Перейти к содержимому

Администрирование вики: LDAP User Import

The list of the LDAP user fields to be available for custom search. The fields added in this list will be available in the Import User modal only if the "SEARCH BY FIELD" option is checked.
If this option is checked, then a select input will be displayed in the Import User modal, allowing to select and to search only in one LDAP field (e.g.: mail). If the option is not checked, the search will be performed in all the fields defined in the "LDAP USER FIELDS" list.
If this option is checked, then an OpenID Connect related object will be added in the profile of the new created user, in case any OpenID Connect Authenticator is installed in the main wiki.
The URI of the OIDC Issuer. All the users imported using LDAP User Import will be associated to this issuer.
Use this option to specify who is able to import users from LDAP. By default, this is restricted only to Global admin users.
The XWiki page name pattern. Default value is ${uid}, see the documentation for more details.
The maximum number of entries displayed when searching for LDAP users to import or LDAP groups to associate.
If this option is checked, an update on the XWiki groups that are part of the LDAP groups mapping will be executed at a given time (4:30 AM, by default).
This is a dangerous operation as it can remove admin users from the XWikiAdminGroup, if the LDAP groups mapping contains this group.
The default DN under which LDAP groups should be searched during imports
The filter that should be used to search for groups to import. It should follow RFC 2554. i.e. (|(objectClass=groupOfNames)(objectClass=customGroupName))
A hint of attributes to be fetched from LDAP groups. These attributes can be used to compute the group page name.
Define the name format of imported group pages. By default, the group name is defined as "${uid}Group".
If this option is checked, enable the daily automated import of LDAP groups. By default, this import is executed at 3:30 AM.
Use this parameter when users in the LDAP server have attributes that denote membership to groups (such as `memberOf`). If this parameter is filled, the group update job will also look for users that have the attribute value equal to a group in the LDAP groups mapping.
During Group Import Job the ldap groups can be mapped over existing XWiki Group. Setting this property to true will create the mapping even if the ldap group gets associated to an existing XWiki Group.