Question

Issue Summary:

LDAP is case insensitive, but TWiki is case sensitive. If a user does not login with their username exactly as it appears in the LDAP tree itself (with identical caps), TWiki will successfully authenticate the user with an LDAP bind, but will fail to map the user to a WikiName, and will not recognize the user as being a member of any LDAP groups. This disjoint between LDAP and TWiki causes a variety of problems.

I’m sure my issue is not unique, and it could be responsible for at least some of the unresolved LDAP-authentication-access/control questions that litter the TWiki.org Support Web and other forums. It seems that almost all of the unresolved issues are posted by folks using Microsoft technology and Active Directory. It is typical for such setups to use capital letters for usernames and other information, unlike Linux/Unix. I would assume this is probably why linux-using contributors have not been able to diagnose the problem. See LdapContribUsersGroupsDoNotDisplay, LdapContribLoginsAreSpotty, LdapContribUsersGroupsDoNotDisplay, etc for more.

I’ll make a post here in the support so others with the same problem can hopefully find a resolution by editing their LDAP (something I am not permitted to do at my organization – I'm a student working on contract), and maybe someone can help me pinpoint what I need to fix. I’ll also make a post in the LdapContribDev topic so hopefully future versions of the LDAP contrib can resolve this issue.

NOTE:

A FULL DESCRIPTION OF THIS ISSUE APPEARS AT MY HOME TOPIC KevinFirko

CLICK KevinFirko TO VIEW

The TWiki.org server does not allow enough characters to be submitted in a form (GET request) so I couldn't include the full description in this submission or else I would trigger a server error.

Environment

-- KevinFirko - 17 May 2007

Answer

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

Filed as Bugs:Item4205

-- MichaelDaum - 04 Jun 2007

Fixed in latest LdapContrib

-- MichaelDaum - 04 Jun 2007

Can I reopen this question for its relevancy to v4.2.0? I addressed it on the Support web in two topics: TWikiUserMappingDisabledRegistration and WikiNameBackwardsAndInCaps.

-- ShivaGoudarzi - 19 Mar 2008

Closing this question after more than 30 days of inactivity.

-- PeterThoeny - 01 May 2008