Authentication through active directory

[Vincent Mukamba]

I am trying to configure dspace 6.3 authentication via active directory. Anyone out there who has done it before? I need some guidance

[Mumanyi, Bravismore]

Dear Vincent

I have a 6.x DSpace instance where this auth integration is working.

You need to perform configurations in the following files sitting under <dspace>/config/modules. As best practice, you may elect to do this in the source tree and then rebuild for changes to take effect in the live.

1. authentication.cfg

2. authentication-ldap.cfg

In file (1) above, you tell dspace which auth plugins are enabled. In the example below, I have both LDAP and native password auth plugins enabled. 

plugin.sequence.org.dspace.authenticate.AuthenticationMethod = \

org.dspace.authenticate.LDAPAuthentication,org.dspace.authenticate.PasswordAuthentication

Then in file (2) above, you specify your institutional AD parameters. You can copy these parameters from any other internal system where AD auth is working. You basically need the values for the parameters below.

authentication-ldap.autoregister = true

authentication-ldap.provider_url = ldap://127.0.0.1/

authentication-ldap.id_field = sAMAccountName

authentication-ldap.object_context = DC=readers group\,DC=uofdata\,DC=edu

authentication-ldap.search_context = DC=readers group\,DC=uofdata\,DC=edu

authentication-ldap.email_field = tmailer

authentication-ldap.surname_field = dvc

authentication-ldap.givenname_field = givenName

authentication-ldap.login.specialgroup = Readers

authentication-ldap.search_scope = 2

authentication-ldap.search.user = CN=binduser

authentication-ldap.search.password = secret

authentication-ldap.netid_email_domain = @telaviv.is.zb

Are you stuck with (1) or (2)?

Thank you

---

From: dspace-c...@googlegroups.com <dspace-c...@googlegroups.com> on behalf of Vincent Mukamba <vincent...@gmail.com>
Sent: 13 June 2023 12:16
To: DSpace Community <dspace-c...@googlegroups.com>
Subject: [dspace-community] Authentication through active directory

 

I am trying to configure dspace 6.3 authentication via active directory. Anyone out there who has done it before? I need some guidance

--
All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx
---
You received this message because you are subscribed to the Google Groups "DSpace Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dspace-communi...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-community/278c2f1e-b9ec-455a-9db5-c9fffd4a4ed1n%40googlegroups.com.

CAUTION -EXTERNAL SENDER: Please be careful when opening links and attachments. UNAM Directorate: Information & Communication Technology Services (DICTS)