Hi,
Active Directory used: 1.14.1 (also tested with 1.15)
While trying to use the Enable SSL connection to Active Directory server option from the UI configuration, it was noticed that it did not actually enable the SSL connection fully.
To be more exact, this is what it happened:
- The login was possible and user creation happened upon first login (so it could look that the SSL connection is working)
- but importing users did not work.
Settings done on the AD UI Configuration:
- Enable SSL connection to Active Directory server option set to Yes
- PATH TO SSL KEYSTORE and SSL SECURE PROVIDER field not completed
Result:
- Login and user creation worked
- the import does not work.
If completing PATH TO SSL KEYSTORE and SSL SECURE PROVIDER fields, while also Enable SSL connection to Active Directory server option set to Yes, nothing works anymore: login, user creation, import of users.
Current workaround:
- After setting in the xwiki.cfg xwiki.authentication.ldap.ssl=1 , the user import worked along with the login and user creation.
Note that the PATH TO SSL KEYSTORE and SSL SECURE PROVIDER fields need to be left empty on the AD UI config side so that LDAPS login, user creation upon login and import can work.