Summary

• Page properties (1 modified, 0 added, 0 removed)

Details

Page properties

Content

...	...	@@ -13,8 +13,46 @@
13	13
14	14	1.1 LDAP Authentication
15	15
16		-TODO
	16	+1.1.1 Generic LDAP configuration
17	17
	18	+In order to enable the LDAP support you have to change the authentication method in ~~WEB-INF/xwiki.cfg~~ as follows:
	19	+{code}
	20	+xwiki.authentication.ldap=1
	21	+{code}
	22	+
	23	+You can setup the LDAP configuration either on the XWiki.XWikiPreferences page or in the ~~xwiki.cfg~~ file
	24	+
	25	+* *XWiki.XWikiPreferences*: you will need to use the class editor to add the following fields:
	26	+ -- ldap_server
	27	+ -- ldap_port
	28	+ -- ldap_check_level
	29	+ -- ldap_base_DN
	30	+ -- ldap_bind_DN
	31	+ -- ldap_bind_pass
	32	+ -- ldap_UID_attr
	33	+ -- ldap_fields_mapping
	34	+* *xwiki.cfg*: use the following properties in the xwiki.cfg file
	35	+ -- xwiki.authentication.ldap.server
	36	+ -- xwiki.authentication.ldap.port
	37	+ -- xwiki.authentication.ldap.check_level
	38	+ -- xwiki.authentication.ldap.base_DN
	39	+ -- xwiki.authentication.ldap.bind_DN
	40	+ -- xwiki.authentication.ldap.bind_pass
	41	+ -- xwiki.authentication.ldap.UID_attr
	42	+ -- xwiki.authentication.ldap.fields_mapping
	43	+
	44	+1.1.1 LDAP Configuration for Active Directory
	45	+
	46	+Here are values of the properties you need to set if your LDAP server implementation is Miscrosoft Active Directory:
	47	+ - *ldap_server*: name/IP of AD server machine
	48	+ - *ldap_port*: port ~~(e.g. 389)~~
	49	+ - *ldap_check_level*: 1
	50	+ - *ldap_base_DN*: name of root DN ~~(e.g. dc=ad,dc=company,dc=com)~~
	51	+ - *ldap_bind_DN*: domain\{0\} ~~(e.g. ad\{0\} where \{0\} will be replaced by username during validation)~~
	52	+ - *ldap_bind_pass*: \{1\} ~~(where \{1\} will be replaced by password during validation)~~
	53	+ - *ldap_UID_attr*: sAMAccountName
	54	+ - *ldap_fields_mapping*: name=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayName,mail=mail,ldap_dn=dn
	55	+
18	18	Example:
19	19
20	20	{code}