Issues connecting as LDAP to a windows active directory

[Joan]

Hi, I was directed to this list by Tobia (sorry I didn't see any mailing list before), to discuss about some issues I am having with the LDAP configuration.

The issue (now closed) is https://github.com/geosolutions-it/MapStore2/issues/10971#issuecomment-2766775935

Basically the problema arises (in my case) because use our company Active directory as the LDAP server, the error is the following:

 EL1008E: Property or field 'cn' cannot be found on object of type 'it.geosolutions.geostore.core.model.UserGroup' - maybe not public or not valid?

This appears when enabling the direct LDAP mode as explained here https://docs.mapstore.geosolutionsgroup.com/en/latest/developer-guide/integrations/users/ldap/#enabling-direct-connection-mode 

I've tried to reproduce the issue both with the tagged v2025.01.00 and v2024.02.02 and the issue is the same.

So if you need any help into diagnosing this issue I'll be glad to provide it.

Thanks

[Tobia Di Pisa]

Dear Joan,

Thank you so much for contacting the mailing list. Someone from the MS team will check what you reported to try to help addressing the issue you are experiencing.

Regards, 

   Tobia Di Pisa

--
You received this message because you are subscribed to the Google Groups "mapstore-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to mapstore-user...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/mapstore-users/CAP4s%2BCHy3tW%2BpH09HBncO5ir-9oGGKnORvx65r8g3K3FKVzhrg%40mail.gmail.com.

--

==
GeoServer Professional Services from the experts!

Visit http://bit.ly/gs-services-us for more information.
==
Dott. Ing. Tobia Di Pisa
Technical Lead / Project Manager

GeoSolutions Group
phone: +39 0584 962313

mobile: +39 340 1781783
fax:      +39 0584 1660272

https://www.geosolutionsgroup.com/
http://twitter.com/geosolutions_it
-------------------------------------------------------

Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE 2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si precisa che ogni circostanza inerente alla presente email (il suo contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra operazione è illecita. Le sarei comunque grato se potesse darmene notizia.

This email is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure. We remind that - as provided by European Regulation 2016/679 “GDPR” - copying, dissemination or use of this e-mail or the information herein by anyone other than the intended recipient is prohibited. If you have received this email by mistake, please notify us immediately by telephone or e-mail.

[Lorenzo Natali]

Hi,

The error looks to be caused by a misconfiguration. In fact "cn=" looks to be a DN path, while it looks to be interpreted ad SPel syntax.

Trying to guess, you configured the spring secuirty context in the wrong way. 

something like 

property="${...cn=...}"

Where "${...}" asks spring to evaluate the content as an expression, instead of 

property="...cn=..."

Where the value is fully passed.

But of course without your configuration, it's hard to guess the real cause.

I'd suggest you to try to find out what of the configurations causes the problem first, and try to fix it, or ask with more specific details.

Hope it helps to find out the cause of the issue.