On Thu, Oct 03, 2013 at 12:36:35AM +0200, helix84 wrote: [snip] > My personal take on DS-1494 is that we do not want to add just > search.user and search.password to build.properties. These properties > are not usable by themselves, they require other LDAP options to work. > If we included all (or most) LDAP options, we should also include > properties for all other auth methods. I don't think that would fit > either of those definitions Tim mentioned.
Sensible. As mentioned elsewhere in this thread, may I suggest not only *not* adding directory credentials to build.properties, but moving them out of dspace.cfg as well, replacing them with a standard jndi.properties in [DSpace]/config: # Properties of the LDAP service connection. Please consult the # JNDI documentation and that of your LDAP service provider for full # details. # # These properties are defined by the JNDI specification and your # provider, not DSpace. Extend this file as needed. # LDAP: or LDAPS: URL to the LDAP service. # See also java.naming.security.protocol. java.naming.provider.url = # Authentication method: none, simple, or a space-separated list of # SASL mechanisms. java.naming.security.authentication = # Security principal (a user name, a DN, etc.) as required by the # authentication method. java.naming.security.principal = # Password or other credential, as required by the authentication # method. java.naming.security.credentials = # Uncomment if you will be using SSL for the initial connection #java.naming.security.protocol = ssl (I have not yet tested this.) Settings specific to *how DSpace is to use LDAP* should be part of DSpace and found in the configuration, as now. Details of the local LDAP service itself should be separated from the DSpace code where possible. -- Mark H. Wood, Lead System Programmer mw...@iupui.edu Machines should not be friendly. Machines should be obedient.
signature.asc
Description: Digital signature
------------------------------------------------------------------------------ October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register > http://pubads.g.doubleclick.net/gampad/clk?id=60134071&iu=/4140/ostg.clktrk
_______________________________________________ Dspace-devel mailing list Dspace-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-devel
