Re: [dspace-tech] LDAP Authentication

2016-11-23 Thread helix84 
Sure. Here's the Apache configuration I'm using:


RewriteEngine on
#RewriteRule ^.*$ https://%{SERVER_NAME}/ldap-login [L,R]
RewriteRule ^.*$ http://%{SERVER_NAME}/ldap-login [L,R]



Regards,
~~helix84

Compulsory reading: DSpace Mailing List Etiquette
https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette


On Wed, Nov 23, 2016 at 5:04 PM, Donald Bynum  wrote:
> Ah, so it does.  Thanks.  I may end up changing the rendered page then to
> only display a single link, rather than multiple.
>
> Regards,
>
> Don.
>
> On Tuesday, November 22, 2016 at 3:38:53 PM UTC-5, helix84 wrote:
>>
>> On Tue, Nov 22, 2016 at 9:14 PM, Donald Bynum  wrote:
>> > Thanks for that.  There is a slight inconsistency in the docs (after
>> > your
>> > hint I went back and looked again).  The docs suggest that when theer
>> > are
>> > multiple auth mrthods configured that DSpace will try each method until
>> > success.  What I am seeing is, in fact, a list of links (one for each
>> > auth
>> > method) at the login screen.
>>
>> The documentation is correct, the methods are indeed stackable,
>> despite two forms being offered. Try opening up the ldap form and
>> using your DSpace login/password or vice versa.
>>
>>
>> Regards,
>> ~~helix84
>>
>> Compulsory reading: DSpace Mailing List Etiquette
>> https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette

-- 
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to dspace-tech+unsubscr...@googlegroups.com.
To post to this group, send email to dspace-tech@googlegroups.com.
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.

Re: [dspace-tech] LDAP Authentication

2016-11-23 Thread Donald Bynum 
Ah, so it does.  Thanks.  I may end up changing the rendered page then to 
only display a single link, rather than multiple.

Regards,

Don.

On Tuesday, November 22, 2016 at 3:38:53 PM UTC-5, helix84 wrote:

> On Tue, Nov 22, 2016 at 9:14 PM, Donald Bynum  > wrote: 
> > Thanks for that.  There is a slight inconsistency in the docs (after 
> your 
> > hint I went back and looked again).  The docs suggest that when theer 
> are 
> > multiple auth mrthods configured that DSpace will try each method until 
> > success.  What I am seeing is, in fact, a list of links (one for each 
> auth 
> > method) at the login screen. 
>
> The documentation is correct, the methods are indeed stackable, 
> despite two forms being offered. Try opening up the ldap form and 
> using your DSpace login/password or vice versa. 
>
>
> Regards, 
> ~~helix84 
>
> Compulsory reading: DSpace Mailing List Etiquette 
> https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette 
>

-- 
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to dspace-tech+unsubscr...@googlegroups.com.
To post to this group, send email to dspace-tech@googlegroups.com.
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.

Re: [dspace-tech] LDAP Authentication

2016-11-22 Thread helix84 
On Tue, Nov 22, 2016 at 9:14 PM, Donald Bynum  wrote:
> Thanks for that.  There is a slight inconsistency in the docs (after your
> hint I went back and looked again).  The docs suggest that when theer are
> multiple auth mrthods configured that DSpace will try each method until
> success.  What I am seeing is, in fact, a list of links (one for each auth
> method) at the login screen.

The documentation is correct, the methods are indeed stackable,
despite two forms being offered. Try opening up the ldap form and
using your DSpace login/password or vice versa.


Regards,
~~helix84

Compulsory reading: DSpace Mailing List Etiquette
https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette

-- 
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to dspace-tech+unsubscr...@googlegroups.com.
To post to this group, send email to dspace-tech@googlegroups.com.
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.

Re: [dspace-tech] LDAP Authentication

2016-11-22 Thread Donald Bynum 
Jeffrey,

Thanks for that.  There is a slight inconsistency in the docs (after your 
hint I went back and looked again).  The docs suggest that when theer are 
multiple auth mrthods configured that DSpace will try each method until 
success.  What I am seeing is, in fact, a list of links (one for each auth 
method) at the login screen.  I would have preferred it the way the docs 
suggested.  But, in any case, you pointed me in th eright direction to get 
back to where I needed to be.

Regards,

Don.

On Tuesday, November 22, 2016 at 2:39:07 PM UTC-5, Jeffrey Sheldon wrote:

> Don, 
>
> I would recommend enabling both LDAP and Password authentication, at least 
> long enough to log in under the older administrator account and promote any 
> accounts created through LDAP logins (or create a temporary one to feel 
> things out). 
>
> You can configure for both like so in config/modules/authentication.cfg 
>
> plugin.sequence.org.dspace.authenticate.AuthenticationMethod = \ 
> org.dspace.authenticate.LDAPAuthentication, \ 
> org.dspace.authenticate.PasswordAuthentication 
>
>
> I had thought that the LDAP bind simply replaced auth on an existing 
> account, though I can see situations where configuration might cause 
> conflicts. 
>
> If this response misses your point, please let me know. 
>
>
> -Jeff 
>
>  
> From: dspac...@googlegroups.com   > on behalf of Donald Bynum > 
> Sent: Tuesday, November 22, 2016 1:25 PM 
> To: DSpace Technical Support 
> Subject: [dspace-tech] LDAP Authentication 
>
> I have DSpace 5.5 with XMLUI and Mirage.  I initially set up DSpace with 
> Password Authentication.  I now want to switch to LDAP Authentication.  I 
> have configured the authentication config file and the ldap config file. 
>  All appears good except that I now see to have zapped my own administrator 
> account.  How can I get my DSpace account back to being an administrator 
> account?  I can revert my DSpace back to Pasword Auth and my old Admin 
> account works as an admin again.  What I need is my LDAP account to also be 
> an admin account, so that I can revert back to LDAP auth and still have 
> admin rights. 
>
> Regards, 
>
> Don. 
>
> -- 
> You received this message because you are subscribed to the Google Groups 
> "DSpace Technical Support" group. 
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to dspace-tech...@googlegroups.com  dspace-tech+unsubscr...@googlegroups.com >. 
> To post to this group, send email to dspac...@googlegroups.com 
> . 
> Visit this group at https://groups.google.com/group/dspace-tech. 
> For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to dspace-tech+unsubscr...@googlegroups.com.
To post to this group, send email to dspace-tech@googlegroups.com.
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.

Re: [dspace-tech] LDAP Authentication

2016-11-22 Thread Terry Brady 
You should be able to provide multiple authentication methods (if
appropriate).  When a user clicks login, they will be prompted for the
authentication method.

You should be able use the create-administrator command from the command
line to make your account an administrator account.

Look at the email address that was created for your LDAP account and make
it into an administrator.

Terry

On Tue, Nov 22, 2016 at 11:25 AM, Donald Bynum  wrote:

> I have DSpace 5.5 with XMLUI and Mirage.  I initially set up DSpace with
> Password Authentication.  I now want to switch to LDAP Authentication.  I
> have configured the authentication config file and the ldap config file.
> All appears good except that I now see to have zapped my own administrator
> account.  How can I get my DSpace account back to being an administrator
> account?  I can revert my DSpace back to Pasword Auth and my old Admin
> account works as an admin again.  What I need is my LDAP account to also be
> an admin account, so that I can revert back to LDAP auth and still have
> admin rights.
>
> Regards,
>
> Don.
>
> --
> You received this message because you are subscribed to the Google Groups
> "DSpace Technical Support" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to dspace-tech+unsubscr...@googlegroups.com.
> To post to this group, send email to dspace-tech@googlegroups.com.
> Visit this group at https://groups.google.com/group/dspace-tech.
> For more options, visit https://groups.google.com/d/optout.
>



-- 
Terry Brady
Applications Programmer Analyst
Georgetown University Library Information Technology
http://georgetown-university-libraries.github.io/

425-298-5498 (Seattle, WA)

-- 
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to dspace-tech+unsubscr...@googlegroups.com.
To post to this group, send email to dspace-tech@googlegroups.com.
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.

Re: [dspace-tech] LDAP Authentication

2016-11-22 Thread Jeffrey Sheldon 
Don,

I would recommend enabling both LDAP and Password authentication, at least long 
enough to log in under the older administrator account and promote any accounts 
created through LDAP logins (or create a temporary one to feel things out).

You can configure for both like so in config/modules/authentication.cfg

plugin.sequence.org.dspace.authenticate.AuthenticationMethod = \
org.dspace.authenticate.LDAPAuthentication, \
org.dspace.authenticate.PasswordAuthentication


I had thought that the LDAP bind simply replaced auth on an existing account, 
though I can see situations where configuration might cause conflicts.

If this response misses your point, please let me know.


-Jeff


From: dspace-tech@googlegroups.com  on behalf of 
Donald Bynum 
Sent: Tuesday, November 22, 2016 1:25 PM
To: DSpace Technical Support
Subject: [dspace-tech] LDAP Authentication

I have DSpace 5.5 with XMLUI and Mirage.  I initially set up DSpace with 
Password Authentication.  I now want to switch to LDAP Authentication.  I have 
configured the authentication config file and the ldap config file.  All 
appears good except that I now see to have zapped my own administrator account. 
 How can I get my DSpace account back to being an administrator account?  I can 
revert my DSpace back to Pasword Auth and my old Admin account works as an 
admin again.  What I need is my LDAP account to also be an admin account, so 
that I can revert back to LDAP auth and still have admin rights.

Regards,

Don.

--
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
dspace-tech+unsubscr...@googlegroups.com.
To post to this group, send email to 
dspace-tech@googlegroups.com.
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to dspace-tech+unsubscr...@googlegroups.com.
To post to this group, send email to dspace-tech@googlegroups.com.
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.