Tags:
create new tag
, view all tags

Question

I have successfully installed LDAPContrib. Login works but the Loginname is not mapped to a WikiName.

In my cfg i set

$TWiki::cfg{Ldap}{WikiNameAttribute} = 'sn,givenName';
$TWiki::cfg{Ldap}{NormalizeWikiName} = 1;
$TWiki::cfg{Ldap}{NormalizeLoginName} = 1;

e.g. my login is "abc12de3". Login by typing my login and pwd works. But my WikiName should be "EigensederChristoph". I have tried other LDAP fields but nothing works.

Curious: my WikiNmae isnt "abc12de3", it is "abc 12de 3"! Mind the spaces after c and e!!

Any ideas or suggestions to fix this?

Environment

TWiki version: TWikiRelease04x01x02
TWiki plugins: DefaultPlugins, WebPermissionsPlugin, TagMePlugin, SearchSummaryPlugin, LatexModePlugin
Server OS: Win2003 Std
Web server: IIS 6
Perl version: 5.8.8
Client OS: Win XP SP2
Web Browser: IE6
Categories: Authentication

-- ChristophEigenseder - 07 Feb 2008

Answer

ALERT! If you answer a question - or have a question you asked answered by someone - please remember to edit the page and set the status to answered. The status is in a drop-down list below the edit box.

Could you give us some more information about your LDAP settings?

-- MartinKaufmann - 07 Feb 2008

Hi MartinKaufmann

  • using a Win2003 Active Directory as LDAP source (extra Server, not on Webserver).
  • login works
  • reading and populating groups works
  • nested groups are not populating (seems to be a generel problem, there is a other support entry here)
  • login Name to WikiName translation fails

The full Twiki.cfg settings for LDAP contrib are (masked some values):

$TWiki::cfg{Ldap}{Host} = 'my.ad.server';
$TWiki::cfg{Ldap}{Port} = 389;
$TWiki::cfg{Ldap}{Version} = '3';
$TWiki::cfg{Ldap}{Base} = 'dc=xxx,dc=yyy,dc=zzz';
$TWiki::cfg{Ldap}{BindDN} = 'cn=Twiki Reader,ou=Users,ou=Location,ou=AT,dc=xxx,dc=yyy,dc=zzz';
$TWiki::cfg{Ldap}{BindPassword} = 'secret'; 
$TWiki::cfg{Ldap}{SSL} = 0;
$TWiki::cfg{Ldap}{UseSASL} = 0;
$TWiki::cfg{Ldap}{UserBase} = 'ou=Users,ou=Org,ou=Location,ou=AT,dc=xxx,dc=yyy,dc=zzz';
$TWiki::cfg{Ldap}{LoginFilter} = 'objectClass=person';
$TWiki::cfg{Ldap}{LoginAttribute} = 'sAMAccountName';
$TWiki::cfg{Ldap}{WikiNameAttribute} = 'sn,givenName';
$TWiki::cfg{Ldap}{NormalizeWikiName} = 1; 
$TWiki::cfg{Ldap}{NormalizeLoginName} = 1; 
$TWiki::cfg{Ldap}{AllowChangePassword} = 0; 
$TWiki::cfg{Ldap}{SecondaryPasswordManager} = 'TWiki::Users::HtPasswdUser';
$TWiki::cfg{Ldap}{GroupBase} = 'ou=Distribution Lists,ou=AT,dc=xx,dc=yyy,dc=zzz'; 
$TWiki::cfg{Ldap}{GroupFilter} = 'cn=G-Location Org*';
$TWiki::cfg{Ldap}{GroupAttribute} = 'cn'; 
$TWiki::cfg{Ldap}{MemberAttribute} = 'member'; 
$TWiki::cfg{Ldap}{MemberIndirection} = 1; 
$TWiki::cfg{Ldap}{TWikiGroupsBackoff} = 1; 
$TWiki::cfg{Ldap}{NormalizeGroupName} = 1; 
$TWiki::cfg{Ldap}{MapGroups} = 1; 
$TWiki::cfg{Ldap}{MaxCacheAge} = 86400;
$TWiki::cfg{Ldap}{PageSize} = 500; 
$TWiki::cfg{Ldap}{Exclude} = 'TWikiGuest, TWikiContributor, TWikiRegistrationAgent, TWikiAdminGroup, NobodyGroup';

-- ChristophEigenseder - 08 Feb 2008

I did a bit of testing on my server and it looks like you need a space between sn and givenName:

$TWiki::cfg{Ldap}{WikiNameAttribute} = 'sn, givenName';
After changing this setting you might have to refresh your LDAP cache for it to take effect.

-- MartinKaufmann - 08 Feb 2008

Works, thanks!

-- ChristophEigenseder - 08 Feb 2008

 
Change status to:
Topic revision: r6 - 2008-02-08 - ChristophEigenseder
 
Twitter Delicious Facebook Digg Google Bookmarks E-mail LinkedIn Reddit StumbleUpon    
  • Download TWiki
TWiki logo Powered by Perl Hosted by OICcam.com Ideas, requests, problems regarding TWiki? Send feedback. Ask community in the support forum.
Copyright © 1999-2012 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.