(3) noSuchAttribute (00002080:
AtrErr:
> DSID-03080139, #1:
> 0: 00002080: DSID-03080139, problem 1001
(NO_ATTRIBUTE_OR_VAL), data
> 0, Att 23 (userPassword)
> )
> Here is the configuration:
>
> ----------------------------------------------
> xwiki.authentication.ldap=1
> xwiki.authentication.ldap.server=my.domain.com
> xwiki.authentication.ldap.port=389
> xwiki.authentication.ldap.bind_DN={0}
> xwiki.authentication.ldap.bind_pass={1}
> # xwiki.authentication.ldap.validate_password=0
>
xwiki.authentication.ldap.user_group=ou=Riga,ou=LAT,dc=domain,dc=com
> xwiki.authentication.ldap.base_DN=dc=domain,dc=com
> xwiki.authentication.ldap.UID_attr=cn
>
xwiki.authentication.ldap.fields_mapping=name=cn,last_name=sn,first_name=givenName,fullname=fullName,email=mail,ldap_dn=dn
> # xwiki.authentication.ldap.update_user=1
>
xwiki.authentication.ldap.group_mapping=XWiki.XWikiAdminGroup=ou=Riga,ou=LAT,dc=GDNEurope,dc=com|
>
> XWiki.Organisation=cn=testers,ou=groups,o=MegaNova,c=US
> # xwiki.authentication.ldap.groupcache_expiration=21800
> # xwiki.authentication.ldap.mode_group_sync=always
> xwiki.authentication.ldap.trylocal=1
I don't know AD very well but,according to
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication,
should't be:
xwiki.authentication.ldap.bind_DN=subdomain\{0}
xwiki.authentication.ldap.UID_attr=sAMAccountName
xwiki.authentication.ldap.fields_mapping=name=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,mail=mail,ldap_dn=dn
?
> ------------------------------------------------------
>
> Any ideas?
>
> P.S. If I use in the login form [EMAIL PROTECTED] or
> domainname.surname as a username, I can login, but without any
> rights.
>
> Ar cieņu, Mihails
> _______________________________________________
> users mailing list
> [email protected]
> http://lists.xwiki.org/mailman/listinfo/users
>
--
Thomas Mortagne
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users
Ar cieņu, Mihails
Links:
------
[1] mailto:[EMAIL PROTECTED]
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users
