Tags:
create new tag
view all tags

Question

I have successfully installed LDAPContrib. Login works but the Loginname is not mapped to a WikiName.

In my cfg i set

$TWiki::cfg{Ldap}{WikiNameAttribute} = 'sn,givenName';
$TWiki::cfg{Ldap}{NormalizeWikiName} = 1;
$TWiki::cfg{Ldap}{NormalizeLoginName} = 1;

e.g. my login is "abc12de3". Login by typing my login and pwd works. But my WikiName should be "EigensederChristoph". I have tried other LDAP fields but nothing works.

Curious: my WikiNmae isnt "abc12de3", it is "abc 12de 3"! Mind the spaces after c and e!!

Any ideas or suggestions to fix this?

Environment

TWiki version: TWikiRelease04x01x02
TWiki plugins: DefaultPlugins, WebPermissionsPlugin, TagMePlugin, SearchSummaryPlugin, LatexModePlugin
Server OS: Win2003 Std
Web server: IIS 6
Perl version: 5.8.8
Client OS: Win XP SP2
Web Browser: IE6
Categories: Authentication

-- ChristophEigenseder - 07 Feb 2008

Answer

ALERT! If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

Could you give us some more information about your LDAP settings?

-- MartinKaufmann - 07 Feb 2008

Hi MartinKaufmann

  • using a Win2003 Active Directory as LDAP source (extra Server, not on Webserver).
  • login works
  • reading and populating groups works
  • nested groups are not populating (seems to be a generel problem, there is a other support entry here)
  • login Name to WikiName translation fails

The full Twiki.cfg settings for LDAP contrib are (masked some values):

$TWiki::cfg{Ldap}{Host} = 'my.ad.server';
$TWiki::cfg{Ldap}{Port} = 389;
$TWiki::cfg{Ldap}{Version} = '3';
$TWiki::cfg{Ldap}{Base} = 'dc=xxx,dc=yyy,dc=zzz';
$TWiki::cfg{Ldap}{BindDN} = 'cn=Twiki Reader,ou=Users,ou=Location,ou=AT,dc=xxx,dc=yyy,dc=zzz';
$TWiki::cfg{Ldap}{BindPassword} = 'secret'; 
$TWiki::cfg{Ldap}{SSL} = 0;
$TWiki::cfg{Ldap}{UseSASL} = 0;
$TWiki::cfg{Ldap}{UserBase} = 'ou=Users,ou=Org,ou=Location,ou=AT,dc=xxx,dc=yyy,dc=zzz';
$TWiki::cfg{Ldap}{LoginFilter} = 'objectClass=person';
$TWiki::cfg{Ldap}{LoginAttribute} = 'sAMAccountName';
$TWiki::cfg{Ldap}{WikiNameAttribute} = 'sn,givenName';
$TWiki::cfg{Ldap}{NormalizeWikiName} = 1; 
$TWiki::cfg{Ldap}{NormalizeLoginName} = 1; 
$TWiki::cfg{Ldap}{AllowChangePassword} = 0; 
$TWiki::cfg{Ldap}{SecondaryPasswordManager} = 'TWiki::Users::HtPasswdUser';
$TWiki::cfg{Ldap}{GroupBase} = 'ou=Distribution Lists,ou=AT,dc=xx,dc=yyy,dc=zzz'; 
$TWiki::cfg{Ldap}{GroupFilter} = 'cn=G-Location Org*';
$TWiki::cfg{Ldap}{GroupAttribute} = 'cn'; 
$TWiki::cfg{Ldap}{MemberAttribute} = 'member'; 
$TWiki::cfg{Ldap}{MemberIndirection} = 1; 
$TWiki::cfg{Ldap}{TWikiGroupsBackoff} = 1; 
$TWiki::cfg{Ldap}{NormalizeGroupName} = 1; 
$TWiki::cfg{Ldap}{MapGroups} = 1; 
$TWiki::cfg{Ldap}{MaxCacheAge} = 86400;
$TWiki::cfg{Ldap}{PageSize} = 500; 
$TWiki::cfg{Ldap}{Exclude} = 'TWikiGuest, TWikiContributor, TWikiRegistrationAgent, TWikiAdminGroup, NobodyGroup';

-- ChristophEigenseder - 08 Feb 2008

I did a bit of testing on my server and it looks like you need a space between sn and givenName:

$TWiki::cfg{Ldap}{WikiNameAttribute} = 'sn, givenName';
After changing this setting you might have to refresh your LDAP cache for it to take effect.

-- MartinKaufmann - 08 Feb 2008

Works, thanks!

-- ChristophEigenseder - 08 Feb 2008

Change status to:
Edit | Attach | Watch | Print version | History: r6 < r5 < r4 < r3 < r2 | Backlinks | Raw View | Raw edit | More topic actions
Topic revision: r6 - 2008-02-08 - ChristophEigenseder
 
  • Learn about TWiki  
  • Download TWiki
This site is powered by the TWiki collaboration platform Powered by Perl Hosted by OICcam.com Ideas, requests, problems regarding TWiki? Send feedback. Ask community in the support forum.
Copyright © 1999-2026 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.