Question
I have successfully installed LDAPContrib. Login works but the Loginname is not mapped to a
WikiName.
In my cfg i set
$TWiki::cfg{Ldap}{WikiNameAttribute} = 'sn,givenName';
$TWiki::cfg{Ldap}{NormalizeWikiName} = 1;
$TWiki::cfg{Ldap}{NormalizeLoginName} = 1;
e.g. my login is "abc12de3". Login by typing my login and pwd works. But my
WikiName should be "EigensederChristoph". I have tried other LDAP fields but nothing works.
Curious: my
WikiNmae isnt "abc12de3", it is "abc 12de 3"! Mind the spaces after c and e!!
Any ideas or suggestions to fix this?
Environment
--
ChristophEigenseder - 07 Feb 2008
Answer
If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.
Could you give us some more information about your LDAP settings?
--
MartinKaufmann - 07 Feb 2008
Hi
MartinKaufmann
- using a Win2003 Active Directory as LDAP source (extra Server, not on Webserver).
- login works
- reading and populating groups works
- nested groups are not populating (seems to be a generel problem, there is a other support entry here)
- login Name to WikiName translation fails
The full Twiki.cfg settings for LDAP contrib are (masked some values):
$TWiki::cfg{Ldap}{Host} = 'my.ad.server';
$TWiki::cfg{Ldap}{Port} = 389;
$TWiki::cfg{Ldap}{Version} = '3';
$TWiki::cfg{Ldap}{Base} = 'dc=xxx,dc=yyy,dc=zzz';
$TWiki::cfg{Ldap}{BindDN} = 'cn=Twiki Reader,ou=Users,ou=Location,ou=AT,dc=xxx,dc=yyy,dc=zzz';
$TWiki::cfg{Ldap}{BindPassword} = 'secret';
$TWiki::cfg{Ldap}{SSL} = 0;
$TWiki::cfg{Ldap}{UseSASL} = 0;
$TWiki::cfg{Ldap}{UserBase} = 'ou=Users,ou=Org,ou=Location,ou=AT,dc=xxx,dc=yyy,dc=zzz';
$TWiki::cfg{Ldap}{LoginFilter} = 'objectClass=person';
$TWiki::cfg{Ldap}{LoginAttribute} = 'sAMAccountName';
$TWiki::cfg{Ldap}{WikiNameAttribute} = 'sn,givenName';
$TWiki::cfg{Ldap}{NormalizeWikiName} = 1;
$TWiki::cfg{Ldap}{NormalizeLoginName} = 1;
$TWiki::cfg{Ldap}{AllowChangePassword} = 0;
$TWiki::cfg{Ldap}{SecondaryPasswordManager} = 'TWiki::Users::HtPasswdUser';
$TWiki::cfg{Ldap}{GroupBase} = 'ou=Distribution Lists,ou=AT,dc=xx,dc=yyy,dc=zzz';
$TWiki::cfg{Ldap}{GroupFilter} = 'cn=G-Location Org*';
$TWiki::cfg{Ldap}{GroupAttribute} = 'cn';
$TWiki::cfg{Ldap}{MemberAttribute} = 'member';
$TWiki::cfg{Ldap}{MemberIndirection} = 1;
$TWiki::cfg{Ldap}{TWikiGroupsBackoff} = 1;
$TWiki::cfg{Ldap}{NormalizeGroupName} = 1;
$TWiki::cfg{Ldap}{MapGroups} = 1;
$TWiki::cfg{Ldap}{MaxCacheAge} = 86400;
$TWiki::cfg{Ldap}{PageSize} = 500;
$TWiki::cfg{Ldap}{Exclude} = 'TWikiGuest, TWikiContributor, TWikiRegistrationAgent, TWikiAdminGroup, NobodyGroup';
--
ChristophEigenseder - 08 Feb 2008
I did a bit of testing on my server and it looks like you need a space between
sn and
givenName:
$TWiki::cfg{Ldap}{WikiNameAttribute} = 'sn, givenName';
After changing this setting you might have to refresh your LDAP cache for it to take effect.
--
MartinKaufmann - 08 Feb 2008
Works, thanks!
--
ChristophEigenseder - 08 Feb 2008