<
From version < 54.1 >
edited by Thomas Mortagne
on 2012/05/28
To version < 56.1 >
edited by Thomas Mortagne
on 2012/10/11
>
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -64,7 +64,7 @@
64 64  #-# xwiki.authentication.ldap.bind_DN)
65 65  #-# {0} is replaced with the user uid field name and {1} with the user name
66 66  #-# The default is ({0}={1})
67 -# xwiki.authentication.ldap.ldap_user_search_fmt=({0}={1})
67 +# xwiki.authentication.ldap.user_search_fmt=({0}={1})
68 68  
69 69  #-# Only members of the following group will be verified in the LDAP
70 70  #-# otherwise only users that are found after searching starting from the base_DN
... ... @@ -83,7 +83,7 @@
83 83  # xwiki.authentication.ldap.group_classes=group,groupOfNames,groupOfUniqueNames,dynamicGroup,dynamicGroupAux,groupWiseDistributionList
84 84  
85 85  #-# [Since 1.5M1, XWikiLDAPAuthServiceImpl]
86 -#-# The potential names of the LDAP groups fields containings the members. Separated by commas.
86 +#-# The potential names of the LDAP groups fields containings the members. Separated by commas.
87 87  # xwiki.authentication.ldap.group_memberfields=member,uniqueMember
88 88  
89 89  #-# retrieve the following fields from LDAP and store them in the XWiki user object (xwiki-attribute=ldap-attribute)
... ... @@ -102,12 +102,12 @@
102 102  #-# * LDAP static groups (users/subgroups are listed statically in the group object)
103 103  #-# * [Since 3.3M1] LDAP organization units (users/subgroups are sub object of the provided organization unit)
104 104  #-# * [Since 3.3M1] LDAP filter (users/groups are object found in a search with the provided filter),
105 -#-# | character in the filter need to be escaped with backslash (\).
105 +#-# | character in the filter need to be escaped with backslash (\).
106 106  #-#
107 107  #-# Here is an example:
108 108  # xwiki.authentication.ldap.group_mapping=XWiki.XWikiAdminGroup=cn=AdminRole,ou=groups,o=domain,c=com|\
109 -# XWiki.LDAPUsers=ou=groups,o=domain,c=com|\
110 -# XWiki.Organisation=(cn=testers)
109 +# XWiki.LDAPUsers=ou=groups,o=domain,c=com|\
110 +# XWiki.Organisation=(cn=testers)
111 111  
112 112  #-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
113 113  #-# Time in s after which the list of members in a group is refreshed from LDAP
... ... @@ -154,6 +154,11 @@
154 154  #-# Specifies the LDAP attribute containing the password to be used "when xwiki.authentication.ldap.validate_password"
155 155  #-# is set to 1
156 156  # xwiki.authentication.ldap.password_field=userPassword
157 +
158 +#-# [Since 4.3M1, XWikiLDAPAuthServiceImpl]
159 +#-# The maximum number of milliseconds the client waits for any operation under these constraints to complete.
160 +#-# The default is 1000
161 +# xwiki.authentication.ldap.timeout=1000
157 157  {{/code}}
158 158  
159 159  {{info}}
... ... @@ -165,10 +165,12 @@
165 165  Here are some LDAP client for checking your configuration:
166 166  
167 167  Java based and Open Source:
173 +
168 168  * [[Apache Directory Studio>>http://directory.apache.org/studio/]]
169 169  * [[JXplorer>>http://jxplorer.org]]
170 170  
171 171  Windows only:
178 +
172 172  * [[Softerra LDAP Browser>>http://www.ldapbrowser.com/download.htm]]
173 173  
174 174  == Detailed use cases ==
... ... @@ -207,10 +207,12 @@
207 207  1. Implement the {{scm path="xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/user/api/XWikiAuthService.java"}}XWikiAuthService{{/scm}} interface.
208 208  1. Edit the //WEB-INF/xwiki.cfg// file and add a //xwiki.authentication.authclass// property pointing to your class. For example:
209 209  
210 -{{code}}
217 +{{code language="properties"}}
211 211  xwiki.authentication.authclass = com.acme.MyCustomAuthenticationService
212 212  {{/code}}
213 213  
221 +You can find various authenticators examples on https://github.com/xwiki-contrib/sandbox/blob/master/authenticators/.
222 +
214 214  Here's a [[tutorial on implementing a custom authentication class for authenticating against Oracle's SSO>>http://bodez.wordpress.com/2008/10/15/xwiki-user-authentication-with-oracle-sso/]].
215 215  
216 216  Note, that you also can implement own right management service by implementing {{scm path="xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/user/api/XWikiRightService.java"}}XWikiRightService{{/scm}} interface:

Get Connected