Published
Wiki source code of Convert the User Authentication documentation into the documentation tree
Last modified by Eleni Cojocariu on 2026/08/08 00:48
Show last authors
| author | version | line-number | content |
|---|---|---|---|
| 1 | Conversion of [[Documentation.AdminGuide.Authentication>>Documentation.AdminGuide.Authentication.WebHome]] (revision 127.1) into ##documentation.xs.admin.authentication##, following the Documentation Guide. Authentication had no page in the new tree yet, so this is a new topic beside ##rights## and ##user##. | ||
| 2 | |||
| 3 | The legacy page was one long page mixing every Diataxis type, so it becomes a hub plus seven pages: two References (##types##, ##parameters##) and five How-tos (##select-authenticator##, ##configure-container##, ##set-groovy-authenticator##, ##configure-kerberos-sso##, ##customize-mail-templates##). | ||
| 4 | |||
| 5 | Content that was checked against the sources on master and against a running XWiki 17.10.11, and **corrected**: | ||
| 6 | |||
| 7 | * ##default_page## does not exist: ##XWikiAuthServiceImpl## reads ##xwiki.authentication.defaultpage##. | ||
| 8 | * ##cookieprefix## was missing from the parameters table. | ||
| 9 | * The encryption and validation keys are no longer mandatory — they are generated and stored when left empty. | ||
| 10 | * The administration path is "Administration > Users & Rights > Authentication", not "Administration > Authentication". | ||
| 11 | * The Kerberos warning was stale: ##AppServerTrustedKerberosAuthServiceImpl## is part of ##xwiki-platform-oldcore##, so no ##authkerb.jar## has to be copied into ##WEB-INF/lib##. Kerberos also needs ##createuser=empty##, which the legacy page only mentioned for Container authentication. | ||
| 12 | * The Groovy authenticator requires programming rights on the page holding the code, and reads its page name from a ##groovy_pagename## wiki preference before falling back to ##xwiki.cfg##. Neither was documented. | ||
| 13 | * ##xwiki.cfg##'s ##authclass## takes precedence over the authenticator chosen in the administration, and the administration list only offers the Component-based authenticators. | ||
| 14 | * The legacy "Security Module" link now resolves to a page titled "Authorization API" and is about authorization, so it became a hub FAQ entry instead of a section. | ||
| 15 | |||
| 16 | Content **reduced to a link**, to stop duplicating what the extension pages own: OpenID Connect, LDAP (its ##OldLDAPAuthenticator## reference dropped), Active Directory, and the Security part of the Configuration section, which now points at the Authentication API extension. | ||
| 17 | |||
| 18 | Content **dropped**: the first-person ##SSOLdapAuthenicationImpl## JBoss SPNEGO Java dump in the Kerberos section — it extends ##XWikiLDAPAuthServiceImpl##, removed in XWiki 7.4. The Kerberos How-to keeps the part that covers the shipped authenticator. | ||
| 19 | |||
| 20 | The two screenshots are attached to this change request, so the pages render complete once it is merged. Three How-tos (##configure-container##, ##set-groovy-authenticator##, ##configure-kerberos-sso##) end on a textual result step instead: each would need a reconfigured and restarted server to be captured honestly. | ||
| 21 | |||
| 22 | The original page is stripped in the same change request and points at the new tree. Its two attachments, its backlinks and its two ##OldLDAPAuthenticator## child pages are handled separately, since deleting or repointing them needs their own backlink pass. |
