LDAP in i2b2

[KeithB]

Anyone have experience using i2b2's built in LDAP auth?  We are configuring one user for LDAP auth.

 

Mainly, what should be used for the distinguished_name parameter?  We are trying 'uid=(login_name)' and getting consistent 'invalid credentials' errors.

Thanks,

[John Reber]

These are what our values at Jefferson look like in the pm_user_params table:

ID    Data User_id   param_name_cd             value

        Type

1 T jpr101 authentication_method LDAP

2 T jpr101 connection_url ldap://jds.jefferson.edu:389

3 T jpr101 search_base ou=people,dc=jefferson,dc=edu

4 T jpr101 distinguished_name uid=

5 T jpr101 security_authentication simple

My entry in the pm_user_data looks like this:

user_id     full_name        password email

jpr101 John P Reber (null) John....@jefferson.edu

-----

[Peter Beninato]

Hello,

In particular for distinguished name, this is the parameter that is setup here:

INSERT INTO PM_USER_PARAMS
(
ID,DATATYPE_CD,USER_ID,PARAM_NAME_CD,CHANGE_DATE,ENTRY_DATE,CHANGEBY_CHAR,STATUS_CD,VALUE
)
(
select pm_params.nextval, 'T', r.user_id, 'distinguished_name', sysdate, sysdate, 'i2b2', 'A', 'cn='
from dual
);

-Peter

-----Original Message-----
From: Christoph, Jan (IMI) [mailto:jan.ch...@fau.de]
Sent: Monday, May 02, 2016 2:57 PM
To: i2b2-ins...@googlegroups.com; mem...@i2b2aug.org
Subject: AW: LDAP in i2b2

Hello.

I could image that it depends of the server/system: for Microsoft Active Directory, we use LDAP with those parameters:

Admin-Webfrontend: Manage Users -> add user -> Params (all with type "text"):
"authentication_method" = NTLM
"Domain" = uk-erlangen.de
"domain_controller" = uk-erlangen.de (your valid AD-domain-Controller)

best regards,
Jan

--
Jan Christoph, M.Sc. (Bioinformatik), M.Sc. (Medical Process Management)
Chair of Medical Informatics at Friedrich-Alexander-University Erlangen-Nürnberg (FAU)
Wetterkreuz 13, 91058 Tennenlohe, Germany
Web: https://www.imi.med.fau.de/person/jan-christoph/


________________________________________
Von: Keith Bobitt [kbo...@uab.edu]
Gesendet: Montag, 2. Mai 2016 21:18
An: i2b2-ins...@googlegroups.com; mem...@i2b2aug.org
Betreff: LDAP in i2b2

Anyone have experience using i2b2's built in LDAP auth? We are configuring one user for LDAP auth.

Mainly, what should be used for the distinguished_name parameter? We are trying 'uid=(login_name)' and getting consistent 'invalid credentials' errors.

Keith Bobitt
- Biomedical Informatics
- UAB Center for Clinical and Translational Science
- Office: (205) 934-2508 | kbo...@uab.edu

[KeithB]

Thanks Jan,

Are the other supposedly required parameters filled in?

connection_url

search_base

distinguished_name

security_authentication


Thanks