[xwiki-users] [ANN] XWiki 7.4.1 released
The XWiki development team is proud to announce the availability of XWiki 7.4.1. This is a bug fix release including some important improvements such as: asynchronous copy and rename page actions, improved location picker when copying and renaming, ability to omit "WebHome" in wiki links and images syntaxes. You can download it here: http://www.xwiki.org/xwiki/bin/view/Main/Download Make sure to review the release notes: http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki741 The following people have contributed code to this release (sorted alphabetically): acotiuga Denis Gervalle Eduard Moraru Guillaume Delhumeau Marius Dumitru Florea Thomas Mortagne Vincent Massol Thanks for your support -The XWiki dev team ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] How does LDAP Authentication using "xwiki.authentication.ldap.ldap_user_search_fmt" work?
Hi Thomas, thanks a lot, that was very quick and extremely helpful f. On 02/08/2016 03:48 PM, Thomas Mortagne wrote: On Mon, Feb 8, 2016 at 3:44 PM, Frank Thommen wrote: Hi Thomas, thanks a lot On 02/08/2016 03:34 PM, Thomas Mortagne wrote: xwiki.authentication.ldap.bind_DN and xwiki.authentication.ldap.bind_pass dont have to be static. It's usually better to make them dynamic (no ned to put a clear asmin password in a configuraton file), the only use case where it's should be static IMO is whan users are not allowed to search or navigate in to group members. In the standard xwiki.cfg each field is documented, for example for user_search_fmt you have: I've read this, but I wanted to know what happens in the "background" ;-) #-# LDAP query to search the user in the LDAP database (in case a static admin user is provided in #-# xwiki.authentication.ldap.bind_DN) #-# {0} is replaced with the user uid field name and {1} with the user name #-# The default is ({0}={1}) # xwiki.authentication.ldap.user_search_fmt=({0}={1}) Here is an example: if the LDAP user field containing the uid is "cn" and you are putting "toto" in the authentication form when you authenticate, XWiki will execute the following LDAP query to search for the user DN in the LDAP server: "cn=toto". Then by default (this is controled by validate_password property) validate_password=0 in our current setup. it will validate the password by executing a LDAP bind with the found DN and the password you gave it in the authentication form (then it will go back to the configured bindDN/password to do the synchronization). Just to make sure I understood correctly: When using static xwiki.authentication.ldap.bind_DN and xwiki.authentication.ldap.bind_pass and xwiki.authentication.ldap.validate_password=0, them XWiki does three binds: 1) first with bind_DN/bind_pass 2) then - to validate password - with the user's DN and provided pw 3) then again with bind_DN/bind_pass for sync Yes 3 binds since bind is the most standard way to validate a LDAP user which work with all servers. f. I never saw anyone set a custom query in there (you don't have to set something when the bind DN is static). On Mon, Feb 8, 2016 at 3:14 PM, Frank Thommen wrote: Hi, can someone explain (or provide links to documentation) how XWiki's LDAP authentication using "xwiki.authentication.ldap.ldap_user_search_fmt" works? I understand, that XWiki binds using xwiki.authentication.ldap.bind_DN and xwiki.authentication.ldap.bind_pass (which are configured as static user), but how does it then continue to check the user's password against the one in the LDAP/DA? In the configuration examples I found, this parameter is usually not used, however in the old installation I'm supposed to migrate it is. I need to find out how that works, to decide if we should go on with it or no. I've had a look at some of the Java libraries (XWikiLDAPAuthServiceImpl.java and XWikiLDAPUtils.java but they didn't help me very much (not being very proficient in Java). Any hint or link to some more in-depth documentation (deeper than http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication but above sourcecode level) is highly appreciated. Cheers Frank ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- Frank Thommen | HD-HuB / DKFZ Heidelberg | f.thom...@dkfz-heidelberg.de | TP3: +49-6221-42-3562 (Mo+Di) | IPMB: +49-6221-54-5823 (Mi-Do) ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- Frank Thommen | HD-HuB / DKFZ Heidelberg | f.thom...@dkfz-heidelberg.de | TP3: +49-6221-42-3562 (Mo+Di) | IPMB: +49-6221-54-5823 (Mi-Do) ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] How does LDAP Authentication using "xwiki.authentication.ldap.ldap_user_search_fmt" work?
On Mon, Feb 8, 2016 at 3:44 PM, Frank Thommen wrote: > Hi Thomas, > > thanks a lot > > On 02/08/2016 03:34 PM, Thomas Mortagne wrote: >> >> xwiki.authentication.ldap.bind_DN and >> xwiki.authentication.ldap.bind_pass dont have to be static. It's >> usually better to make them dynamic (no ned to put a clear asmin >> password in a configuraton file), the only use case where it's should >> be static IMO is whan users are not allowed to search or navigate in >> to group members. >> >> In the standard xwiki.cfg each field is documented, for example for >> user_search_fmt you have: > > > I've read this, but I wanted to know what happens in the "background" ;-) > > >> #-# LDAP query to search the user in the LDAP database (in case a >> static admin user is provided in >> #-# xwiki.authentication.ldap.bind_DN) >> #-# {0} is replaced with the user uid field name and {1} with the user >> name >> #-# The default is ({0}={1}) >> # xwiki.authentication.ldap.user_search_fmt=({0}={1}) >> >> Here is an example: if the LDAP user field containing the uid is "cn" >> and you are putting "toto" in the authentication form when you >> authenticate, XWiki will execute the following LDAP query to search >> for the user DN in the LDAP server: "cn=toto". Then by default (this >> is controled by validate_password property) > > > validate_password=0 in our current setup. > > >> it will validate the >> password by executing a LDAP bind with the found DN and the password >> you gave it in the authentication form (then it will go back to the >> configured bindDN/password to do the synchronization). > > > Just to make sure I understood correctly: When using static > xwiki.authentication.ldap.bind_DN and xwiki.authentication.ldap.bind_pass > and xwiki.authentication.ldap.validate_password=0, them XWiki does three > binds: > > 1) first with bind_DN/bind_pass > 2) then - to validate password - with the user's DN and provided pw > 3) then again with bind_DN/bind_pass for sync Yes 3 binds since bind is the most standard way to validate a LDAP user which work with all servers. > > > f. > > > >> >> I never saw anyone set a custom query in there (you don't have to set >> something when the bind DN is static). >> >> On Mon, Feb 8, 2016 at 3:14 PM, Frank Thommen >> wrote: >>> >>> Hi, >>> >>> can someone explain (or provide links to documentation) how XWiki's LDAP >>> authentication using "xwiki.authentication.ldap.ldap_user_search_fmt" >>> works? >>> I understand, that XWiki binds using xwiki.authentication.ldap.bind_DN >>> and >>> xwiki.authentication.ldap.bind_pass (which are configured as static >>> user), >>> but how does it then continue to check the user's password against the >>> one >>> in the LDAP/DA? >>> >>> In the configuration examples I found, this parameter is usually not >>> used, >>> however in the old installation I'm supposed to migrate it is. I need to >>> find out how that works, to decide if we should go on with it or no. >>> I've >>> had a look at some of the Java libraries (XWikiLDAPAuthServiceImpl.java >>> and >>> XWikiLDAPUtils.java but they didn't help me very much (not being very >>> proficient in Java). Any hint or link to some more in-depth >>> documentation >>> (deeper than >>> http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication but >>> above >>> sourcecode level) is highly appreciated. >>> >>> Cheers >>> Frank >>> ___ >>> users mailing list >>> users@xwiki.org >>> http://lists.xwiki.org/mailman/listinfo/users >> >> >> >> > > -- > Frank Thommen | HD-HuB / DKFZ Heidelberg >| f.thom...@dkfz-heidelberg.de >| TP3: +49-6221-42-3562 (Mo+Di) >| IPMB: +49-6221-54-5823 (Mi-Do) > > > ___ > users mailing list > users@xwiki.org > http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] How does LDAP Authentication using "xwiki.authentication.ldap.ldap_user_search_fmt" work?
Hi Thomas, thanks a lot On 02/08/2016 03:34 PM, Thomas Mortagne wrote: xwiki.authentication.ldap.bind_DN and xwiki.authentication.ldap.bind_pass dont have to be static. It's usually better to make them dynamic (no ned to put a clear asmin password in a configuraton file), the only use case where it's should be static IMO is whan users are not allowed to search or navigate in to group members. In the standard xwiki.cfg each field is documented, for example for user_search_fmt you have: I've read this, but I wanted to know what happens in the "background" ;-) #-# LDAP query to search the user in the LDAP database (in case a static admin user is provided in #-# xwiki.authentication.ldap.bind_DN) #-# {0} is replaced with the user uid field name and {1} with the user name #-# The default is ({0}={1}) # xwiki.authentication.ldap.user_search_fmt=({0}={1}) Here is an example: if the LDAP user field containing the uid is "cn" and you are putting "toto" in the authentication form when you authenticate, XWiki will execute the following LDAP query to search for the user DN in the LDAP server: "cn=toto". Then by default (this is controled by validate_password property) validate_password=0 in our current setup. it will validate the password by executing a LDAP bind with the found DN and the password you gave it in the authentication form (then it will go back to the configured bindDN/password to do the synchronization). Just to make sure I understood correctly: When using static xwiki.authentication.ldap.bind_DN and xwiki.authentication.ldap.bind_pass and xwiki.authentication.ldap.validate_password=0, them XWiki does three binds: 1) first with bind_DN/bind_pass 2) then - to validate password - with the user's DN and provided pw 3) then again with bind_DN/bind_pass for sync f. I never saw anyone set a custom query in there (you don't have to set something when the bind DN is static). On Mon, Feb 8, 2016 at 3:14 PM, Frank Thommen wrote: Hi, can someone explain (or provide links to documentation) how XWiki's LDAP authentication using "xwiki.authentication.ldap.ldap_user_search_fmt" works? I understand, that XWiki binds using xwiki.authentication.ldap.bind_DN and xwiki.authentication.ldap.bind_pass (which are configured as static user), but how does it then continue to check the user's password against the one in the LDAP/DA? In the configuration examples I found, this parameter is usually not used, however in the old installation I'm supposed to migrate it is. I need to find out how that works, to decide if we should go on with it or no. I've had a look at some of the Java libraries (XWikiLDAPAuthServiceImpl.java and XWikiLDAPUtils.java but they didn't help me very much (not being very proficient in Java). Any hint or link to some more in-depth documentation (deeper than http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication but above sourcecode level) is highly appreciated. Cheers Frank ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- Frank Thommen | HD-HuB / DKFZ Heidelberg | f.thom...@dkfz-heidelberg.de | TP3: +49-6221-42-3562 (Mo+Di) | IPMB: +49-6221-54-5823 (Mi-Do) ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] How does LDAP Authentication using "xwiki.authentication.ldap.ldap_user_search_fmt" work?
xwiki.authentication.ldap.bind_DN and xwiki.authentication.ldap.bind_pass dont have to be static. It's usually better to make them dynamic (no ned to put a clear asmin password in a configuraton file), the only use case where it's should be static IMO is whan users are not allowed to search or navigate in to group members. In the standard xwiki.cfg each field is documented, for example for user_search_fmt you have: #-# LDAP query to search the user in the LDAP database (in case a static admin user is provided in #-# xwiki.authentication.ldap.bind_DN) #-# {0} is replaced with the user uid field name and {1} with the user name #-# The default is ({0}={1}) # xwiki.authentication.ldap.user_search_fmt=({0}={1}) Here is an example: if the LDAP user field containing the uid is "cn" and you are putting "toto" in the authentication form when you authenticate, XWiki will execute the following LDAP query to search for the user DN in the LDAP server: "cn=toto". Then by default (this is controled by validate_password property) it will validate the password by executing a LDAP bind with the found DN and the password you gave it in the authentication form (then it will go back to the configured bindDN/password to do the synchronization). I never saw anyone set a custom query in there (you don't have to set something when the bind DN is static). On Mon, Feb 8, 2016 at 3:14 PM, Frank Thommen wrote: > Hi, > > can someone explain (or provide links to documentation) how XWiki's LDAP > authentication using "xwiki.authentication.ldap.ldap_user_search_fmt" works? > I understand, that XWiki binds using xwiki.authentication.ldap.bind_DN and > xwiki.authentication.ldap.bind_pass (which are configured as static user), > but how does it then continue to check the user's password against the one > in the LDAP/DA? > > In the configuration examples I found, this parameter is usually not used, > however in the old installation I'm supposed to migrate it is. I need to > find out how that works, to decide if we should go on with it or no. I've > had a look at some of the Java libraries (XWikiLDAPAuthServiceImpl.java and > XWikiLDAPUtils.java but they didn't help me very much (not being very > proficient in Java). Any hint or link to some more in-depth documentation > (deeper than > http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication but above > sourcecode level) is highly appreciated. > > Cheers > Frank > ___ > users mailing list > users@xwiki.org > http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
[xwiki-users] How does LDAP Authentication using "xwiki.authentication.ldap.ldap_user_search_fmt" work?
Hi, can someone explain (or provide links to documentation) how XWiki's LDAP authentication using "xwiki.authentication.ldap.ldap_user_search_fmt" works? I understand, that XWiki binds using xwiki.authentication.ldap.bind_DN and xwiki.authentication.ldap.bind_pass (which are configured as static user), but how does it then continue to check the user's password against the one in the LDAP/DA? In the configuration examples I found, this parameter is usually not used, however in the old installation I'm supposed to migrate it is. I need to find out how that works, to decide if we should go on with it or no. I've had a look at some of the Java libraries (XWikiLDAPAuthServiceImpl.java and XWikiLDAPUtils.java but they didn't help me very much (not being very proficient in Java). Any hint or link to some more in-depth documentation (deeper than http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication but above sourcecode level) is highly appreciated. Cheers Frank ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Encoding bug in Document Tree Macro ?
On 02/08/2016 10:21 AM, Bruno wrote: > > Le 05/02/2016 16:19, Clemens Klein-Robbenhaar a écrit : >> >> On 02/05/2016 03:35 PM, Bruno wrote: >>> Hello, >>> >>> I work in a French engineering school. >>> I would like to install xwiki 7.4 for my team. >>> >>> I encounter a problem whith accents : >>> When I create a page whose title contains accents (or French special >>> characters), childs documents are not displayed in the *Document Tree >>> macro*. >>> However, it appears in the wiki Page Index, but not in the tree. >>> >>> I followed unsuccessfully the documentation for administrators 'XWiki >>> Character Encoding Settings'. >>> >>> Is there something I did wrong ? Is it a bug ? >>> >> I cannot reproduce this behaviour. At first sight it looks to me like a >> problem with your setup. >> >> Can you try to see if the page still shows up in the page index if you >> filter the page names with then accented character actually used in the page >> name (in the "Location" column) >> If they vanish there, too, it is probably something with your setup. >> In that case: what kind of servlet container did you use? If an apache / >> nginx etc running in front of it? >> ___ >> users mailing list >> users@xwiki.org >> http://lists.xwiki.org/mailman/listinfo/users > > Hi Clemens, > > Thank you for your help. > I confirm that the page is listed when I use the filter 'location' in the > Page Index by entering the title with accents. > > _My config :_ > > * Debian Jessie (8.2) 64 bits > * MySQL Server 5.5.46 > * Apache 2.4.10 > * Tomcat 7.0.56 > * Oracle java 1.8.0_66 (v8) > * XWIKI 7.4 > > > Do you think I need to retry the installation with java-7-openjdk - amd64 ? > > Bruno > No, Java8 is just fine, I tested the issue with java8, too. If the document is shown in the page index, the encoding setup should be ok. The strange thing is that the document macro uses (nearly) the same way to transport the information (i.e. what pages are sought) to the server as the document index do - both use a simple AJAX GET Request parameter. (The main difference is that the document tree sends full page names, and the document index parts of a name). Is there any chance that you can talk to the tomcat directly w/o the apache? Can you see the AJAX-request in the server access logs? Do the search query for the location (request parameter "doc.location") different from the document tree (search parameter is just an 'id'). for example an 'è' should show up there as an %C3%A8 (I think) I remember I once had nasty problems with apache as frontend and pages containing a '+', but I guess this does not apply here /... ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] What will happen if I install extension with almost the same function?
Thanks. So, There is a Syntax Highlighting Application, Highlight JS Macro in my xwiki and its'not the same. How to use Syntax Highlighting Application? Where can I see settings for Highlight JS Macro? This macro is not working(not highlighting code) for users without "Administrator" or "Programming" rights. -- View this message in context: http://xwiki.475771.n2.nabble.com/What-will-happen-if-I-install-extension-with-almost-the-same-function-tp7597807p7597818.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
[xwiki-users] Translations available at Global Level
Hello, Recently we've been discussing about a situation that creates some inconveniences. What happens in short: * Have multiple subwikis, each with different extensions * Try to copy one content page from one wiki to another * When you are using the Copy Dialog - you can see pages from other subwikis. In that list the translations are broken. * It's about the applications homepages that uses translations keys for their titles. You will get something similar to http://screencast.com/t/8aHY7dca There are problems with translations visibility between subwikis. Check: * ideas * filemanager * xpoll * notes You can get more details from: * http://jira.xwiki.org/browse/NOTES-3 * http://jira.xwiki.org/browse/XDOODLE-32 * http://jira.xwiki.org/browse/IDEAS-63 The current solution (see https://github.com/xwiki-contrib/application-ideas/pull/16) creates a few glitches with installing that app on subwikis and programming rights. What we need is to define a rule that will be acceptable for the entire XE. What are your thoughts on this? Regards, *Iustin* ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] What will happen if I install extension with almost the same function?
Hi Sonic, On 8 Feb 2016 at 09:04:07, Sonic (timurale...@gmail.com(mailto:timurale...@gmail.com)) wrote: > I have Syntax Highlighting Application that "Provides Syntax Highlighting" > (uses Highlight.JS). This is not correct. The Syntax Highlighting Application doesn’t use Highlight.JS (it uses CodeMirror), I think you’re confusing with the Highlight Macro: * Syntax Highlighting Application (CodeMirror): http://extensions.xwiki.org/xwiki/bin/view/Extension/Syntax+Highlighting+Application * Highlight Macro: http://extensions.xwiki.org/xwiki/bin/view/Extension/Highlight+Macro > I want to install Highlight Macro(uses Highlight.JS with the same syntax), > because there is a right access problem with either Syntax Highlighting > Application or Highlight.JS. idk I recommend using the Syntax Highlighting Application which is more maintained than the Highlight Macro, but it’s possible that the Highlight Macro works very well too (haven’t tried it for a long time). I’d be interested in a comparison between the 2 actually so that we can mention the pros and cons of each on their documentation pages. > What will happen? Do i have to delete Syntax Highlighting Application first? I have no idea if they’re compatible or not, probably not since they’ll both try to highlight content... > I tried to delete, but after that Highlight JS Macro(which Highlight Macro > extension uses too) still remain. I don’t understand what you mean. You said you tried to delete the Syntax Highlighting Application and then the next sentence says that Highlight JS Macro remains. Of course it remains since you didn’t uninstall it. BTW don’t delete pages, instead prefer uninstalling the extension from the Administration page. Thanks -Vincent > View this message in context: > http://xwiki.475771.n2.nabble.com/What-will-happen-if-I-install-extension-with-almost-the-same-function-tp7597807.html > Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Encoding bug in Document Tree Macro ?
Le 05/02/2016 16:19, Clemens Klein-Robbenhaar a écrit : On 02/05/2016 03:35 PM, Bruno wrote: Hello, I work in a French engineering school. I would like to install xwiki 7.4 for my team. I encounter a problem whith accents : When I create a page whose title contains accents (or French special characters), childs documents are not displayed in the *Document Tree macro*. However, it appears in the wiki Page Index, but not in the tree. I followed unsuccessfully the documentation for administrators 'XWiki Character Encoding Settings'. Is there something I did wrong ? Is it a bug ? I cannot reproduce this behaviour. At first sight it looks to me like a problem with your setup. Can you try to see if the page still shows up in the page index if you filter the page names with then accented character actually used in the page name (in the "Location" column) If they vanish there, too, it is probably something with your setup. In that case: what kind of servlet container did you use? If an apache / nginx etc running in front of it? ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users Hi Clemens, Thank you for your help. I confirm that the page is listed when I use the filter 'location' in the Page Index by entering the title with accents. _My config :_ * Debian Jessie (8.2) 64 bits * MySQL Server 5.5.46 * Apache 2.4.10 * Tomcat 7.0.56 * Oracle java 1.8.0_66 (v8) * XWIKI 7.4 Do you think I need to retry the installation with java-7-openjdk - amd64 ? Bruno ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
[xwiki-users] What will happen if I install extension with almost the same function?
I have Syntax Highlighting Application that "Provides Syntax Highlighting" (uses Highlight.JS). I want to install Highlight Macro(uses Highlight.JS with the same syntax), because there is a right access problem with either Syntax Highlighting Application or Highlight.JS. idk What will happen? Do i have to delete Syntax Highlighting Application first? I tried to delete, but after that Highlight JS Macro(which Highlight Macro extension uses too) still remain. -- View this message in context: http://xwiki.475771.n2.nabble.com/What-will-happen-if-I-install-extension-with-almost-the-same-function-tp7597807.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
[xwiki-users] What will happen if I install extension with almost the same function?
I have Syntax Highlighting Application that "Provides Syntax Highlighting" (uses Highlight.JS). I want to install Highlight Macro(uses Highlight.JS with the same syntax), because there is a right access problem with either Syntax Highlighting Application or Highlight.JS. idk What will happen? Do i have to delete Syntax Highlighting Application first? I tried to delete, but after that Highlight JS Macro(which Highlight Macro extension uses too) still remain. -- View this message in context: http://xwiki.475771.n2.nabble.com/What-will-happen-if-I-install-extension-with-almost-the-same-function-tp7597806.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users