LDAP configuration help - dedicated user

Help / Discuss
1

Hi@all,

short question about the LDAP Authentication module which i cannot get working.
I think its in cause that we have a dedicated user with permissions to query the Active Directory.

Are the configuration parameters

xwiki.authentication.ldap.bind_DN=
xwiki.authentication.ldap.bind_pass=

the correct places to specify this user?

Best regards

2

Hi,

yes u can find the documentation here: https://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/

Best regards

3

Thank you for claryfing this.

I think i know where my problem is.
In syslog i can see that the LDAP query is cn=Prename Lastname and he can’t find the user. In our AD the cn of the user is Lastname, Prename.

According to the documentation i thought that the parameter
xwiki.authentication.ldap.UID_attr=sAMAccountName
would solve this but it doesn’t.

Our sAMAccoutName in AD is “Prename Lastname”.

Any ideas?

#############################
Edit: Trial and error worked. The correct configuration for my problem is

xwiki.authentication.ldap.user_search_fmt=(sAMAccountName={1})