Changes for page Use cases of configuration to authenticate users with LDAP
Last modified by Thomas Mortagne on 2023/09/04 09:29
Change comment:
There is no comment for this version
Summary
-
Page properties (2 modified, 0 added, 0 removed)
Details
- Page properties
-
- Author
-
... ... @@ -1,1 +1,1 @@ 1 -xwiki:XWiki. VincentMassol1 +xwiki:XWiki.jcoury - Content
-
... ... @@ -80,10 +80,6 @@ 80 80 XWiki.OtherXWikiGroup=HMS Victory,ou=crews,ou=groups,o=sevenSeas 81 81 {{/code}} 82 82 83 -{{warning}} 84 -The XWiki groups have to already exist. 85 -{{/warning}} 86 - 87 87 == My users are not located in the same organization unit == 88 88 89 89 So you can't use the ##xwiki.authentication.ldap.bind_DN=cn={0},department=USER,department=INFORMATIK,department=1230,o=MP## pattern. ... ... @@ -148,17 +148,17 @@ 148 148 149 149 In this case, you just have to modify the **xwiki.authentication.ldap.user_group** value by putting the filter corresponding to what you want. Using the same example as above, you'll have: 150 150 151 -* For Zimbra based LDAP: 147 +* For Zimbra based LDAP:((( 152 152 {{code}} 153 153 xwiki.authentication.ldap.user_group=(zimbraAccountStatus=active) 154 154 {{/code}} 155 155 ))) 156 -* For ActiveDirectory: 152 +* For ActiveDirectory:((( 157 157 {{code}} 158 158 xwiki.authentication.ldap.user_group=(!(userAccountControl:1.2.840.113556.1.4.803:=2)) 159 159 {{/code}} 160 160 ))) 161 -* For a private attribute: 157 +* For a private attribute:((( 162 162 {{code}} 163 163 xwiki.authentication.ldap.user_group=(accountstatus=active) 164 164 {{/code}}