LDAP / log level

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

LDAP / log level

Craig Muth
This is my first post to the list.  Let me begin by saying I think XWiki is very very cool.
 
I have 2 questions.
 
1. Is there a place I can look to find more info about setting up XWiki to use LDAP for authentication?  I looked at http://www.xwiki.org/xwiki/bin/view/Dev/LDAPIntegration  and link specific to active directory.  I'd like XWiki to simply check passwords against our LDAP server but do nothing else with it (like trying to add users in it etc.).  I looked at the LDAPAuthServiceImpl.java source, but wasn't really able to make anything out of it.
 
2. How do I enable logging and turn up the log level in XWiki?
 
I'll try to aggregate whatever helpful answers I get and add them to xwiki.org.
 
Thanks,
--Craig
 


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: LDAP / log level

Robin Fernandes
Hi,

1. In xwiki.cfg you need to specify the authentication class to use, like:
  xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.LDAPAuthServiceImpl

Then I think you also need to set all the properties used in
LDAPAuthServiceImpl.java, so:
  xwiki.authentication.ldap.port=...
  xwiki.authentication.ldap.server=...
  xwiki.authentication.ldap.bind_DN=...
  xwiki.authentication.ldap.bind_pass=...
  xwiki.authentication.ldap.base_DN=...
  xwiki.authentication.ldap.fields_mapping=...
  xwiki.authentication.ldap.UID_attr=...
  xwiki.authentication.ldap.check_level=...

2. Edit the file xwiki\WEB-INF\classes\log4j.properties to set the log
level for specific packages or classes, like:
  com.xpn.xwiki.user.impl.LDAP=debug


Cheers,
Robin

On 27/02/06, Craig Muth <[hidden email]> wrote:

> This is my first post to the list.  Let me begin by saying I think XWiki is
> very very cool.
>
> I have 2 questions.
>
> 1. Is there a place I can look to find more info about setting up XWiki to
> use LDAP for authentication?  I looked at
> http://www.xwiki.org/xwiki/bin/view/Dev/LDAPIntegration
> and link specific to active directory.  I'd like XWiki to simply check
> passwords against our LDAP server but do nothing else with it (like trying
> to add users in it etc.).  I looked at the LDAPAuthServiceImpl.java source,
> but wasn't really able to make anything out of it.
>
> 2. How do I enable logging and turn up the log level in XWiki?
>
> I'll try to aggregate whatever helpful answers I get and add them to
> xwiki.org.
>
> Thanks,
> --Craig
>
>
> --
> You receive this message as a subscriber of the [hidden email]
> mailing list.
> To unsubscribe:
> mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
>
>
>


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: LDAP / log level

Craig Muth
Thanks man.  That got me to the point where I have a reasonable error message ("LDAPAuthServiceImpl:Bind:482 - LDAP Bind does not have binding info").  I think I can talk to my LDAP guy to work through it.

> I'd like XWiki to simply check passwords against our LDAP server but do nothing else with it (like trying to add users in it etc.).  
 
Maybe I understood this sentence from the wiki.
Currently we have user auth and user creation using LDAP
I guess that doesn't mean creating a user in the LDAP database.
 
Any idea how to enable these options (also from the wiki)?
  • option to check non LDAP users against the XWiki user database
  • option to have Automatic membership of LDAP users in XWiki.XWikiAllGroup, or XWiki.XWikiLdapGroup
  • Currently it's failing in the ldap lookup and not trying (I think) in the xwiki database.
     
    Thanks,
    --Craig
     

     
    On 2/28/06, Robin Fernandes <[hidden email]> wrote:
    Hi,

    1. In xwiki.cfg you need to specify the authentication class to use, like:
    xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.LDAPAuthServiceImpl

    Then I think you also need to set all the properties used in
    LDAPAuthServiceImpl.java, so:
    xwiki.authentication.ldap.port=...
    xwiki.authentication.ldap.server=...
    xwiki.authentication.ldap.bind_DN=...
    xwiki.authentication.ldap.bind_pass=...
    xwiki.authentication.ldap.base_DN=...
    xwiki.authentication.ldap.fields_mapping=...
    xwiki.authentication.ldap.UID_attr=...
    xwiki.authentication.ldap.check_level=...

    2. Edit the file xwiki\WEB-INF\classes\log4j.properties to set the log
    level for specific packages or classes, like:
    com.xpn.xwiki.user.impl.LDAP=debug


    Cheers,
    Robin

    On 27/02/06, Craig Muth < [hidden email]> wrote:

    > This is my first post to the list.  Let me begin by saying I think XWiki is
    > very very cool.
    >
    > I have 2 questions.
    >
    > 1. Is there a place I can look to find more info about setting up XWiki to
    > use LDAP for authentication?  I looked at
    > http://www.xwiki.org/xwiki/bin/view/Dev/LDAPIntegration
    > and link specific to active directory.  I'd like XWiki to simply check
    > passwords against our LDAP server but do nothing else with it (like trying
    > to add users in it etc.).  I looked at the LDAPAuthServiceImpl.java source,
    > but wasn't really able to make anything out of it.
    >
    > 2. How do I enable logging and turn up the log level in XWiki?
    >
    > I'll try to aggregate whatever helpful answers I get and add them to
    > xwiki.org.
    >
    > Thanks,
    > --Craig
    >
    >
    > --
    > You receive this message as a subscriber of the [hidden email]
    > mailing list.
    > To unsubscribe:
    > mailto:[hidden email]
    > For general help: mailto:[hidden email]?subject=help
    > ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
    >
    >
    >




    --
    You receive this message as a subscriber of the [hidden email] mailing list.
    To unsubscribe: mailto:[hidden email]
    For general help: mailto: [hidden email]?subject=help
    ObjectWeb mailing lists service home page: http://www.objectweb.org/wws





    --
    You receive this message as a subscriber of the [hidden email] mailing list.
    To unsubscribe: mailto:[hidden email]
    For general help: mailto:[hidden email]?subject=help
    ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
    Reply | Threaded
    Open this post in threaded view
    |

    Re: LDAP / log level

    Ludovic Dubost

    Hi,

    Craig Muth a écrit :

    > Thanks man.  That got me to the point where I have a reasonable error
    > message ("LDAPAuthServiceImpl:Bind:482 - LDAP Bind does not have
    > binding info").  I think I can talk to my LDAP guy to work through it.
    >
    > > I'd like XWiki to simply check passwords against our LDAP server but
    > do nothing else with it (like trying to add users in it etc.).  
    >  
    > Maybe I understood this sentence from the wiki
    > <http://www.xwiki.org/xwiki/bin/view/Dev/LDAPIntegration>.
    >
    >     Currently we have user auth and user creation using LDAP
    >
    > I guess that doesn't mean creating a user in the LDAP database.
    No it means with create XWiki pages for users in LDAP when they authenticate

    >  
    > Any idea how to enable these options (also from the wiki
    > <http://www.xwiki.org/xwiki/bin/view/Dev/LDAPIntegration>)?
    >
    >   # option to check non LDAP users against the XWiki user database
    >
    That's standard if the LDAP call failed
    >
    >   # option to have Automatic membership of LDAP users in
    >     XWiki.XWikiAllGroup, or XWiki.XWikiLdapGroup
    >
    -> this is done by the createUser call

    > Currently it's failing in the ldap lookup and not trying (I think) in
    > the xwiki database.
    >  
    > Thanks,
    > --Craig
    >  
    >
    >  
    > On 2/28/06, *Robin Fernandes* <[hidden email]
    > <mailto:[hidden email]>> wrote:
    >
    >     Hi,
    >
    >     1. In xwiki.cfg you need to specify the authentication class to
    >     use, like:
    >     xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.LDAPAuthServiceImpl
    >
    >
    >     Then I think you also need to set all the properties used in
    >     LDAPAuthServiceImpl.java, so:
    >     xwiki.authentication.ldap.port=...
    >     xwiki.authentication.ldap.server=...
    >     xwiki.authentication.ldap.bind_DN=...
    >     xwiki.authentication.ldap.bind_pass=...
    >     xwiki.authentication.ldap.base_DN=...
    >     xwiki.authentication.ldap.fields_mapping=...
    >     xwiki.authentication.ldap.UID_attr=...
    >     xwiki.authentication.ldap.check_level=...
    >
    >     2. Edit the file xwiki\WEB-INF\classes\log4j.properties to set the log
    >     level for specific packages or classes, like:
    >     com.xpn.xwiki.user.impl.LDAP=debug
    >
    >
    >     Cheers,
    >     Robin
    >
    >     On 27/02/06, Craig Muth < [hidden email]
    >     <mailto:[hidden email]>> wrote:
    >     > This is my first post to the list.  Let me begin by saying I
    >     think XWiki is
    >     > very very cool.
    >     >
    >     > I have 2 questions.
    >     >
    >     > 1. Is there a place I can look to find more info about setting
    >     up XWiki to
    >     > use LDAP for authentication?  I looked at
    >     > http://www.xwiki.org/xwiki/bin/view/Dev/LDAPIntegration
    >     <http://www.xwiki.org/xwiki/bin/view/Dev/LDAPIntegration>
    >     > and link specific to active directory.  I'd like XWiki to simply
    >     check
    >     > passwords against our LDAP server but do nothing else with it
    >     (like trying
    >     > to add users in it etc.).  I looked at the
    >     LDAPAuthServiceImpl.java source,
    >     > but wasn't really able to make anything out of it.
    >     >
    >     > 2. How do I enable logging and turn up the log level in XWiki?
    >     >
    >     > I'll try to aggregate whatever helpful answers I get and add
    >     them to
    >     > xwiki.org <http://xwiki.org>.
    >     >
    >     > Thanks,
    >     > --Craig
    >     >
    >     >
    >     > --
    >     > You receive this message as a subscriber of the
    >     [hidden email] <mailto:[hidden email]>
    >     > mailing list.
    >     > To unsubscribe:
    >     > mailto:[hidden email]
    >     <mailto:[hidden email]>
    >     > For general help: mailto: [hidden email]
    >     <mailto:[hidden email]>?subject=help
    >     > ObjectWeb mailing lists service home page:
    >     http://www.objectweb.org/wws
    >     >
    >     >
    >     >
    >
    >
    >
    >
    >     --
    >     You receive this message as a subscriber of the
    >     [hidden email] <mailto:[hidden email]>
    >     mailing list.
    >     To unsubscribe: mailto:[hidden email]
    >     <mailto:[hidden email]>
    >     For general help: mailto: [hidden email]
    >     <mailto:[hidden email]>?subject=help
    >     ObjectWeb mailing lists service home page:
    >     http://www.objectweb.org/wws
    >
    >
    >
    > ------------------------------------------------------------------------
    >
    >
    > --
    > You receive this message as a subscriber of the [hidden email] mailing list.
    > To unsubscribe: mailto:[hidden email]
    > For general help: mailto:[hidden email]?subject=help
    > ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
    >  

    --
    Ludovic Dubost
    XPertNet: http://www.xpertnet.fr/
    Blog: http://www.ludovic.org/blog/
    XWiki: http://www.xwiki.com
    Skype: ldubost AIM: nvludo Yahoo: ludovic




    --
    You receive this message as a subscriber of the [hidden email] mailing list.
    To unsubscribe: mailto:[hidden email]
    For general help: mailto:[hidden email]?subject=help
    ObjectWeb mailing lists service home page: http://www.objectweb.org/wws