LDAP : Users are not located in the same organization unit

Help / Discuss
1

Hello (my english is bad)

I set up in the first time my ldap connection with :

xwiki.authentication.ldap.bind_DN=cn={0},department=USER,department=INFORMATIK,department=1230,o=MP

It works perfectly and the user is created in the good xwiki’s group.

In the second time i set up with the trick to connect to LDAP with a user able to list LDAP users :

xwiki.authentication.ldap.bind_DN=cn=Administrator,dc=mydomain,dc=org
xwiki.authentication.ldap.bind_pass=pass

It works too and create in the good xwiki’s group,
i’ll try to connect with the same login with a wrong password = it works too

I don’t think so it’s a bug or i forget anything in my set up

List of soft :
XWiki 9.3.1
LDAP Authenticator 9.2.4

LDAP : Yes
LDAP SERVER ADRESS : entreprise.eu.fg.ms.test
LDAP SERVER PORT : 389
LDAP LOGIN MATCHING : CN=user,OU=…,OU=…,DC=entreprise,DC=eu,DC=…
LDAP PASSWORD MATCHING : pass
LDAP BASE DN : DC=entreprise,DC=eu,DC=…
LDAP UID ATTRUBITE NAME : sAMAccountName
TRY LOCAL LOGIN : Yes
UPDATE USER FROM LDAP AFTER LOGIN : Yes
LDAP USER FIELDS MAPPING : sAMAccountName,last_name=sn,first_name=givenName, fullname=DisplayName
LDAP GROUPS MAPPING : XWiki.XWIKIAdminGroup=CN=Wiki_Admins,OU=…
WHEN TO SYNCHRONIZE LDAP GROUPS : At each authentication of a user

Thanks in advance for your help

Regards

2

So you are saying that in the login form you can put any password and it always authenticate ?

3

Yes, in the login form.
I fill with a good login name and a bad password, the auth pass

4

This does not make much sense to me. You should probably try to get a debug log of the authentication to see what is happening exactly. See http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/#HEnableLDAPdebuglog.