Question
I have successfully installed LDAPContrib. Login works but the Loginname is not mapped to a
WikiName.
In my cfg i set
$TWiki::cfg{Ldap}{WikiNameAttribute} = 'sn,givenName';
$TWiki::cfg{Ldap}{NormalizeWikiName} = 1;
$TWiki::cfg{Ldap}{NormalizeLoginName} = 1;
e.g. my login is "abc12de3". Login by typing my login and pwd works. But my
WikiName should be "EigensederChristoph". I have tried other LDAP fields but nothing works.
Curious: my
WikiNmae isnt "abc12de3", it is "abc 12de 3"! Mind the spaces after c and e!!
Any ideas or suggestions to fix this?
Environment
--
ChristophEigenseder - 07 Feb 2008
Answer
If you answer a question - or have a question you asked answered by someone - please remember to edit the page and set the status to answered. The status is in a drop-down list below the edit box.
Could you give us some more information about your LDAP settings?
--
MartinKaufmann - 07 Feb 2008
Hi
MartinKaufmann
- using a Win2003 Active Directory as LDAP source (extra Server, not on Webserver).
- login works
- reading and populating groups works
- nested groups are not populating (seems to be a generel problem, there is a other support entry here)
- login Name to WikiName translation fails
The full Twiki.cfg settings for LDAP contrib are (masked some values):
$TWiki::cfg{Ldap}{Host} = 'my.ad.server';
$TWiki::cfg{Ldap}{Port} = 389;
$TWiki::cfg{Ldap}{Version} = '3';
$TWiki::cfg{Ldap}{Base} = 'dc=xxx,dc=yyy,dc=zzz';
$TWiki::cfg{Ldap}{BindDN} = 'cn=Twiki Reader,ou=Users,ou=Location,ou=AT,dc=xxx,dc=yyy,dc=zzz';
$TWiki::cfg{Ldap}{BindPassword} = 'secret';
$TWiki::cfg{Ldap}{SSL} = 0;
$TWiki::cfg{Ldap}{UseSASL} = 0;
$TWiki::cfg{Ldap}{UserBase} = 'ou=Users,ou=Org,ou=Location,ou=AT,dc=xxx,dc=yyy,dc=zzz';
$TWiki::cfg{Ldap}{LoginFilter} = 'objectClass=person';
$TWiki::cfg{Ldap}{LoginAttribute} = 'sAMAccountName';
$TWiki::cfg{Ldap}{WikiNameAttribute} = 'sn,givenName';
$TWiki::cfg{Ldap}{NormalizeWikiName} = 1;
$TWiki::cfg{Ldap}{NormalizeLoginName} = 1;
$TWiki::cfg{Ldap}{AllowChangePassword} = 0;
$TWiki::cfg{Ldap}{SecondaryPasswordManager} = 'TWiki::Users::HtPasswdUser';
$TWiki::cfg{Ldap}{GroupBase} = 'ou=Distribution Lists,ou=AT,dc=xx,dc=yyy,dc=zzz';
$TWiki::cfg{Ldap}{GroupFilter} = 'cn=G-Location Org*';
$TWiki::cfg{Ldap}{GroupAttribute} = 'cn';
$TWiki::cfg{Ldap}{MemberAttribute} = 'member';
$TWiki::cfg{Ldap}{MemberIndirection} = 1;
$TWiki::cfg{Ldap}{TWikiGroupsBackoff} = 1;
$TWiki::cfg{Ldap}{NormalizeGroupName} = 1;
$TWiki::cfg{Ldap}{MapGroups} = 1;
$TWiki::cfg{Ldap}{MaxCacheAge} = 86400;
$TWiki::cfg{Ldap}{PageSize} = 500;
$TWiki::cfg{Ldap}{Exclude} = 'TWikiGuest, TWikiContributor, TWikiRegistrationAgent, TWikiAdminGroup, NobodyGroup';
--
ChristophEigenseder - 08 Feb 2008
I did a bit of testing on my server and it looks like you need a space between
sn and
givenName:
$TWiki::cfg{Ldap}{WikiNameAttribute} = 'sn, givenName';
After changing this setting you might have to refresh your LDAP cache for it to take effect.
--
MartinKaufmann - 08 Feb 2008
Works, thanks!
--
ChristophEigenseder - 08 Feb 2008