automatic membership in the LDAP specialgroup

18 views
Skip to first unread message

cpgr...@gmail.com

unread,
Nov 1, 2023, 3:29:01 PM11/1/23
to DSpace Technical Support
In our DS5 setup everyone who logs in via LDAP (and is therefore a member of our University community) is a 'Registered User' and can submit items to our DS5.

We've set up the same configuration in our DS7 test sever and discovered we can still log in via LDAP, but don't seem to be members of the group for Registered Users although we copied our LDAP authentication configuration to the new server. When I log in as myself, in my user profile, I see I am a member of the special group in DS5; I do not see this in DS7. Since I am now not in the Registered Users group I cannot submit an item.

A minor point is the wording that is used when I can't submit a new item. Could it be something less awkward than "You have not the privilege to make a new submission". Where is that wording set in the code?

Adam Doan

unread,
Nov 2, 2023, 8:44:24 AM11/2/23
to cpgr...@gmail.com, DSpace Technical Support
Hello,

I don't know that I have a solution for you but I can confirm that we are using LDAP special groups in our dspace 7.6 codebase and it is working properly. When I log in via LDAP I can see at the bottom of my profile page a heading "Authorization special groups you belong to" with our special group listed below. Are you sure that the account you are using is an LDAP account and not a local user account?

Regarding changing the wording for that error message. You can customize this by editing the English internationalization file in the dspace-angular codebase: https://github.com/DSpace/dspace-angular/blob/main/src/assets/i18n/en.json5#L3945. I think it's likely that line, but you might have to search around a bit to find the exact text you want to change.

All the best,
-Adam

---

Adam Doan | Analyst, Digital Strategy & Technology

McLaughlin Library | University of Guelph
50 Stone Road E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 52974 | do...@uoguelph.ca

www.uoguelph.ca, www.lib.uoguelph.ca


1500656725244_uofg_cornerstone_improve_life.png



From: dspac...@googlegroups.com <dspac...@googlegroups.com> on behalf of cpgr...@gmail.com <cpgr...@gmail.com>
Sent: Wednesday, November 1, 2023 3:29 PM
To: DSpace Technical Support <dspac...@googlegroups.com>
Subject: [dspace-tech] automatic membership in the LDAP specialgroup
 

CAUTION: This email originated from outside of the University of Guelph. Do not click links or open attachments unless you recognize the sender and know the content is safe. If in doubt, forward suspicious emails to ITh...@uoguelph.ca.

In our DS5 setup everyone who logs in via LDAP (and is therefore a member of our University community) is a 'Registered User' and can submit items to our DS5.

We've set up the same configuration in our DS7 test sever and discovered we can still log in via LDAP, but don't seem to be members of the group for Registered Users although we copied our LDAP authentication configuration to the new server. When I log in as myself, in my user profile, I see I am a member of the special group in DS5; I do not see this in DS7. Since I am now not in the Registered Users group I cannot submit an item.

A minor point is the wording that is used when I can't submit a new item. Could it be something less awkward than "You have not the privilege to make a new submission". Where is that wording set in the code?

--
All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx
---
You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dspace-tech...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/e32953c6-ce19-4b0d-a88a-982983a5a3fan%40googlegroups.com.
Reply all
Reply to author
Forward
0 new messages