Hello i am not able to group by LDAP user to xwiki group. I have created Xwiki group with name (XwikiPublic).
I want that for each user that used to login with ldap credential if they are in some particular ldap group then they should be mapped to this (XwikiPublic group of xwiki).
My LDAP user and group entry :
DN: uid=userName(uid),ou=People,dc=companyDomain,dc=com
cn: Full username
gidNumber: 5000
homeDirectory: /userhomes/userName
loginShell: /bin/bash
mail: userName@companyDomain.com
objectClass: inetOrgPerson
top
person
posixAccount
shadowAccount
sn: userName
uid: userName
DN: cn=GROUPNAME,ou=Groups,dc=companyDomain,dc=com
cn: GROUPNAME
gidNumber: 5000
memberUid: userName(uid)
objectClass: top
posixGroup
I am running xwiki in docker container , the xwiki.cfg file :
xwiki.authentication.ldap=1
xwiki.authentication.ldap.server=LDAP_SERVER_IP
xwiki.authentication.ldap.bind_DN=uid={0},ou=People,dc=companyDomain,dc=com
xwiki.authentication.ldap.bind_pass={1}
xwiki.authentication.ldap.base_DN=dc=companyDomain,dc=com
xwiki.authentication.ldap.user_search_fmt=(uid={0})
xwiki.authentication.ldap.fields_mapping=last_name=sn,first_name=uid,email=mail
xwiki.authentication.ldap.trylocal=1
xwiki.authentication.ldap.loglevel=DEBUG
xwiki.authentication.group.allgroup=0
xwiki.authentication.ldap.group_mapping=XWiki.XwikiPublic=cn=groupname,ou=Groups,dc=companyDomain,dc=com
xwiki.authentication.ldap.mode_group_sync=always
I am try to login with the above ldap user but its not mapping this user to Custom group XwikiPublic instead its mapping the user to : XWikiAllGroup
Here are the container logs when user try to login :
TRACE x.c.l.XWikiLDAPAuthServiceImpl - Starting LDAP authentication
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - The provided user is null. We don't try to authenticate, it probably means the user is in non logged mode.
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] TRACE x.c.l.XWikiLDAPAuthServiceImpl - Starting LDAP authentication
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPConfig - remoteUserParser: null
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPConfig - ldap_group_classes: [groupofnames, posixgroup, apple-group, groupofuniquenames, dynamicgroup, groupwisedistributionlist, group, dynamicgroupaux]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPConfig - ldap_group_memberfields: [uniquemember, memberuid, member]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPConnection - No SRV record for _ldap._tcp.{LDAP server IP} found.
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPConnection - Connection to LDAP server [{LDAP server IP}:389]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPConnection - Binding to LDAP server with credentials login=[uid={LDAP UID},ou=People,dc={companyDomain},dc=com]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPUtils - LDAP attributes will be used to update XWiki attributes.
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPUtils - Getting the list of user fields to synchronize
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPUtils - LDAP avatar photo synchronisation is disabled
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPUtils - LDAP user fields to synchronize: [sn, uid, mail, cn]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.PagedLDAPSearchResults - LDAP pagined search: base=[uid={LDAP UID},ou=People,dc={companyDomain},dc=com] query=[null] attrs=[[sn, uid, mail, cn]] scope=[0] typesOnly=[false] pageSize=[500], cookie=[null]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPConnection - - values for attribute [uid]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPConnection - |- [{LDAP UID}]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPConnection - - values for attribute [mail]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPConnection - |- [{usernameofMailID}@{companyDomain}.com]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPConnection - - values for attribute [cn]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPConnection - |- [{LDAP cn}]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPConnection - - values for attribute [sn]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPConnection - |- [{LDAP UID}]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPConnection - LDAP search found attributes [[{name=dn value=uid={LDAP UID},ou=People,dc={companyDomain},dc=com}, {name=uid value={LDAP UID}}, {name=mail value={usernameofMailID}@{companyDomain}.com}, {name=cn value={LDAP cn}}, {name=sn value={LDAP UID}}]]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG .l.i.DefaultLDAPDocumentHelper - User page name format: ${uid}
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG .l.i.DefaultLDAPDocumentHelper - User page name substitution map: {ldap.cn={LDAP cn}, ldap.mail._lowerCase={usernameofMailID}@{companyDomain}.com, ldap.dn._lowerCase=uid={LDAP UID},ou=people,dc={companyDomain},dc=com, ldap.sn._clean._lowerCase={LDAP UID}, ldap.dn._clean=uid={LDAP UID}ou=Peopledc={companyDomain}dc=com, ldap.cn._lowerCase={LDAP cn}, uid._upperCase={LDAP cn}, ldap.sn._upperCase={LDAP UID}, ldap.cn._clean={userFullname}, ldap.uid._lowerCase={LDAP UID}, uid._clean={userFullname}, uid._clean._upperCase={userFullname}, auth.input._upperCase={LDAP UID}, uid={LDAP cn}, ldap.sn={LDAP UID}, auth.input._clean._lowerCase={LDAP UID}, ldap.cn._clean._upperCase={userFullname}, ldap.sn._clean={LDAP UID}, ldap.uid._clean._lowerCase={LDAP UID}, ldap.dn._clean._upperCase=UID={LDAP UID}OU=PEOPLEDC={companyDomain}DC=COM, ldap.mail._clean._lowerCase={userFullname}{companyDomain}com, auth.input={LDAP UID}, ldap.dn=uid={LDAP UID},ou=People,dc={companyDomain},dc=com, ldap.mail._upperCase={usernameofMailID}@{companyDomain}.COM, ldap.sn._lowerCase={LDAP UID}, ldap.sn._clean._upperCase={LDAP UID}, ldap.uid._upperCase={LDAP UID}, ldap.uid._clean={LDAP UID}, ldap.cn._upperCase={LDAP cn}, uid._lowerCase={LDAP cn}, ldap.mail._clean._upperCase={userFullname}{companyDomain}COM, auth.input._lowerCase={LDAP UID}, uid._clean._lowerCase={userFullname}, ldap.dn._upperCase=UID={LDAP UID},OU=PEOPLE,DC={companyDomain},DC=COM, ldap.mail={usernameofMailID}@{companyDomain}.com, ldap.mail._clean={userFullname}{companyDomain}com, auth.input._clean._upperCase={LDAP UID}, ldap.uid._clean._upperCase={LDAP UID}, ldap.uid={LDAP UID}, ldap.dn._clean._lowerCase=uid={LDAP UID}ou=peopledc={companyDomain}dc=com, auth.input._clean={LDAP UID}, ldap.cn._clean._lowerCase={userFullname}}
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG .l.i.DefaultLDAPDocumentHelper - User page name : [{LDAP cn}]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG .l.i.DefaultLDAPDocumentHelper - Cleaned user page name : [{userFullname}]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPUtils - Creating new XWiki user based on LDAP attribues located at [uid={LDAP UID},ou=People,dc={companyDomain},dc=com]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPUtils - Start first synchronization of LDAP profile [[{name=dn value=uid={LDAP UID},ou=People,dc={companyDomain},dc=com}, {name=uid value={LDAP UID}}, {name=mail value={usernameofMailID}@{companyDomain}.com}, {name=cn value={LDAP cn}}, {name=sn value={LDAP UID}}]] with new user profile based on mapping [{uid=first_name, mail=email, sn=last_name}]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPUtils - New XWiki user created: [xwiki:XWiki.{userFullname}]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPConfig - Groupmapping found [XWiki.XwikiPublic] [[cn={companyDomain},ou=Groups,dc={companyDomain},dc=com]]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPUtils - Updating group membership for the user [XWiki.{userFullname}]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPUtils - The user belongs to following XWiki groups:
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPUtils - XWiki.XWikiAllGroup
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPUtils - Found cache entry for group [cn={companyDomain},ou=Groups,dc={companyDomain},dc=com]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG o.x.c.l.XWikiLDAPUtils - Found group [cn={companyDomain},ou=Groups,dc={companyDomain},dc=com] members [{}]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - LDAP authentication succeed with principal [XWiki.{userFullname}]
http://{IP}:{port}/bin/loginsubmit/XWiki/XWikiLogin] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: null
http://{IP}:{port}/bin/view/XWiki/username] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.{userFullname}
http://{IP}:{port}/bin/ssx/XWiki/Mentions/MentionsMacro?language=en&docVersion=1.1] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.{userFullname}
http://{IP}:{port}/bin/jsx/XWiki/Notifications/Code/Macro/NotificationsMacro?language=en&docVersion=1.1] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.{userFullname}
http://{IP}:{port}/bin/get/XWiki/username?xpage=xpart&vm=commentsinline.vm] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.{userFullname}
http://{IP}:{port}/rest/wikis/xwiki/localization/translations?locale=en&prefix=attachment.validation.mimetype.&key=errorMessage&key=allowedMimetypes&key=blockerMimetypes] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.{userFullname}
http://{IP}:{port}/rest/wikis/xwiki/localization/translations?locale=en&prefix=attachment.validation.filesize.&key=errorMessage] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.{userFullname}
http://{IP}:{port}/rest/wikis/xwiki/localization/translations?locale=en&prefix=&key=core.export.pdf.options.title&key=export.pdf.options.template&key=export.pdf.options.template.hint&key=export.pdf.options.loadFailure&key=export.pdf.generator.checking&key=export.pdf.generator.unavailable&key=export.pdf.generator.checkFailed&key=export.pdf.modal.close&key=export.pdf.inProgress&key=export.pdf.failed&key=export.pdf.lastError&key=export.pdf.canceling&key=export.pdf.canceled&key=export.pdf.cancelFailed&key=export.pdf.loading&key=export.pdf.pageReadyTimeout&key=cancel] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.{userFullname}
http://{IP}:{port}/rest/wikis/xwiki/localization/translations?locale=en&prefix=like.button.title.&key=unlike&key=like] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.{userFullname}
http://{IP}:{port}/rest/wikis/xwiki/localization/translations?locale=en&prefix=web.uicomponents.suggest.&key=selectTypedText] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.{userFullname}
http://{IP}:{port}/asyncrenderer/notifications/display/5ALERT_26xwiki%253AXWiki.{userFullname}_10_null_-177575890/locale/en/request.wiki/xwiki/user/xwiki%253AXWiki.{userFullname}/97?clientId=97&timeout=500&wiki=xwiki] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.{userFullname}
http://{IP}:{port}/asyncrenderer/uix/org.xwiki.platform.wiki.ui.mainwiki.menu/author/xwiki%253AXWiki.username/doc.reference/xwiki%253AXWiki.username%2528%2529/locale/en/secureDocument/xwiki%253AWikiManager.UserWikiSheet?clientId=98&timeout=500&wiki=xwiki] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.{userFullname}
http://{IP}:{port}/asyncrenderer/uix/org.xwiki.platform.wiki.ui.common.contentFooter.authors/author/xwiki%253AXWiki.username/doc.reference/xwiki%253AXWiki.username%2528%2529/locale/en/secureDocument/xwiki%253AXWiki.PageAuthorsUIX/user/xwiki%253AXWiki.{userFullname}/wiki/xwiki?clientId=99&timeout=500&wiki=xwiki] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.{userFullname}
http://{IP}:{port}/asyncrenderer/uix/xwiki%253APanels.Applications/author/xwiki%253AXWiki.username/icon.theme/Font%2BAwesome/locale/en/request.wiki/xwiki/secureDocument/xwiki%253APanels.Applications/user/xwiki%253AXWiki.{userFullname}/wiki/xwiki?clientId=100&timeout=500&wiki=xwiki] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.{userFullname}
http://{IP}:{port}/asyncrenderer/uix/xwiki%253AHelp.TipsPanel.WebHome/author/xwiki%253AXWiki.username/locale/en/secureDocument/xwiki%253AHelp.TipsPanel.WebHome/101?clientId=101&timeout=500&wiki=xwiki] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.{userFullname}
http://{IP}:{port}/bin/get/XWiki/username?] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.{userFullname}
http://{IP}:{port}/asyncrenderer/uix/xwiki%253APanels.MyRecentModifications/author/xwiki%253AXWiki.username/locale/en/request.wiki/xwiki/secureDocument/xwiki%253APanels.MyRecentModifications/user/xwiki%253AXWiki.{userFullname}/wiki/xwiki?clientId=102&timeout=500&wiki=xwiki] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.{userFullname}
http://{IP}:{port}/rest/wikis/xwiki/localization/translations?locale=en&prefix=core.viewers.attachments.&key=date&key=author] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.{userFullname}
http://{IP}:{port}/bin/get/TourCode/TourJson?xpage=plain&outputSyntax=plain&tourDoc=XWiki.username] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.{userFullname}
I have check these thread thread 1 , thread2 ,still can’t achieve it.
How can i achieve to map my ldap user to xwiki custom group (xwikiPublic here), what am i doing wrong ? Thanks in advance .
1 post - 1 participant