Dear all,
I’m quite new with xwiki and I have a quick question regarding ldap users.
I could successfully configure ldap over TLS but I would like to allow more than group of users to connect my xwiki instance.
Can the entry below allow multiple entries ?
xwiki.authentication.ldap.user_group=
Instead of distribution groups can I configure OUs ? it does not seem to work for me.
Thank you !
xwiki.authentication.ldap.user_group only supports one group, but it supports various kinds of groups of groups documented above the xwiki.authentication.ldap.group_mapping property in https://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/.
Well it should in theory. You should probably try to enable debug log to see how what you indicate is resolved exactly.
Yes, 
You can use this :
xwiki.authentication.ldap.group_mapping=XWiki.Group1=cn=HMS Lydia,ou=crews,ou=groups,o=sevenSeas|\ (there is a back slash)
XWiki.Group2=HMS Victory,ou=crews,ou=groups,o=sevenSeas
And create a third group with : “XWiki.Group1” and “XWiki.Group2”
Thank you guys for your help on this issue !
I need really solution here: the wiki members in our organisation are from the different groups. I can use only one group with xwiki.authentication.ldap.user_group and it mapps the groups with xwiki.authentication.ldap.group_mapping but everybody else still can log in! I did exactly the settings from here https://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/ . As the result: every from ldap.base can log in, the groups are correct gemapped.
Can somebody help?
Thanks