Changes for page Use cases of configuration to authenticate users with LDAP
Last modified by Thomas Mortagne on 2023/09/04 09:29
From version 45.2
edited by Eduard Moraru
on 2018/08/06 14:55
on 2018/08/06 14:55
Change comment:
There is no comment for this version
To version 46.1
edited by Thomas Mortagne
on 2018/08/16 09:56
on 2018/08/16 09:56
Change comment:
There is no comment for this version
Summary
-
Page properties (2 modified, 0 added, 0 removed)
Details
- Page properties
-
- Author
-
... ... @@ -1,1 +1,1 @@ 1 -xwiki:XWiki. enygma1 +xwiki:XWiki.ThomasMortagne - Content
-
... ... @@ -137,10 +137,14 @@ 137 137 ... 138 138 {{/code}} 139 139 140 - XWikicannot searchinmultiple domains(as of XWiki 1.5).140 +=== Approach 1: Let the user indicate the domain === 141 141 142 - ===Approach1:Configure groupmembershiplogin ===142 +Since 9.0 it's possible to map a different configuration for each in the xwiki.cfg file by playing with the ##xwiki.authentication.ldap.remoteUser*## properties. 143 143 144 +Then instead of typing {{code language="none"}}myuid{{/code}} the user will login using something like {{code language="none"}}myuid@MYDOMAIN{{/code}} so that the LDAP authenticator kind find the right server setup based on the provided domain. 145 + 146 +=== Approach 2: Configure group membership login === 147 + 144 144 One possible solution is to make one (or more) group(s) in your AD and set the group membership to all users that have to have access to your wiki. Then configure XWiki to only let members of that group log in. If a user wants to log in, XWiki will look up if the user's credentials are found in the group member attributes in AD. With this setting, XWiki will ignore the base_DN search, if a user was found in that group. 145 145 146 146 {{info}}
