Changes for page Use cases of configuration to authenticate users with LDAP

Summary

• Page properties (1 modified, 0 added, 0 removed)

Details

Page properties

Content

...	...	@@ -44,7 +44,7 @@
44	44
45	45	1.1 Generic
46	46
47		-1.1 I want to be able to reuse LDAP users membership in XWiki
	47	+1.1.1 I want to be able to reuse LDAP users membership in XWiki
48	48
49	49	e.g. if you want that all the LDAP users of group <tt>cn=HMS Lydia,ou=crews,ou=groups,o=sevenSeas</tt> to be automatically added in XWiki group <tt>XWiki.XWikiAdminGroup</tt> when the user log in, set:
50	50	{code}
...	...	@@ -59,7 +59,7 @@
59	59
60	60	#warning("The xwiki groups have to already exist")
61	61
62		-1.1 My users are not located in the same organization unit
	62	+1.1.1 My users are not located in the same organization unit
63	63
64	64	So you can't use the <tt>xwiki.authentication.ldap.bind_DN=cn={0},department=USER,department=INFORMATIK,department=1230,o=MP</tt> pattern.
65	65
...	...	@@ -73,7 +73,7 @@
73	73	xwiki.authentication.ldap.bind_pass=pass
74	74	{code}
75	75
76		-1.1 My users are not located on the same server
	76	+1.1.1 My users are not located on the same server
77	77
78	78	e.g. if you use several subdomains and the users are defined seperately in each subdomain. This will likely be the case when you have a configuration like this:
79	79
...	...	@@ -86,12 +86,12 @@
86	86
87	87	XWiki cannot search in multiple domains (as of XWiki 1.5).
88	88
89		-1.1.1 Approach 1: Configure group membership login
	89	+1.1.1.1 Approach 1: Configure group membership login
90	90	One possible solution is to make one (or more) group(s) in your AD and set the group membership to all users that have to have access to your wiki. Then configure XWiki's to only let members of that group log in. If a user wants to log in, XWiki will look up if the user's credentials are found in the group member attributes in AD. With this setting, XWiki will ignore the base_DN search, if a user was found in that group.\\
91	91	Take care that the group membership attribute in AD (in its default configuration) will contain the CN ("FirstName LastName") - not the sAMAccountName. So your users will have to login with their full name instead of their username.
92	92
93	93
94		-1.1 I'm in multiwiki environment and I want my LDAP users to registered only on main wiki
	94	+1.1.1 I'm in multiwiki environment and I want my LDAP users to registered only on main wiki
95	95
96	96	Each wiki can have it's own LDAP configuration (even enable/disable LDAP) in XWiki.XWikiPreference page (edit it with object editor). What you can find in the xwiki.cfg file is just the default LDAP configuration.
97	97