Skip to content

Activating Enable SSL connection to Active Directory from the UI has no effect on the SSL activation for LDAP user import #64

@AndreeaChi

Description

@AndreeaChi

Hi,

Active Directory used: 1.14.1 (also tested with 1.15)

While trying to use the Enable SSL connection to Active Directory server option from the UI configuration, it was noticed that it did not actually enable the SSL connection fully.

To be more exact, this is what it happened:

  • The login was possible and user creation happened upon first login (so it could look that the SSL connection is working)
  • but importing users did not work.

Settings done on the AD UI Configuration:

  • Enable SSL connection to Active Directory server option set to Yes
  • PATH TO SSL KEYSTORE and SSL SECURE PROVIDER field not completed

Result:

  • Login and user creation worked
  • the import does not work.

If completing PATH TO SSL KEYSTORE and SSL SECURE PROVIDER fields, while also Enable SSL connection to Active Directory server option set to Yes, nothing works anymore: login, user creation, import of users.

Current workaround:

  • After setting in the xwiki.cfg xwiki.authentication.ldap.ssl=1 , the user import worked along with the login and user creation.
    Note that the PATH TO SSL KEYSTORE and SSL SECURE PROVIDER fields need to be left empty on the AD UI config side so that LDAPS login, user creation upon login and import can work.

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions