You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@lenya.apache.org by jazzhazze <ha...@glocalnet.net> on 2008/04/16 11:54:51 UTC
Support for Active Directory???
Hi!
I'm about to migrate a website to a new environment. I'm thinking about
setting up Lenya as a possible CMS for the site (I'm also looking at
Typo3...).
It is very important to me that the CMS supports Active Directory, and that
it will be possible to use Active Directory for access issues.
Will Lenya support that??
Does it require a lot of coding/modifications to enable this?
Thanks in prehand!
/JH
--
View this message in context: http://www.nabble.com/Support-for-Active-Directory----tp16720195p16720195.html
Sent from the Lenya - Users mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by Richard Frovarp <ri...@sendit.nodak.edu>.
jazzhazze wrote:
> How active is the user community of Lenya?
>
> How often is the product updated?
>
> Are there any "libraries" with user contributed files/modules etc.?
>
> How mature is the product?
>
> Why should anyone choose Lenya instead of, for example, Typo3?
>
> /JH
>
I will echo Jürgen's opinion about Typo3's UI being more complex than
Lenya's. The department I am part of is offering Typo3 to the
institution as their CMS. It works well, and has many more features than
Lenya. However, it is more complex to use. There are tree operations
that their admin must do in kind of a weird way. Operations that
standard users can do in Lenya (move a page up or down for example). My
group on the other hand has been able to deploy Lenya to about 60
different schools with much less support. We provide the site admins
with about 2 hours of training via phone, then we follow up with 4 hours
of in person training for the teachers. That seems to be effective for us.
The use of XSLT was a big plus for us as well. We did not want to learn
yet another proprietary templating language.
I've been running versions of 2.0 code since October in production.
Right now I am running 2.0.1 (plus a couple of patches) and it is stable.
Richard
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by Jürgen Ragaller <ra...@apache.org>.
Hi JH
>
> http://people.apache.org/~coar/mlists.html#lenya.apache.org
interesting - thx.
>
>
>> How mature is the product?
>>
>
> 1.2.x is used by some large organizations (e.g., some Swiss
> universities, the European patent office, the Mobiliar insurance
> company) for a couple of years now. Maybe some of the users can
> comment on this?
A customer of us uses 2.0.1 in production for almost 4 Months now. OK
not a high traffic website but it is working without any problems
(minimax.ch).
>
>> Why should anyone choose Lenya instead of, for example, Typo3?
>
Two points I can remember were important to us at the time we made our
choice (Typo3 and Plone were in the final round of our lengthy cms
odyssee).
- Lenyas admin gui is pretty straight forward and we think is easier
to get into for our client then the rather complex typo3 gui (at least
at the time we made our choise of cms)
- Using xsl for Templating was a +. A language to learn and use not
only for lenya templates but for many other tasks as well. This might
not be the case for typo3 script. And the workflow can be: Design >
xhtml written by anyone > lenya rendering xslt. The templating is
really a nice process.
And, yes a decision to move towards java in the long term was
important too.
Jürgen
null-oder-eins GmbH Zürich
web & graphic design
www.null-oder-eins.ch
ragaller@apache.org
Skype: callto://ragaller
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by Andreas Hartmann <an...@apache.org>.
Hi,
jazzhazze schrieb:
> How active is the user community of Lenya?
http://people.apache.org/~coar/mlists.html#lenya.apache.org
We have user meetings in Europe (Germany/Switzerland) approx. twice a year.
> How often is the product updated?
1.2.3 05-May-2005
1.2.4 26-Jun-2005
1.2.5 27-Feb-2007
2.0 08-Jan-2008
2.0.1 is ready and will be released as soon as the new website is
published. The 1.2.x branch is very stable, therefore there haven't been
many releases lately. The 2.0 release took a lot of initial effort, thus
the large gap between the major releases.
> Are there any "libraries" with user contributed files/modules etc.?
Not that I'm aware of. Some organizations (e.g., the University of
Zurich) have Lenya committers in their teams and commit their add-ons
directly to the Lenya codebase. Unfortunately, most of the others still
keep their customizations and add-ons for themselves.
> How mature is the product?
1.2.x is used by some large organizations (e.g., some Swiss
universities, the European patent office, the Mobiliar insurance
company) for a couple of years now. Maybe some of the users can comment
on this?
> Why should anyone choose Lenya instead of, for example, Typo3?
From my PoV:
Focus / Features:
- based on open standards
- cross media publishing capabilities (XML, FOP and Batik integration)
- extremely flexible and powerful rendering engine (XSLT, pipelines)
- very good EAI support through Cocoon
- XML validation ensures structured/semantic content and CI conformance
- WYSIWYG editors
- built-in web application framework (Cocoon, CForms, Flow)
Deployment:
- no database needed
- you can re-use an existing servlet container infrastructure (e.g.,
Tomcat) with all its manageability, scalability and robustness
- many operations departements prefer Java to a PHP solution
Comments/additions are greatly appreciated :)
-- Andreas
--
Andreas Hartmann, CTO
BeCompany GmbH
http://www.becompany.ch
Tel.: +41 (0) 43 818 57 01
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by ru...@uniklinik-freiburg.de.
Hi JH,
> How mature is the product?
Just have a look at:
http://wiki.apache.org/lenya-data/attachments/MeetingFreiburg2007/attachments/freiburgexp.pdf
>
> Why should anyone choose Lenya instead of, for example, Typo3?
>
The schema validatation was very import for us to enforce the Corporate
Design.
>
Rudolf
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by jazzhazze <ha...@glocalnet.net>.
How active is the user community of Lenya?
How often is the product updated?
Are there any "libraries" with user contributed files/modules etc.?
How mature is the product?
Why should anyone choose Lenya instead of, for example, Typo3?
/JH
jazzhazze wrote:
>
> Hi!
> I'm about to migrate a website to a new environment. I'm thinking about
> setting up Lenya as a possible CMS for the site (I'm also looking at
> Typo3...).
>
> It is very important to me that the CMS supports Active Directory, and
> that it will be possible to use Active Directory for access issues.
>
> Will Lenya support that??
> Does it require a lot of coding/modifications to enable this?
>
> Thanks in prehand!
> /JH
>
--
View this message in context: http://www.nabble.com/Support-for-Active-Directory----tp16720195p16742413.html
Sent from the Lenya - Users mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by Rainer Schöpf <ra...@proteosys.com>.
On Wed, 16 Apr 2008, Richard Frovarp wrote:
> Rainer Schöpf wrote:
> > On Wed, 16 Apr 2008, Andreas Hartmann wrote:
> >
> > > you find more information on this page:
> > > http://lenya.apache.org/docs/1_2_x/how-to/ldap_authentication.html
> >
> > I'm a bit confused. If I understand this correctly, it does not use
> > Kerberos for authenticaion. Or does it?
> >
> > Rainer
> >
> >
>
> No, it uses LDAP authentication. I don't know if AD supports that or not.
You mean authentication via the LDAP bind operation, I suppose? This is
supported by the AD LDAP server.
However, that is not what I meant. For good reasons, AD uses Kerberos for
authentication, and LDAP bind with SPNEGO (ie. GSS).
> I
> have hacked a version of the LDAP authentication to use LDAP and Kerberos. It
> isn't that hard to do, and I could perhaps provide some example code on how
> my stuff works.
Thanks, I'm definitely interested. I'm busy with something else right now, so
I'll take up your offer later.
I'm looking for integrated authentication. Recently I found a very interesting
paper on the port25 website, explaining how to integrate the apache webserver
with mod_auth_kerberos and Windows Kerberos:
http://port25.technet.com/archive/2008/01/25/technical-analysis-apache-with-mod-auth-kerb-and-windows-server.aspx
I have a working example in a test environment: with a valid Kerberos ticket I
can access the protected area on my web site with IE from a Windows workstation
and with Firefox from Linux.
The next step would be implement SPNEGO authentication for the servlet
container. http://appliedcrypto.com has some papers on this.
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by jazzhazze <ha...@glocalnet.net>.
Thank you all for your supporting replies!
I have to admit that I'm not a very experienced programmer, but:
1) Concerning the installation it was difficult to follow the instructions
as they were sometimes unclear. For example when it came to deleting the
multiple files. I made an installation using Tomcat (not stand-alone) and it
is hard to understand which files at what locations that are supposed to be
deleted.
2) It is hard to understand the structure of the CMS if I, for example, want
to change the appearance of the menus etc, change colors, sizes, add
pictures. In other words, how to customize the CMS. How the files are
organised, connected etc. It is nowhere written in the documentation (except
for that one could modify the xslt-files), but which xslt-files, and in
which directories? How about the CSS-files? The other, "master"-files that
calls the CSS-files and the xslt-files?
For example, I would like to add a little picture above the selectable menu
items on the left menu (which contains the flags also). How should I do
that, so that the picture will have the same background color as the menu
text headlines, thus looking like an menu item?
3) I can't find any log files containing info about the LDAP connection so
I'm not sure whether it is a question about settings or if the LDAP in
general that doesn't work in my setup. I have downloaded a LDAP-browser and
successfully established a connection to my LDAP-source. But I can't make it
work with the same settings.
4) I want the default language of my site to be French. Therefore I've tried
to create a new publication based on the default-template with the language
set to French from the beginning. So far so good, the French flag is
selected and it works. But, if I close down the browser and log in again
there is a screen coming up saying that "the following page isn't available
in en" but it is available in "fr". When clicking on the "fr" link there is
another page popping up, saying that the publication doesn't exists.
If I create a publication with English as default language, and enable
French language at the "site"-tab (sorry, I wrote admin earlier) it is not
possible to modify the French "index_fr"-page in Kupu. It is only possible
to modify the English "index"-page, even if I select French and then click
on edit page with Kupu.
5) Concerning Kupu I have studied the bug report you linked, but I haven't
found anything useful unfortunately.
Regards,
JH
Andreas Hartmann wrote:
>
> Hi JH,
>
> jazzhazze schrieb:
>> I have installed Lenya now (wasn't so very easy).
>
> what problems did you run into? These things have to be fixed or added
> to the FAQ.
>
>
>> But it seems to be full with bugs:
>>
>> All the time when I click on some buttons a page with the text "An error
>> occured. Please contact your system administrator." appears. For example
>> when:
>> 1) Trying to add an LDAP user after following the calibration
>> instructions.
>> Have I really calibrated the ldap-config file right or is this caused by
>> a
>> bug?
>
> That's hard to tell. The source of the "An error occured" page contains
> a stack trace, maybe it can point to the source of the problem.
>
>
>> 2) Trying to add a language at the admin site.
>
> Do you have such a menu item in the admin area? That shouldn't be the
> case, it looks like there's something wrong.
>
>
>> 3) I also get this message "Error saving your data. Response status: 415.
>> Check your server log for more information" when trying to save a
>> document
>> edited by Kupu.
>
> Maybe it is this issue?
> https://issues.apache.org/bugzilla/show_bug.cgi?id=36298
>
> At the moment there is no open standard for the communication between
> editors and CMSs, which makes the error handling very complicated. Any
> help with fixing this issue is greatly appreciated.
>
> -- Andreas
>
>
>
> --
> Andreas Hartmann, CTO
> BeCompany GmbH
> http://www.becompany.ch
> Tel.: +41 (0) 43 818 57 01
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
> For additional commands, e-mail: user-help@lenya.apache.org
>
>
>
--
View this message in context: http://www.nabble.com/Support-for-Active-Directory----tp16720195p16958821.html
Sent from the Lenya - Users mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by jazzhazze <ha...@glocalnet.net>.
Thanks!
BTW, are there any "easy" ways (preferable ready-made recipes ) to include a
NTLM filter in Lenya to receive the user id, thus passing it on to
Shibboleth (for example) for verification against LDAP? A custom
authenticator in other words?
Andreas Hartmann wrote:
>
> jazzhazze schrieb:
>> Ok!
>> I have to admit that I'm not so very familiar with the Eclipse debugger.
>> How
>> does it work?
>
> I have added a little how-to to the documentation:
>
> https://lenya.zones.apache.org/cms/docu/live/docu20/tutorials/setupide.html
>
> -- Andreas
>
>>
>>
>> Andreas Hartmann wrote:
>>> jazzhazze schrieb:
>>>> Ok!
>>>> But then maybe the delegation doesn't work properly, i.e Lenya can't
>>>> verify
>>>> against LDAP that the password an user enter is correct.
>>>>
>>>> Is there any way to verify that the delegation procedures work fine?
>>> Have you tried to debug the authentication? You could step through the
>>> method in the Eclipse debugger, this will certainly help - at least if
>>> the problem is on the client side.
>>>
>>> -- Andreas
>>>
>>>
>>>> By the way, I will start another thread about Kupu, because it is very
>>>> frustrating...
>>>>
>>>>
>>>> Andreas Hartmann wrote:
>>>>> jazzhazze schrieb:
>>>>>> That really helped! Thank you!
>>>>>> Now it works to import users from AD. The only thing is that is seems
>>>>>> like
>>>>>> the AD passwords aren't imported along with the users? Thus it isn't
>>>>>> possible for the users to log in to Lenya using their AD passwords.
>>>>> AFAIK the passwords aren't imported, but the authentication is
>>>>> delegated
>>>>> to the LDAP server. I don't know if this information helps you,
>>>>> though.
>>>>>
>>>>> -- Andreas
>>>>>
>>>>>
>>>>>>
>>>>>> Richard Frovarp wrote:
>>>>>>> jazzhazze wrote:
>>>>>>>> I've found the HTML-source of the error page that occurs when I try
>>>>>>>> to
>>>>>>>> add a
>>>>>>>> LDAP-user. It looks like this:
>>>>>>>>
>>>>>>>> stacktracejava.lang.NullPointerException
>>>>>>>> at java.util.Hashtable.put(Hashtable.java:396)
>>>>>>>> at org.apache.lenya.ac.ldap.LDAPUser.bind(LDAPUser.java:359)
>>>>>>>> at
>>>>>>>> org.apache.lenya.ac.ldap.LDAPUser.getDirectoryEntry(LDAPUser.java:434)
>>>>>>>> at org.apache.lenya.ac.ldap.LDAPUser.existsUser(LDAPUser.java:146)
>>>>>>>> at
>>>>>>>> org.apache.lenya.cms.ac.usecases.AddUser.validate(AddUser.java:75)
>>>>>>>> at
>>>>>>>> org.apache.lenya.cms.ac.usecases.AddUser.doCheckExecutionConditions(AddUser.java:96)
>>>>>>>> at
>>>>>>>>
>>>>>>> Somehow the principal being passed in is null. You probably haven't
>>>>>>> set
>>>>>>> the mgr-dn property in the ldap config file.
>>>>>>>
>>>>>>> Richard
>>>>>>>
>>>>>>> ---------------------------------------------------------------------
>>>>>>> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
>>>>>>> For additional commands, e-mail: user-help@lenya.apache.org
>>>>>>>
>>>>>>>
>>>>>>>
>>>>> --
>>>>> Andreas Hartmann, CTO
>>>>> BeCompany GmbH
>>>>> http://www.becompany.ch
>>>>> Tel.: +41 (0) 43 818 57 01
>>>>>
>>>>>
>>>>> ---------------------------------------------------------------------
>>>>> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
>>>>> For additional commands, e-mail: user-help@lenya.apache.org
>>>>>
>>>>>
>>>>>
>>>
>>> --
>>> Andreas Hartmann, CTO
>>> BeCompany GmbH
>>> http://www.becompany.ch
>>> Tel.: +41 (0) 43 818 57 01
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
>>> For additional commands, e-mail: user-help@lenya.apache.org
>>>
>>>
>>>
>>
>
>
> --
> Andreas Hartmann, CTO
> BeCompany GmbH
> http://www.becompany.ch
> Tel.: +41 (0) 43 818 57 01
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
> For additional commands, e-mail: user-help@lenya.apache.org
>
>
>
:clap::clap::clap::clap:
--
View this message in context: http://www.nabble.com/Support-for-Active-Directory----tp16720195p17229934.html
Sent from the Lenya - Users mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by Andreas Hartmann <an...@apache.org>.
jazzhazze schrieb:
> Ok!
> I have to admit that I'm not so very familiar with the Eclipse debugger. How
> does it work?
I have added a little how-to to the documentation:
https://lenya.zones.apache.org/cms/docu/live/docu20/tutorials/setupide.html
-- Andreas
>
>
> Andreas Hartmann wrote:
>> jazzhazze schrieb:
>>> Ok!
>>> But then maybe the delegation doesn't work properly, i.e Lenya can't
>>> verify
>>> against LDAP that the password an user enter is correct.
>>>
>>> Is there any way to verify that the delegation procedures work fine?
>> Have you tried to debug the authentication? You could step through the
>> method in the Eclipse debugger, this will certainly help - at least if
>> the problem is on the client side.
>>
>> -- Andreas
>>
>>
>>> By the way, I will start another thread about Kupu, because it is very
>>> frustrating...
>>>
>>>
>>> Andreas Hartmann wrote:
>>>> jazzhazze schrieb:
>>>>> That really helped! Thank you!
>>>>> Now it works to import users from AD. The only thing is that is seems
>>>>> like
>>>>> the AD passwords aren't imported along with the users? Thus it isn't
>>>>> possible for the users to log in to Lenya using their AD passwords.
>>>> AFAIK the passwords aren't imported, but the authentication is delegated
>>>> to the LDAP server. I don't know if this information helps you, though.
>>>>
>>>> -- Andreas
>>>>
>>>>
>>>>>
>>>>> Richard Frovarp wrote:
>>>>>> jazzhazze wrote:
>>>>>>> I've found the HTML-source of the error page that occurs when I try
>>>>>>> to
>>>>>>> add a
>>>>>>> LDAP-user. It looks like this:
>>>>>>>
>>>>>>> stacktracejava.lang.NullPointerException
>>>>>>> at java.util.Hashtable.put(Hashtable.java:396)
>>>>>>> at org.apache.lenya.ac.ldap.LDAPUser.bind(LDAPUser.java:359)
>>>>>>> at
>>>>>>> org.apache.lenya.ac.ldap.LDAPUser.getDirectoryEntry(LDAPUser.java:434)
>>>>>>> at org.apache.lenya.ac.ldap.LDAPUser.existsUser(LDAPUser.java:146)
>>>>>>> at
>>>>>>> org.apache.lenya.cms.ac.usecases.AddUser.validate(AddUser.java:75)
>>>>>>> at
>>>>>>> org.apache.lenya.cms.ac.usecases.AddUser.doCheckExecutionConditions(AddUser.java:96)
>>>>>>> at
>>>>>>>
>>>>>> Somehow the principal being passed in is null. You probably haven't
>>>>>> set
>>>>>> the mgr-dn property in the ldap config file.
>>>>>>
>>>>>> Richard
>>>>>>
>>>>>> ---------------------------------------------------------------------
>>>>>> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
>>>>>> For additional commands, e-mail: user-help@lenya.apache.org
>>>>>>
>>>>>>
>>>>>>
>>>> --
>>>> Andreas Hartmann, CTO
>>>> BeCompany GmbH
>>>> http://www.becompany.ch
>>>> Tel.: +41 (0) 43 818 57 01
>>>>
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
>>>> For additional commands, e-mail: user-help@lenya.apache.org
>>>>
>>>>
>>>>
>>
>> --
>> Andreas Hartmann, CTO
>> BeCompany GmbH
>> http://www.becompany.ch
>> Tel.: +41 (0) 43 818 57 01
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
>> For additional commands, e-mail: user-help@lenya.apache.org
>>
>>
>>
>
--
Andreas Hartmann, CTO
BeCompany GmbH
http://www.becompany.ch
Tel.: +41 (0) 43 818 57 01
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by jazzhazze <ha...@glocalnet.net>.
Ok!
I have to admit that I'm not so very familiar with the Eclipse debugger. How
does it work?
Andreas Hartmann wrote:
>
> jazzhazze schrieb:
>> Ok!
>> But then maybe the delegation doesn't work properly, i.e Lenya can't
>> verify
>> against LDAP that the password an user enter is correct.
>>
>> Is there any way to verify that the delegation procedures work fine?
>
> Have you tried to debug the authentication? You could step through the
> method in the Eclipse debugger, this will certainly help - at least if
> the problem is on the client side.
>
> -- Andreas
>
>
>>
>> By the way, I will start another thread about Kupu, because it is very
>> frustrating...
>>
>>
>> Andreas Hartmann wrote:
>>> jazzhazze schrieb:
>>>> That really helped! Thank you!
>>>> Now it works to import users from AD. The only thing is that is seems
>>>> like
>>>> the AD passwords aren't imported along with the users? Thus it isn't
>>>> possible for the users to log in to Lenya using their AD passwords.
>>> AFAIK the passwords aren't imported, but the authentication is delegated
>>> to the LDAP server. I don't know if this information helps you, though.
>>>
>>> -- Andreas
>>>
>>>
>>>>
>>>>
>>>> Richard Frovarp wrote:
>>>>> jazzhazze wrote:
>>>>>> I've found the HTML-source of the error page that occurs when I try
>>>>>> to
>>>>>> add a
>>>>>> LDAP-user. It looks like this:
>>>>>>
>>>>>> stacktracejava.lang.NullPointerException
>>>>>> at java.util.Hashtable.put(Hashtable.java:396)
>>>>>> at org.apache.lenya.ac.ldap.LDAPUser.bind(LDAPUser.java:359)
>>>>>> at
>>>>>> org.apache.lenya.ac.ldap.LDAPUser.getDirectoryEntry(LDAPUser.java:434)
>>>>>> at org.apache.lenya.ac.ldap.LDAPUser.existsUser(LDAPUser.java:146)
>>>>>> at
>>>>>> org.apache.lenya.cms.ac.usecases.AddUser.validate(AddUser.java:75)
>>>>>> at
>>>>>> org.apache.lenya.cms.ac.usecases.AddUser.doCheckExecutionConditions(AddUser.java:96)
>>>>>> at
>>>>>>
>>>>> Somehow the principal being passed in is null. You probably haven't
>>>>> set
>>>>> the mgr-dn property in the ldap config file.
>>>>>
>>>>> Richard
>>>>>
>>>>> ---------------------------------------------------------------------
>>>>> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
>>>>> For additional commands, e-mail: user-help@lenya.apache.org
>>>>>
>>>>>
>>>>>
>>>
>>> --
>>> Andreas Hartmann, CTO
>>> BeCompany GmbH
>>> http://www.becompany.ch
>>> Tel.: +41 (0) 43 818 57 01
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
>>> For additional commands, e-mail: user-help@lenya.apache.org
>>>
>>>
>>>
>>
>
>
> --
> Andreas Hartmann, CTO
> BeCompany GmbH
> http://www.becompany.ch
> Tel.: +41 (0) 43 818 57 01
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
> For additional commands, e-mail: user-help@lenya.apache.org
>
>
>
--
View this message in context: http://www.nabble.com/Support-for-Active-Directory----tp16720195p17099981.html
Sent from the Lenya - Users mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by Andreas Hartmann <an...@apache.org>.
jazzhazze schrieb:
> Ok!
> But then maybe the delegation doesn't work properly, i.e Lenya can't verify
> against LDAP that the password an user enter is correct.
>
> Is there any way to verify that the delegation procedures work fine?
Have you tried to debug the authentication? You could step through the
method in the Eclipse debugger, this will certainly help - at least if
the problem is on the client side.
-- Andreas
>
> By the way, I will start another thread about Kupu, because it is very
> frustrating...
>
>
> Andreas Hartmann wrote:
>> jazzhazze schrieb:
>>> That really helped! Thank you!
>>> Now it works to import users from AD. The only thing is that is seems
>>> like
>>> the AD passwords aren't imported along with the users? Thus it isn't
>>> possible for the users to log in to Lenya using their AD passwords.
>> AFAIK the passwords aren't imported, but the authentication is delegated
>> to the LDAP server. I don't know if this information helps you, though.
>>
>> -- Andreas
>>
>>
>>>
>>>
>>> Richard Frovarp wrote:
>>>> jazzhazze wrote:
>>>>> I've found the HTML-source of the error page that occurs when I try to
>>>>> add a
>>>>> LDAP-user. It looks like this:
>>>>>
>>>>> stacktracejava.lang.NullPointerException
>>>>> at java.util.Hashtable.put(Hashtable.java:396)
>>>>> at org.apache.lenya.ac.ldap.LDAPUser.bind(LDAPUser.java:359)
>>>>> at
>>>>> org.apache.lenya.ac.ldap.LDAPUser.getDirectoryEntry(LDAPUser.java:434)
>>>>> at org.apache.lenya.ac.ldap.LDAPUser.existsUser(LDAPUser.java:146)
>>>>> at org.apache.lenya.cms.ac.usecases.AddUser.validate(AddUser.java:75)
>>>>> at
>>>>> org.apache.lenya.cms.ac.usecases.AddUser.doCheckExecutionConditions(AddUser.java:96)
>>>>> at
>>>>>
>>>> Somehow the principal being passed in is null. You probably haven't set
>>>> the mgr-dn property in the ldap config file.
>>>>
>>>> Richard
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
>>>> For additional commands, e-mail: user-help@lenya.apache.org
>>>>
>>>>
>>>>
>>
>> --
>> Andreas Hartmann, CTO
>> BeCompany GmbH
>> http://www.becompany.ch
>> Tel.: +41 (0) 43 818 57 01
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
>> For additional commands, e-mail: user-help@lenya.apache.org
>>
>>
>>
>
--
Andreas Hartmann, CTO
BeCompany GmbH
http://www.becompany.ch
Tel.: +41 (0) 43 818 57 01
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by jazzhazze <ha...@glocalnet.net>.
Ok!
But then maybe the delegation doesn't work properly, i.e Lenya can't verify
against LDAP that the password an user enter is correct.
Is there any way to verify that the delegation procedures work fine?
By the way, I will start another thread about Kupu, because it is very
frustrating...
Andreas Hartmann wrote:
>
> jazzhazze schrieb:
>> That really helped! Thank you!
>> Now it works to import users from AD. The only thing is that is seems
>> like
>> the AD passwords aren't imported along with the users? Thus it isn't
>> possible for the users to log in to Lenya using their AD passwords.
>
> AFAIK the passwords aren't imported, but the authentication is delegated
> to the LDAP server. I don't know if this information helps you, though.
>
> -- Andreas
>
>
>>
>>
>>
>> Richard Frovarp wrote:
>>> jazzhazze wrote:
>>>> I've found the HTML-source of the error page that occurs when I try to
>>>> add a
>>>> LDAP-user. It looks like this:
>>>>
>>>> stacktracejava.lang.NullPointerException
>>>> at java.util.Hashtable.put(Hashtable.java:396)
>>>> at org.apache.lenya.ac.ldap.LDAPUser.bind(LDAPUser.java:359)
>>>> at
>>>> org.apache.lenya.ac.ldap.LDAPUser.getDirectoryEntry(LDAPUser.java:434)
>>>> at org.apache.lenya.ac.ldap.LDAPUser.existsUser(LDAPUser.java:146)
>>>> at org.apache.lenya.cms.ac.usecases.AddUser.validate(AddUser.java:75)
>>>> at
>>>> org.apache.lenya.cms.ac.usecases.AddUser.doCheckExecutionConditions(AddUser.java:96)
>>>> at
>>>>
>>> Somehow the principal being passed in is null. You probably haven't set
>>> the mgr-dn property in the ldap config file.
>>>
>>> Richard
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
>>> For additional commands, e-mail: user-help@lenya.apache.org
>>>
>>>
>>>
>>
>
>
> --
> Andreas Hartmann, CTO
> BeCompany GmbH
> http://www.becompany.ch
> Tel.: +41 (0) 43 818 57 01
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
> For additional commands, e-mail: user-help@lenya.apache.org
>
>
>
--
View this message in context: http://www.nabble.com/Support-for-Active-Directory----tp16720195p17099639.html
Sent from the Lenya - Users mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by Andreas Hartmann <an...@apache.org>.
jazzhazze schrieb:
> That really helped! Thank you!
> Now it works to import users from AD. The only thing is that is seems like
> the AD passwords aren't imported along with the users? Thus it isn't
> possible for the users to log in to Lenya using their AD passwords.
AFAIK the passwords aren't imported, but the authentication is delegated
to the LDAP server. I don't know if this information helps you, though.
-- Andreas
>
>
>
> Richard Frovarp wrote:
>> jazzhazze wrote:
>>> I've found the HTML-source of the error page that occurs when I try to
>>> add a
>>> LDAP-user. It looks like this:
>>>
>>> stacktracejava.lang.NullPointerException
>>> at java.util.Hashtable.put(Hashtable.java:396)
>>> at org.apache.lenya.ac.ldap.LDAPUser.bind(LDAPUser.java:359)
>>> at
>>> org.apache.lenya.ac.ldap.LDAPUser.getDirectoryEntry(LDAPUser.java:434)
>>> at org.apache.lenya.ac.ldap.LDAPUser.existsUser(LDAPUser.java:146)
>>> at org.apache.lenya.cms.ac.usecases.AddUser.validate(AddUser.java:75)
>>> at
>>> org.apache.lenya.cms.ac.usecases.AddUser.doCheckExecutionConditions(AddUser.java:96)
>>> at
>>>
>> Somehow the principal being passed in is null. You probably haven't set
>> the mgr-dn property in the ldap config file.
>>
>> Richard
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
>> For additional commands, e-mail: user-help@lenya.apache.org
>>
>>
>>
>
--
Andreas Hartmann, CTO
BeCompany GmbH
http://www.becompany.ch
Tel.: +41 (0) 43 818 57 01
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by jazzhazze <ha...@glocalnet.net>.
That really helped! Thank you!
Now it works to import users from AD. The only thing is that is seems like
the AD passwords aren't imported along with the users? Thus it isn't
possible for the users to log in to Lenya using their AD passwords.
Richard Frovarp wrote:
>
> jazzhazze wrote:
>> I've found the HTML-source of the error page that occurs when I try to
>> add a
>> LDAP-user. It looks like this:
>>
>> stacktracejava.lang.NullPointerException
>> at java.util.Hashtable.put(Hashtable.java:396)
>> at org.apache.lenya.ac.ldap.LDAPUser.bind(LDAPUser.java:359)
>> at
>> org.apache.lenya.ac.ldap.LDAPUser.getDirectoryEntry(LDAPUser.java:434)
>> at org.apache.lenya.ac.ldap.LDAPUser.existsUser(LDAPUser.java:146)
>> at org.apache.lenya.cms.ac.usecases.AddUser.validate(AddUser.java:75)
>> at
>> org.apache.lenya.cms.ac.usecases.AddUser.doCheckExecutionConditions(AddUser.java:96)
>> at
>>
>
> Somehow the principal being passed in is null. You probably haven't set
> the mgr-dn property in the ldap config file.
>
> Richard
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
> For additional commands, e-mail: user-help@lenya.apache.org
>
>
>
--
View this message in context: http://www.nabble.com/Support-for-Active-Directory----tp16720195p17053942.html
Sent from the Lenya - Users mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by Andreas Hartmann <an...@apache.org>.
jazzhazze schrieb:
> Maybe I should explain the purposes of my site to give a better understanding
> of the problems I'm facing.
>
> I'm building a new site for a department of our enterprise. All the
> enterprise's computers/users are connected to an intranet. My site should be
> accessible for all users who are connected to the intranet, except for
> certain pages. Those pages should be restricted to the users belonging to
> this specific department only. All users are stored in AD and the idea is
> that you should only need to login once, and that is when you logon to the
> intranet. The present outdated site, based on Java too, uses a
> LDAP-connection to verify if an user belongs to this department, thus
> granting or denying access to some of the pages.
>
> My idea was to build the site using Lenya and then importing all the users
> that are allowed to visit certain pages and create a specific group for
> them. As the site is only accessible from inside of the intranet I guess all
> users on the intranet belong to the "world" visitor group in Lenya.
>
> The point is that no visitor of the website, even the "special visitors"
> should have to login manually to the site (of course the admin, reviewer,
> site manager etc should log in).
IIUC you want single sign-on for certain users. This is not possible out
of the box, but can be achieved by implementing a custom authenticator.
There's a branch of 1.2 in SVN which supports SSO via Shibboleth. You
could try to use it as a starting point for implementing SSO for the
infrastructure of your enterprise.
-- Andreas
--
Andreas Hartmann, CTO
BeCompany GmbH
http://www.becompany.ch
Tel.: +41 (0) 43 818 57 01
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by jazzhazze <ha...@glocalnet.net>.
Maybe I should explain the purposes of my site to give a better understanding
of the problems I'm facing.
I'm building a new site for a department of our enterprise. All the
enterprise's computers/users are connected to an intranet. My site should be
accessible for all users who are connected to the intranet, except for
certain pages. Those pages should be restricted to the users belonging to
this specific department only. All users are stored in AD and the idea is
that you should only need to login once, and that is when you logon to the
intranet. The present outdated site, based on Java too, uses a
LDAP-connection to verify if an user belongs to this department, thus
granting or denying access to some of the pages.
My idea was to build the site using Lenya and then importing all the users
that are allowed to visit certain pages and create a specific group for
them. As the site is only accessible from inside of the intranet I guess all
users on the intranet belong to the "world" visitor group in Lenya.
The point is that no visitor of the website, even the "special visitors"
should have to login manually to the site (of course the admin, reviewer,
site manager etc should log in). When a visitor should want to visit one of
the restricted pages, an automatic connection should be made to the AD,
verifying if the visitor should be granted access or not (just like it works
now with the present site).
I wonder if this is possible at all with Lenya??
Richard Frovarp wrote:
>
> jazzhazze wrote:
>> I've found the HTML-source of the error page that occurs when I try to
>> add a
>> LDAP-user. It looks like this:
>>
>> stacktracejava.lang.NullPointerException
>> at java.util.Hashtable.put(Hashtable.java:396)
>> at org.apache.lenya.ac.ldap.LDAPUser.bind(LDAPUser.java:359)
>> at
>> org.apache.lenya.ac.ldap.LDAPUser.getDirectoryEntry(LDAPUser.java:434)
>> at org.apache.lenya.ac.ldap.LDAPUser.existsUser(LDAPUser.java:146)
>> at org.apache.lenya.cms.ac.usecases.AddUser.validate(AddUser.java:75)
>> at
>> org.apache.lenya.cms.ac.usecases.AddUser.doCheckExecutionConditions(AddUser.java:96)
>> at
>>
>
> Somehow the principal being passed in is null. You probably haven't set
> the mgr-dn property in the ldap config file.
>
> Richard
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
> For additional commands, e-mail: user-help@lenya.apache.org
>
>
>
--
View this message in context: http://www.nabble.com/Support-for-Active-Directory----tp16720195p17079343.html
Sent from the Lenya - Users mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by Richard Frovarp <ri...@sendit.nodak.edu>.
jazzhazze wrote:
> I've found the HTML-source of the error page that occurs when I try to add a
> LDAP-user. It looks like this:
>
> stacktracejava.lang.NullPointerException
> at java.util.Hashtable.put(Hashtable.java:396)
> at org.apache.lenya.ac.ldap.LDAPUser.bind(LDAPUser.java:359)
> at org.apache.lenya.ac.ldap.LDAPUser.getDirectoryEntry(LDAPUser.java:434)
> at org.apache.lenya.ac.ldap.LDAPUser.existsUser(LDAPUser.java:146)
> at org.apache.lenya.cms.ac.usecases.AddUser.validate(AddUser.java:75)
> at
> org.apache.lenya.cms.ac.usecases.AddUser.doCheckExecutionConditions(AddUser.java:96)
> at
>
Somehow the principal being passed in is null. You probably haven't set
the mgr-dn property in the ldap config file.
Richard
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by jazzhazze <ha...@glocalnet.net>.
I've found the HTML-source of the error page that occurs when I try to add a
LDAP-user. It looks like this:
<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD
XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"><head><title>An error
occured.</title><link type="text/css"
href="/lenya/infomate/authoring/css/page.css" rel="stylesheet"
/></head><body><div id="page"><table border="0" cellspacing="0"
cellpadding="0" width="100%"><tr><td /><td id="project-logo">
/lenya/infomate/authoring/images/bilder/WM_Data_France.gif
</td></tr></table><table cellspacing="0" cellpadding="0" border="0"
width="100%"><tr><td style="width: 230px" valign="top" /><td
valign="top"><div id="main"><div id="body"><h1>An error
occured.</h1><p>Please contact your system administrator.</p><!--Sitemap:
error calling continuation
at <map:call> -
file:///C:/tomcat6.0/webapps/lenya/lenya/modules/usecase/usecase.xmap:101:39
at <map:mount> -
file:///C:/tomcat6.0/webapps/lenya/lenya/usecase.xmap:55:131
at <map:mount> -
file:///C:/tomcat6.0/webapps/lenya/global-sitemap.xmap:288:105
at <map:mount> -
file:///C:/tomcat6.0/webapps/lenya/sitemap.xmap:667:106org.apache.cocoon.ProcessingException:
Sitemap: error calling continuation
at <map:call> -
file:///C:/tomcat6.0/webapps/lenya/lenya/modules/usecase/usecase.xmap:101:39
at <map:mount> -
file:///C:/tomcat6.0/webapps/lenya/lenya/usecase.xmap:55:131
at <map:mount> -
file:///C:/tomcat6.0/webapps/lenya/global-sitemap.xmap:288:105
at <map:mount> -
file:///C:/tomcat6.0/webapps/lenya/sitemap.xmap:667:106java.lang.NullPointerExceptionfull
exception chain stacktraceorg.apache.cocoon.ProcessingException: Sitemap:
error calling continuation
at <map:call> -
file:///C:/tomcat6.0/webapps/lenya/lenya/modules/usecase/usecase.xmap:101:39
at <map:mount> -
file:///C:/tomcat6.0/webapps/lenya/lenya/usecase.xmap:55:131
at <map:mount> -
file:///C:/tomcat6.0/webapps/lenya/global-sitemap.xmap:288:105
at <map:mount> - file:///C:/tomcat6.0/webapps/lenya/sitemap.xmap:667:106
at
org.apache.cocoon.ProcessingException.throwLocated(ProcessingException.java:113)
at
org.apache.cocoon.components.treeprocessor.sitemap.CallFunctionNode.invoke(CallFunctionNode.java:126)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:47)
at
org.apache.cocoon.components.treeprocessor.sitemap.MatchNode.invoke(MatchNode.java:108)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:69)
at
org.apache.cocoon.components.treeprocessor.sitemap.PipelineNode.invoke(PipelineNode.java:143)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:69)
at
org.apache.cocoon.components.treeprocessor.sitemap.PipelinesNode.invoke(PipelinesNode.java:93)
at
org.apache.cocoon.components.treeprocessor.ConcreteTreeProcessor.process(ConcreteTreeProcessor.java:235)
at
org.apache.cocoon.components.treeprocessor.ConcreteTreeProcessor.process(ConcreteTreeProcessor.java:177)
at
org.apache.cocoon.components.treeprocessor.TreeProcessor.process(TreeProcessor.java:254)
at
org.apache.cocoon.components.treeprocessor.sitemap.MountNode.invoke(MountNode.java:118)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:47)
at
org.apache.cocoon.components.treeprocessor.sitemap.MatchNode.invoke(MatchNode.java:108)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:69)
at
org.apache.cocoon.components.treeprocessor.sitemap.PipelineNode.invoke(PipelineNode.java:143)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:69)
at
org.apache.cocoon.components.treeprocessor.sitemap.PipelinesNode.invoke(PipelinesNode.java:93)
at
org.apache.cocoon.components.treeprocessor.ConcreteTreeProcessor.process(ConcreteTreeProcessor.java:235)
at
org.apache.cocoon.components.treeprocessor.ConcreteTreeProcessor.process(ConcreteTreeProcessor.java:177)
at
org.apache.cocoon.components.treeprocessor.TreeProcessor.process(TreeProcessor.java:254)
at
org.apache.cocoon.components.treeprocessor.sitemap.MountNode.invoke(MountNode.java:118)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:47)
at
org.apache.cocoon.components.treeprocessor.sitemap.MatchNode.invoke(MatchNode.java:108)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:69)
at
org.apache.cocoon.components.treeprocessor.sitemap.PipelineNode.invoke(PipelineNode.java:143)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:69)
at
org.apache.cocoon.components.treeprocessor.sitemap.PipelinesNode.invoke(PipelinesNode.java:93)
at
org.apache.cocoon.components.treeprocessor.ConcreteTreeProcessor.process(ConcreteTreeProcessor.java:235)
at
org.apache.cocoon.components.treeprocessor.ConcreteTreeProcessor.process(ConcreteTreeProcessor.java:177)
at
org.apache.cocoon.components.treeprocessor.TreeProcessor.process(TreeProcessor.java:254)
at
org.apache.cocoon.components.treeprocessor.sitemap.MountNode.invoke(MountNode.java:118)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:47)
at
org.apache.cocoon.components.treeprocessor.sitemap.ActTypeNode.invoke(ActTypeNode.java:139)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:47)
at
org.apache.cocoon.components.treeprocessor.sitemap.MatchNode.invoke(MatchNode.java:108)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:69)
at
org.apache.cocoon.components.treeprocessor.sitemap.PipelineNode.invoke(PipelineNode.java:143)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:69)
at
org.apache.cocoon.components.treeprocessor.sitemap.PipelinesNode.invoke(PipelinesNode.java:93)
at
org.apache.cocoon.components.treeprocessor.ConcreteTreeProcessor.process(ConcreteTreeProcessor.java:235)
at
org.apache.cocoon.components.treeprocessor.ConcreteTreeProcessor.process(ConcreteTreeProcessor.java:177)
at
org.apache.cocoon.components.treeprocessor.TreeProcessor.process(TreeProcessor.java:254)
at org.apache.cocoon.Cocoon.process(Cocoon.java:699)
at org.apache.cocoon.servlet.CocoonServlet.service(CocoonServlet.java:1154)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
at java.lang.Thread.run(Thread.java:595)
Caused by: org.mozilla.javascript.WrappedException: Wrapped
org.apache.lenya.cms.usecase.UsecaseException:
java.lang.NullPointerException
(file:///C:/tomcat6.0/webapps/lenya/lenya/modules/usecase/usecases.js#258)
at org.mozilla.javascript.Context.throwAsScriptRuntimeEx(Context.java:1693)
at org.mozilla.javascript.MemberBox.invoke(MemberBox.java:160)
at org.mozilla.javascript.NativeJavaMethod.call(NativeJavaMethod.java:204)
at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:3085)
at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:2251)
at
org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:161)
at org.mozilla.javascript.ContextFactory.doTopCall(ContextFactory.java:340)
at org.mozilla.javascript.ScriptRuntime.doTopCall(ScriptRuntime.java:2758)
at
org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:159)
at org.mozilla.javascript.Context.call(Context.java:489)
at
org.mozilla.javascript.ScriptableObject.callMethod(ScriptableObject.java:1556)
at
org.mozilla.javascript.ScriptableObject.callMethod(ScriptableObject.java:1526)
at
org.apache.cocoon.components.flow.javascript.fom.FOM_JavaScriptInterpreter.handleContinuation(FOM_JavaScriptInterpreter.java:841)
at
org.apache.cocoon.components.treeprocessor.sitemap.CallFunctionNode.invoke(CallFunctionNode.java:124)
... 56 more
Caused by: org.apache.lenya.cms.usecase.UsecaseException:
java.lang.NullPointerException
at
org.apache.lenya.cms.usecase.AbstractUsecase.checkExecutionConditions(AbstractUsecase.java:241)
at sun.reflect.GeneratedMethodAccessor184.invoke(Unknown Source)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at
org.apache.avalon.excalibur.component.ComponentProxyGenerator$ComponentInvocationHandler.invoke(ComponentProxyGenerator.java:143)
at $Proxy52.checkExecutionConditions(Unknown Source)
at sun.reflect.GeneratedMethodAccessor238.invoke(Unknown Source)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.mozilla.javascript.MemberBox.invoke(MemberBox.java:145)
... 68 more
Caused by: java.lang.NullPointerException
at java.util.Hashtable.put(Hashtable.java:396)
at org.apache.lenya.ac.ldap.LDAPUser.bind(LDAPUser.java:359)
at org.apache.lenya.ac.ldap.LDAPUser.getDirectoryEntry(LDAPUser.java:434)
at org.apache.lenya.ac.ldap.LDAPUser.existsUser(LDAPUser.java:146)
at org.apache.lenya.cms.ac.usecases.AddUser.validate(AddUser.java:75)
at
org.apache.lenya.cms.ac.usecases.AddUser.doCheckExecutionConditions(AddUser.java:96)
at
org.apache.lenya.cms.usecase.AbstractUsecase.checkExecutionConditions(AbstractUsecase.java:235)
... 77 more
stacktracejava.lang.NullPointerException
at java.util.Hashtable.put(Hashtable.java:396)
at org.apache.lenya.ac.ldap.LDAPUser.bind(LDAPUser.java:359)
at org.apache.lenya.ac.ldap.LDAPUser.getDirectoryEntry(LDAPUser.java:434)
at org.apache.lenya.ac.ldap.LDAPUser.existsUser(LDAPUser.java:146)
at org.apache.lenya.cms.ac.usecases.AddUser.validate(AddUser.java:75)
at
org.apache.lenya.cms.ac.usecases.AddUser.doCheckExecutionConditions(AddUser.java:96)
at
org.apache.lenya.cms.usecase.AbstractUsecase.checkExecutionConditions(AbstractUsecase.java:235)
at sun.reflect.GeneratedMethodAccessor184.invoke(Unknown Source)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at
org.apache.avalon.excalibur.component.ComponentProxyGenerator$ComponentInvocationHandler.invoke(ComponentProxyGenerator.java:143)
at $Proxy52.checkExecutionConditions(Unknown Source)
at sun.reflect.GeneratedMethodAccessor238.invoke(Unknown Source)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.mozilla.javascript.MemberBox.invoke(MemberBox.java:145)
at org.mozilla.javascript.NativeJavaMethod.call(NativeJavaMethod.java:204)
at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:3085)
at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:2251)
at
org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:161)
at org.mozilla.javascript.ContextFactory.doTopCall(ContextFactory.java:340)
at org.mozilla.javascript.ScriptRuntime.doTopCall(ScriptRuntime.java:2758)
at
org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:159)
at org.mozilla.javascript.Context.call(Context.java:489)
at
org.mozilla.javascript.ScriptableObject.callMethod(ScriptableObject.java:1556)
at
org.mozilla.javascript.ScriptableObject.callMethod(ScriptableObject.java:1526)
at
org.apache.cocoon.components.flow.javascript.fom.FOM_JavaScriptInterpreter.handleContinuation(FOM_JavaScriptInterpreter.java:841)
at
org.apache.cocoon.components.treeprocessor.sitemap.CallFunctionNode.invoke(CallFunctionNode.java:124)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:47)
at
org.apache.cocoon.components.treeprocessor.sitemap.MatchNode.invoke(MatchNode.java:108)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:69)
at
org.apache.cocoon.components.treeprocessor.sitemap.PipelineNode.invoke(PipelineNode.java:143)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:69)
at
org.apache.cocoon.components.treeprocessor.sitemap.PipelinesNode.invoke(PipelinesNode.java:93)
at
org.apache.cocoon.components.treeprocessor.ConcreteTreeProcessor.process(ConcreteTreeProcessor.java:235)
at
org.apache.cocoon.components.treeprocessor.ConcreteTreeProcessor.process(ConcreteTreeProcessor.java:177)
at
org.apache.cocoon.components.treeprocessor.TreeProcessor.process(TreeProcessor.java:254)
at
org.apache.cocoon.components.treeprocessor.sitemap.MountNode.invoke(MountNode.java:118)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:47)
at
org.apache.cocoon.components.treeprocessor.sitemap.MatchNode.invoke(MatchNode.java:108)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:69)
at
org.apache.cocoon.components.treeprocessor.sitemap.PipelineNode.invoke(PipelineNode.java:143)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:69)
at
org.apache.cocoon.components.treeprocessor.sitemap.PipelinesNode.invoke(PipelinesNode.java:93)
at
org.apache.cocoon.components.treeprocessor.ConcreteTreeProcessor.process(ConcreteTreeProcessor.java:235)
at
org.apache.cocoon.components.treeprocessor.ConcreteTreeProcessor.process(ConcreteTreeProcessor.java:177)
at
org.apache.cocoon.components.treeprocessor.TreeProcessor.process(TreeProcessor.java:254)
at
org.apache.cocoon.components.treeprocessor.sitemap.MountNode.invoke(MountNode.java:118)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:47)
at
org.apache.cocoon.components.treeprocessor.sitemap.MatchNode.invoke(MatchNode.java:108)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:69)
at
org.apache.cocoon.components.treeprocessor.sitemap.PipelineNode.invoke(PipelineNode.java:143)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:69)
at
org.apache.cocoon.components.treeprocessor.sitemap.PipelinesNode.invoke(PipelinesNode.java:93)
at
org.apache.cocoon.components.treeprocessor.ConcreteTreeProcessor.process(ConcreteTreeProcessor.java:235)
at
org.apache.cocoon.components.treeprocessor.ConcreteTreeProcessor.process(ConcreteTreeProcessor.java:177)
at
org.apache.cocoon.components.treeprocessor.TreeProcessor.process(TreeProcessor.java:254)
at
org.apache.cocoon.components.treeprocessor.sitemap.MountNode.invoke(MountNode.java:118)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:47)
at
org.apache.cocoon.components.treeprocessor.sitemap.ActTypeNode.invoke(ActTypeNode.java:139)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:47)
at
org.apache.cocoon.components.treeprocessor.sitemap.MatchNode.invoke(MatchNode.java:108)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:69)
at
org.apache.cocoon.components.treeprocessor.sitemap.PipelineNode.invoke(PipelineNode.java:143)
at
org.apache.cocoon.components.treeprocessor.AbstractParentProcessingNode.invokeNodes(AbstractParentProcessingNode.java:69)
at
org.apache.cocoon.components.treeprocessor.sitemap.PipelinesNode.invoke(PipelinesNode.java:93)
at
org.apache.cocoon.components.treeprocessor.ConcreteTreeProcessor.process(ConcreteTreeProcessor.java:235)
at
org.apache.cocoon.components.treeprocessor.ConcreteTreeProcessor.process(ConcreteTreeProcessor.java:177)
at
org.apache.cocoon.components.treeprocessor.TreeProcessor.process(TreeProcessor.java:254)
at org.apache.cocoon.Cocoon.process(Cocoon.java:699)
at org.apache.cocoon.servlet.CocoonServlet.service(CocoonServlet.java:1154)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
at java.lang.Thread.run(Thread.java:595)
--></div></div></td></tr></table></div></body></html>
Andreas Hartmann wrote:
>
> Hi JH,
>
> jazzhazze schrieb:
>> I have installed Lenya now (wasn't so very easy).
>
> what problems did you run into? These things have to be fixed or added
> to the FAQ.
>
>
>> But it seems to be full with bugs:
>>
>> All the time when I click on some buttons a page with the text "An error
>> occured. Please contact your system administrator." appears. For example
>> when:
>> 1) Trying to add an LDAP user after following the calibration
>> instructions.
>> Have I really calibrated the ldap-config file right or is this caused by
>> a
>> bug?
>
> That's hard to tell. The source of the "An error occured" page contains
> a stack trace, maybe it can point to the source of the problem.
>
>
>> 2) Trying to add a language at the admin site.
>
> Do you have such a menu item in the admin area? That shouldn't be the
> case, it looks like there's something wrong.
>
>
>> 3) I also get this message "Error saving your data. Response status: 415.
>> Check your server log for more information" when trying to save a
>> document
>> edited by Kupu.
>
> Maybe it is this issue?
> https://issues.apache.org/bugzilla/show_bug.cgi?id=36298
>
> At the moment there is no open standard for the communication between
> editors and CMSs, which makes the error handling very complicated. Any
> help with fixing this issue is greatly appreciated.
>
> -- Andreas
>
>
>
> --
> Andreas Hartmann, CTO
> BeCompany GmbH
> http://www.becompany.ch
> Tel.: +41 (0) 43 818 57 01
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
> For additional commands, e-mail: user-help@lenya.apache.org
>
>
>
--
View this message in context: http://www.nabble.com/Support-for-Active-Directory----tp16720195p16978183.html
Sent from the Lenya - Users mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by Andreas Hartmann <an...@apache.org>.
Hi JH,
jazzhazze schrieb:
> I have installed Lenya now (wasn't so very easy).
what problems did you run into? These things have to be fixed or added
to the FAQ.
> But it seems to be full with bugs:
>
> All the time when I click on some buttons a page with the text "An error
> occured. Please contact your system administrator." appears. For example
> when:
> 1) Trying to add an LDAP user after following the calibration instructions.
> Have I really calibrated the ldap-config file right or is this caused by a
> bug?
That's hard to tell. The source of the "An error occured" page contains
a stack trace, maybe it can point to the source of the problem.
> 2) Trying to add a language at the admin site.
Do you have such a menu item in the admin area? That shouldn't be the
case, it looks like there's something wrong.
> 3) I also get this message "Error saving your data. Response status: 415.
> Check your server log for more information" when trying to save a document
> edited by Kupu.
Maybe it is this issue?
https://issues.apache.org/bugzilla/show_bug.cgi?id=36298
At the moment there is no open standard for the communication between
editors and CMSs, which makes the error handling very complicated. Any
help with fixing this issue is greatly appreciated.
-- Andreas
--
Andreas Hartmann, CTO
BeCompany GmbH
http://www.becompany.ch
Tel.: +41 (0) 43 818 57 01
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by Richard Frovarp <ri...@sendit.nodak.edu>.
jazzhazze wrote:
> I have installed Lenya now (wasn't so very easy). But it seems to be full
> with bugs:
>
> All the time when I click on some buttons a page with the text "An error
> occured. Please contact your system administrator." appears. For example
> when:
> 1) Trying to add an LDAP user after following the calibration instructions.
> Have I really calibrated the ldap-config file right or is this caused by a
> bug?
> 2) Trying to add a language at the admin site.
>
> 3) I also get this message "Error saving your data. Response status: 415.
> Check your server log for more information" when trying to save a document
> edited by Kupu.
>
> I'm using Lenya 2.0 and JDK 1.5.
> /JH
>
>
What do the error logs say? What do you have in your ldap config file?
RIchard
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by jazzhazze <ha...@glocalnet.net>.
I have installed Lenya now (wasn't so very easy). But it seems to be full
with bugs:
All the time when I click on some buttons a page with the text "An error
occured. Please contact your system administrator." appears. For example
when:
1) Trying to add an LDAP user after following the calibration instructions.
Have I really calibrated the ldap-config file right or is this caused by a
bug?
2) Trying to add a language at the admin site.
3) I also get this message "Error saving your data. Response status: 415.
Check your server log for more information" when trying to save a document
edited by Kupu.
I'm using Lenya 2.0 and JDK 1.5.
/JH
Rainer Schöpf wrote:
>
> On Wed, 16 Apr 2008, Rich Moffitt wrote:
>
> > Hi guys,
> >
> > I never post to this list but I always see the conversations going back
> and
> > forth. Hopefully I'm spitting out some info that helps.
> >
> > Usually with AD authentication, everything works without much
> modification
> > (AD really is just LDAP but customized). Things to keep in mind are:
> >
> > - user id is sAMAccountName in Active Directory
> > - credentials can be provided in cleartext or SASL... or just connect
> SSL
> > - credentials can be formatted as fully qualified or as "user@domain"
>
> That's what I thought. Using Kerberos tickets is, in my opinion, the way
> to go.
>
> (Not only for http: I see no reasons why I should type in my password when
> accessing my mail. I have a valid Kerberos ticket, the IMAP server uses AD
> for
> authentication. But this requires SPNEGO/GSSAPI on both ends, which is
> often
> not implemented.)
>
> Rainer
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
> For additional commands, e-mail: user-help@lenya.apache.org
>
>
>
--
View this message in context: http://www.nabble.com/Support-for-Active-Directory----tp16720195p16834586.html
Sent from the Lenya - Users mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by Rainer Schöpf <ra...@proteosys.com>.
On Wed, 16 Apr 2008, Rich Moffitt wrote:
> Hi guys,
>
> I never post to this list but I always see the conversations going back and
> forth. Hopefully I'm spitting out some info that helps.
>
> Usually with AD authentication, everything works without much modification
> (AD really is just LDAP but customized). Things to keep in mind are:
>
> - user id is sAMAccountName in Active Directory
> - credentials can be provided in cleartext or SASL... or just connect SSL
> - credentials can be formatted as fully qualified or as "user@domain"
That's what I thought. Using Kerberos tickets is, in my opinion, the way to go.
(Not only for http: I see no reasons why I should type in my password when
accessing my mail. I have a valid Kerberos ticket, the IMAP server uses AD for
authentication. But this requires SPNEGO/GSSAPI on both ends, which is often
not implemented.)
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by Rich Moffitt <ri...@richmoffitt.org>.
It has actually been a while now since I've set up a Lenya environment, and
I wouldn't have time now to really get back into it. But something that
usually helps anyone troubleshoot LDAP authentication issues is a good LDAP
browser. Here are some of my picks:
http://www.novell.com/coolsolutions/tools/13765.html
http://sourceforge.net/projects/jxplorer/
Best,
Rich
On Wed, Apr 16, 2008 at 6:55 PM, Andreas Hartmann <an...@apache.org>
wrote:
> Richard,
>
> Rich Moffitt schrieb:
>
> [...]
>
> Usually with AD authentication, everything works without much
> > modification (AD really is just LDAP but customized). Things to keep in
> > mind are:
> >
> > - user id is sAMAccountName in Active Directory
> > - credentials can be provided in cleartext or SASL... or just connect
> > SSL
> > - credentials can be formatted as fully qualified or as "user@domain"
> >
>
> thanks a lot for these infos! It would be awesome if someone with a
> working AD setup could post a little report that can be added to the
> documentation.
>
> -- Andreas
>
>
>
>
> > That's about all I can think of at the moment, anyway.
> >
> > Best,
> > Rich
> >
> >
> >
> > On Wed, Apr 16, 2008 at 11:49 AM, Richard Frovarp <
> > richard.frovarp@sendit.nodak.edu <mailto:
> > richard.frovarp@sendit.nodak.edu>> wrote:
> >
> > Rainer Schöpf wrote:
> >
> > On Wed, 16 Apr 2008, Andreas Hartmann wrote:
> >
> > > you find more information on this page:
> > >
> >
> > http://lenya.apache.org/docs/1_2_x/how-to/ldap_authentication.html
> >
> > I'm a bit confused. If I understand this correctly, it does not
> > use Kerberos for authenticaion. Or does it?
> >
> > Rainer
> >
> >
> >
> > No, it uses LDAP authentication. I don't know if AD supports that or
> > not. I have hacked a version of the LDAP authentication to use LDAP
> > and Kerberos. It isn't that hard to do, and I could perhaps provide
> > some example code on how my stuff works.
> >
> > Richard
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
> > <ma...@lenya.apache.org>
> > For additional commands, e-mail: user-help@lenya.apache.org
> > <ma...@lenya.apache.org>
> >
> >
> >
>
> --
> Andreas Hartmann, CTO
> BeCompany GmbH
> http://www.becompany.ch
> Tel.: +41 (0) 43 818 57 01
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
> For additional commands, e-mail: user-help@lenya.apache.org
>
>
Re: Support for Active Directory???
Posted by Andreas Hartmann <an...@apache.org>.
Richard,
Rich Moffitt schrieb:
[...]
> Usually with AD authentication, everything works without much
> modification (AD really is just LDAP but customized). Things to keep in
> mind are:
>
> - user id is sAMAccountName in Active Directory
> - credentials can be provided in cleartext or SASL... or just connect SSL
> - credentials can be formatted as fully qualified or as "user@domain"
thanks a lot for these infos! It would be awesome if someone with a
working AD setup could post a little report that can be added to the
documentation.
-- Andreas
>
> That's about all I can think of at the moment, anyway.
>
> Best,
> Rich
>
>
>
> On Wed, Apr 16, 2008 at 11:49 AM, Richard Frovarp
> <richard.frovarp@sendit.nodak.edu
> <ma...@sendit.nodak.edu>> wrote:
>
> Rainer Schöpf wrote:
>
> On Wed, 16 Apr 2008, Andreas Hartmann wrote:
>
> > you find more information on this page:
> >
> http://lenya.apache.org/docs/1_2_x/how-to/ldap_authentication.html
>
> I'm a bit confused. If I understand this correctly, it does not
> use Kerberos for authenticaion. Or does it?
>
> Rainer
>
>
>
>
> No, it uses LDAP authentication. I don't know if AD supports that or
> not. I have hacked a version of the LDAP authentication to use LDAP
> and Kerberos. It isn't that hard to do, and I could perhaps provide
> some example code on how my stuff works.
>
> Richard
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
> <ma...@lenya.apache.org>
> For additional commands, e-mail: user-help@lenya.apache.org
> <ma...@lenya.apache.org>
>
>
--
Andreas Hartmann, CTO
BeCompany GmbH
http://www.becompany.ch
Tel.: +41 (0) 43 818 57 01
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by Rich Moffitt <ri...@richmoffitt.org>.
Hi guys,
I never post to this list but I always see the conversations going back and
forth. Hopefully I'm spitting out some info that helps.
Usually with AD authentication, everything works without much modification
(AD really is just LDAP but customized). Things to keep in mind are:
- user id is sAMAccountName in Active Directory
- credentials can be provided in cleartext or SASL... or just connect SSL
- credentials can be formatted as fully qualified or as "user@domain"
That's about all I can think of at the moment, anyway.
Best,
Rich
On Wed, Apr 16, 2008 at 11:49 AM, Richard Frovarp <
richard.frovarp@sendit.nodak.edu> wrote:
> Rainer Schöpf wrote:
>
> > On Wed, 16 Apr 2008, Andreas Hartmann wrote:
> >
> > > you find more information on this page:
> > > http://lenya.apache.org/docs/1_2_x/how-to/ldap_authentication.html
> >
> > I'm a bit confused. If I understand this correctly, it does not use
> > Kerberos for authenticaion. Or does it?
> >
> > Rainer
> >
> >
> >
>
> No, it uses LDAP authentication. I don't know if AD supports that or not.
> I have hacked a version of the LDAP authentication to use LDAP and Kerberos.
> It isn't that hard to do, and I could perhaps provide some example code on
> how my stuff works.
>
> Richard
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
> For additional commands, e-mail: user-help@lenya.apache.org
>
>
Re: Support for Active Directory???
Posted by Richard Frovarp <ri...@sendit.nodak.edu>.
Rainer Schöpf wrote:
> On Wed, 16 Apr 2008, Andreas Hartmann wrote:
>
> > you find more information on this page:
> > http://lenya.apache.org/docs/1_2_x/how-to/ldap_authentication.html
>
> I'm a bit confused. If I understand this correctly, it does not use Kerberos
> for authenticaion. Or does it?
>
> Rainer
>
>
No, it uses LDAP authentication. I don't know if AD supports that or
not. I have hacked a version of the LDAP authentication to use LDAP and
Kerberos. It isn't that hard to do, and I could perhaps provide some
example code on how my stuff works.
Richard
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by Rainer Schöpf <ra...@proteosys.com>.
On Wed, 16 Apr 2008, Andreas Hartmann wrote:
> you find more information on this page:
> http://lenya.apache.org/docs/1_2_x/how-to/ldap_authentication.html
I'm a bit confused. If I understand this correctly, it does not use Kerberos
for authenticaion. Or does it?
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by jazzhazze <ha...@glocalnet.net>.
Hi!
Thanks for the advice!
/JH
Andreas Hartmann wrote:
>
> Hi,
>
> jazzhazze schrieb:
>> Hi!
>> I'm about to migrate a website to a new environment. I'm thinking about
>> setting up Lenya as a possible CMS for the site (I'm also looking at
>> Typo3...).
>>
>> It is very important to me that the CMS supports Active Directory, and
>> that
>> it will be possible to use Active Directory for access issues.
>>
>> Will Lenya support that??
>> Does it require a lot of coding/modifications to enable this?
>
> you find more information on this page:
> http://lenya.apache.org/docs/1_2_x/how-to/ldap_authentication.html
>
> The documentation applies to 2.0 as well, maybe with some minor
> modifications. We could help you with that.
>
> -- Andreas
>
>
>
> --
> Andreas Hartmann, CTO
> BeCompany GmbH
> http://www.becompany.ch
> Tel.: +41 (0) 43 818 57 01
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
> For additional commands, e-mail: user-help@lenya.apache.org
>
>
>
--
View this message in context: http://www.nabble.com/Support-for-Active-Directory----tp16720195p16722270.html
Sent from the Lenya - Users mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org
Re: Support for Active Directory???
Posted by Andreas Hartmann <an...@apache.org>.
Hi,
jazzhazze schrieb:
> Hi!
> I'm about to migrate a website to a new environment. I'm thinking about
> setting up Lenya as a possible CMS for the site (I'm also looking at
> Typo3...).
>
> It is very important to me that the CMS supports Active Directory, and that
> it will be possible to use Active Directory for access issues.
>
> Will Lenya support that??
> Does it require a lot of coding/modifications to enable this?
you find more information on this page:
http://lenya.apache.org/docs/1_2_x/how-to/ldap_authentication.html
The documentation applies to 2.0 as well, maybe with some minor
modifications. We could help you with that.
-- Andreas
--
Andreas Hartmann, CTO
BeCompany GmbH
http://www.becompany.ch
Tel.: +41 (0) 43 818 57 01
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org