Summary

• Page properties (2 modified, 0 added, 0 removed)

Details

Page properties

Author

...	...	@@ -1,1 +1,1 @@
1		-XWiki.JasperSiepkes
	1	+XWiki.ThomasMortagne

Content

...	...	@@ -41,9 +41,9 @@
41	41	xwiki.authentication.ldap.bind_DN=cn={0},department=USER,department=INFORMATIK,department=1230,o=MP
42	42	xwiki.authentication.ldap.bind_pass={1}
43	43
44		-#-# Force to check password after LDAP connection
45		-#-# 0: disable
46		-#-# 1: enable
	44	+## Force to check password after LDAP connection
	45	+## 0: disable
	46	+## 1: enable
47	47	xwiki.authentication.ldap.validate_password=0
48	48
49	49	## only members of the following group will be verified in the LDAP
...	...	@@ -50,6 +50,9 @@
50	50	## otherwise only users that are found after searching starting from the base_DN
51	51	xwiki.authentication.ldap.user_group=cn=developers,ou=groups,o=MegaNova,c=US
52	52
	53	+## only users not member of the following group can autheticate
	54	+xwiki.authentication.ldap.exclude_group=cn=admin,ou=groups,o=MegaNova,c=US
	55	+
53	53	## base DN for searches
54	54	xwiki.authentication.ldap.base_DN=
55	55	department=USER,department=INFORMATIK,department=1230,o=MP
...	...	@@ -183,6 +183,8 @@
183	183
184	184	1.1 Kerberos SSO Authentication
185	185
	189	+#warning("This implementation of SSO is currently under review see: http://jira.xwiki.org/jira/browse/XWIKI-2496 . The class which is described in this segment of documentation, AppServerTrustedKerberosAuthServiceImpl, is not part of the default XWiki distribution!")
	190	+
186	186	The following is an example of mod_auth_kerb for Apache being used to easily implement Xwiki authentication of users via by HTTP Negotiate on a linux server. This example assumes you already have a working Apache2 HTTPD and Apache Tomcat setup with mod_jk.
187	187
188	188	First of all you need to create a principal and keytab for the webserver: