Configure LDAP plugin (DN found for user)

43 views
Skip to first unread message

PEDRO ALEXANDER TENEZACA SARI

unread,
Sep 17, 2019, 6:27:02 PM9/17/19
to DSpace Technical Support
Hello, I have tried to configure LDAP and DSpace, but I have an error.

Running DSPACE 6.3 onCentOS 7

Here are my settings(dspace/config/modules/authentication-ldap.cfg):

authentication-ldap.enable = true
authentication-ldap.autoregister = false
authentication-ldap.provider_url = ldap://172.0.0.1:389/
authentication-ldap.id_field = uid
authentication-ldap.object_context = ou=users\,dc=ucuenca\,dc=edu\,dc=ec
authentication-ldap.search_context = ou=users\,dc=ucuenca\,dc=edu\,dc=ec
authentication-ldap.email_field = mail
authentication-ldap.surname_field = sn
authentication-ldap.givenname_field = givenName
authentication-ldap.login.specialgroup = ucuenca
authentication-ldap.search_scope = 2
authentication-ldap.search.anonymous = false
authentication-ldap.search.user = cn=admin\,dc=ucuenca\,dc=edu\,dc=ec
authentication-ldap.search.password = pass
authentication-ldap.netid_email_domain = @ucuenca.edu.ec
authentication-ldap.login.groupmap.1 = ou=empleados:empleados
authentication-ldap.login.groupmap.2 = ou=estudiantes:estudiantes

I attached an image of the  hierarchical tree. Also, I installed openldap. Here are some of my commandas:

1. [root@localhost ~]#  ldapsearch -x -H ldap://172.0.0.1/389 -D cn=admin,dc=ucuenca,dc=edu,dc=ec -W -b ou=users,dc=ucuenca,dc=edu,dc=ec  -z 10 cn mail sn
Example (1 of 10):
# sgp, empleados, users, ucuenca.edu.ec
dn: uid=example,ou=estudiantes,ou=users,dc=ucuenca,dc=edu,dc=ec
cn: Example
mail: exa...@ucuenca.edu.ec
sn: Example
---

2. [root@localhost ~]# ldapsearch -x -H ldap://172.16.0.13/389 -D cn=admin,dc=ucuenca,dc=edu,dc=ec -W -b uid=pedro.tenezaca,ou=users,dc=ucuenca,dc=edu,dc=ec  -z 10 cn mail sn
Result
# extended LDIF
#
# LDAPv3
# base <uid=pedro.tenezaca,ou=users,dc=ucuenca,dc=edu,dc=ec> with scope subtree
# filter: (objectclass=*)
# requesting: cn mail sn
#

# search result
search: 2
result: 32 No such object
matchedDN: ou=users,dc=ucuenca,dc=edu,dc=ec
---

[root@localhost ~]#  ldapsearch -x -H ldap://172.16.0.13/389 -D cn=admin,dc=ucuenca,dc=edu,dc=ec -W -b uid=pedro.tenezaca,ou=estudiantes,ou=users,dc=ucuenca,dc=edu,dc=ec  -z 10 cn mail sn
Result:
# extended LDIF
#
# LDAPv3
# base <uid=pedro.tenezaca,ou=estudiantes,ou=users,dc=ucuenca,dc=edu,dc=ec> with scope subtree
# filter: (objectclass=*)
# requesting: cn mail sn
#

# pedro.tenezaca, estudiantes, users, ucuenca.edu.ec
dn: uid=pedro.tenezaca,ou=estudiantes,ou=users,dc=ucuenca,dc=edu,dc=ec
cn: PEDRO ALEXANDER TENEZACA SARI
mail: pedro.t...@ucuenca.edu.ec
sn: TENEZACA SARI

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1
---

From DSpace JSPUI, when I try to login with my user I get:
auth:attempting trivial auth of user=pedro.t...@ucuenca.edu.ec
failed_login:no DN found for user pedro.t...@ucuenca.edu.ec

This is my problem, please help me solving it.

Have a nice day.

Att: Pedro
Untitled.png
Reply all
Reply to author
Forward
0 new messages