Tags:
create new tag
view all tags

Question

Hi, I would like to use my ldap-server as authorisation service in TWiki.

My ldap-server runs and is doing a great job together with kerberos managing all my user accounts in the network

I was able to activate apache-based authentication, that means, I can log in already using my loginname stored in LDAP and kerberos

Lets say my login is troska@E4PLEASENOSPAM.PHYSIK.UNI-DORTMUND.DE TWiki is not able to map this name to GeorgTroska as WikiName.

As I understand LdapContrib does this. I tried to configure my /etc/tiki/LocalSite.cfg:



$TWiki::cfg{DataDir} = '/var/lib/twiki/data';
$TWiki::cfg{LogDir} = '/var/lib/twiki/log';
$TWiki::cfg{Site}{Lang} = 'en';
$TWiki::cfg{LocalesDir} = '/var/lib/twiki/locale';
$TWiki::cfg{ScriptUrlPath} = '/cgi-bin/twiki';
$TWiki::cfg{Site}{FullLang} = 'en-us';
$TWiki::cfg{PubUrlPath} = '/twiki/pub';
$TWiki::cfg{PubDir} = '/var/www/twiki/pub';
$TWiki::cfg{TemplateDir} = '/var/lib/twiki/templates';
$TWiki::cfg{Sessions}{Dir} = '/tmp/twiki';
$TWiki::cfg{PassthroughDir} = '/tmp/twiki';
$TWiki::cfg{Site}{CharSet} = 'iso-8859-15';
$TWiki::cfg{Plugins}{WysiwygPlugin}{Enabled} = 1;
$TWiki::cfg{Password} = 'secret';
$TWiki::cfg{Plugins}{TreeBrowserPlugin}{Enabled} = 1;
$TWiki::cfg{Plugins}{PhotoarchivePlugin}{Enabled} = 1;
$TWiki::cfg{DefaultUrlHost} = 'http://server07';
$TWiki::cfg{Plugins}{LdapPlugin}{Enabled} = 1;
$TWiki::cfg{Plugins}{SvnPlugin}{Enabled} = 1;
$TWiki::cfg{PasswordManager} = 'TWiki::Users::LdapUser';
$TWiki::cfg{LoginManager} = 'TWiki::Client::ApacheLogin';
$TWiki::cfg{UserMappingManager} = 'TWiki::Users::LdapUserMapping';
#$TWiki::cfg{Ldap}{SecondaryPasswordManager} = 'TWiki::Users::HtPasswdUser';
$TWiki::cfg{Ldap}{WikiNameAttribute} = 'givenName,sn';
$TWiki::cfg{Ldap}{NormalizeLoginNames} = 1;
$TWiki::cfg{Ldap}{Host} = 'ldap.e4.physik.uni-dortmund.de';
$TWiki::cfg{Ldap}{Port} = 389;
$TWiki::cfg{Ldap}{Base} = 'dc=e4,dc=physik,dc=uni-dortmund,dc=de';
$TWiki::cfg{Ldap}{UserBase} = 'ou=people,dc=e4,dc=physik,dc=uni-dortmund,dc=de';
$TWiki::cfg{Ldap}{LoginFilter} = 'objectClass=posixAccount';
$TWiki::cfg{Ldap}{LoginAttribute} = 'uid';
$TWiki::cfg{Ldap}{WikiNameAttribute} = 'cn';
$TWiki::cfg{Ldap}{NormalizeWikiNames} = 1;
$TWiki::cfg{Ldap}{GroupBase} = 'ou=groups,dc=e4,dc=physik,dc=uni-dortmund,dc=de';
$TWiki::cfg{Ldap}{GroupFilter} = 'objectClass=posixGroup';
$TWiki::cfg{Ldap}{GroupAttribute} = 'cn';
$TWiki::cfg{Ldap}{MemberAttribute} = 'memberUid';
$TWiki::cfg{Ldap}{MemberIndirection} = 0;
$TWiki::cfg{Ldap}{MapGroups} = 1;
1;


But my LoginName is not mapped correctly. The only I see is "DE", as last part of my REALM

What am I doing wrong?

Thanks Georg

Environment

TWiki version: TWikiRelease04x00x05
TWiki plugins: LdapContrib
Server OS: debian etch
Web server: apache2
Perl version: 5.8.8
Client OS: mac os x
Web Browser: firefox
Categories: Authorisation

-- GeorgTroska - 15 Jul 2008

Answer

ALERT! If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

Sorry, closing this question after more than 30 days of inactivity. Feel free to re-open if needed.

-- PeterThoeny - 02 Sep 2008

Change status to:
Edit | Attach | Watch | Print version | History: r2 < r1 | Backlinks | Raw View | Raw edit | More topic actions
Topic revision: r2 - 2008-09-02 - PeterThoeny
 
  • Learn about TWiki  
  • Download TWiki
This site is powered by the TWiki collaboration platform Powered by Perl Hosted by OICcam.com Ideas, requests, problems regarding TWiki? Send feedback. Ask community in the support forum.
Copyright © 1999-2026 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.