Re: [Dspace-tech] Configuring Shibboleth for DSpace 4
Thanks for the explanation. I will try this and keep the group posted on how it goes! Regards, Shazia On Fri, Jan 10, 2014 at 8:10 AM, helix84 wrote: > On Thu, Jan 9, 2014 at 7:34 PM, Shazia Sathar wrote: > > 2) For all other users it would be the default password-based > > authentication. > > Hi Shazia, > > yes, DSpace uses stackable authentication, so multiple authentication > modules can be used in parallel. Here's what you need for > authentication.cfg: > > plugin.sequence.org.dspace.authenticate.AuthenticationMethod = \ > org.dspace.authenticate.ShibAuthentication, \ > org.dspace.authenticate.PasswordAuthentication > > Of course, now you should set up authentication-password.cfg (usually > not necessary) and authentication-shibboleth.cfg. > > > > Is it possible to do this? Any pointers would be appreciated. I have gone > > through the documentation but I am not sure where to start. I have addded > > org.dspace.authenticate.ShibAuthentication to authentication.cfg. > > The details for DSpace 1.8.2 and newer are here: > > > https://wiki.duraspace.org/display/DSDOC4x/Authentication+Plugins#AuthenticationPlugins-ConfiguringShibbolethAuthentication(DSpace1.8.2+) > > In the supported setup, you need to run Apache HTTPD as a front-end to > DSpace. You have to install the Shibboleth Service Provider (SP) and > load it as a module to Apache (mod_shib). > > Then you have to configure the details of your particular Shibboleth > environment in authentication-shibboleth.cfg. > > > Regards, > ~~helix84 > > Compulsory reading: DSpace Mailing List Etiquette > https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette > -- CenturyLink Cloud: The Leader in Enterprise Cloud Services. Learn Why More Businesses Are Choosing CenturyLink Cloud For Critical Workloads, Development Environments & Everything In Between. Get a Quote or Start a Free Trial Today. http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
Re: [Dspace-tech] Configuring Shibboleth for DSpace 4
On Thu, Jan 9, 2014 at 7:34 PM, Shazia Sathar wrote: > 2) For all other users it would be the default password-based > authentication. Hi Shazia, yes, DSpace uses stackable authentication, so multiple authentication modules can be used in parallel. Here's what you need for authentication.cfg: plugin.sequence.org.dspace.authenticate.AuthenticationMethod = \ org.dspace.authenticate.ShibAuthentication, \ org.dspace.authenticate.PasswordAuthentication Of course, now you should set up authentication-password.cfg (usually not necessary) and authentication-shibboleth.cfg. > Is it possible to do this? Any pointers would be appreciated. I have gone > through the documentation but I am not sure where to start. I have addded > org.dspace.authenticate.ShibAuthentication to authentication.cfg. The details for DSpace 1.8.2 and newer are here: https://wiki.duraspace.org/display/DSDOC4x/Authentication+Plugins#AuthenticationPlugins-ConfiguringShibbolethAuthentication(DSpace1.8.2+) In the supported setup, you need to run Apache HTTPD as a front-end to DSpace. You have to install the Shibboleth Service Provider (SP) and load it as a module to Apache (mod_shib). Then you have to configure the details of your particular Shibboleth environment in authentication-shibboleth.cfg. Regards, ~~helix84 Compulsory reading: DSpace Mailing List Etiquette https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette -- CenturyLink Cloud: The Leader in Enterprise Cloud Services. Learn Why More Businesses Are Choosing CenturyLink Cloud For Critical Workloads, Development Environments & Everything In Between. Get a Quote or Start a Free Trial Today. http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk ___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
Re: [Dspace-tech] Configuring Shibboleth for DSpace 4
One way you might consider is to use Apache redirects. In the httpd.conf the DSpace address may redirect to the university's authentication service. I don't know anything about how Shibboleth works however I assume the authentication page has a list of applications or URLs that it then runs for the user and may then return the user to the "real" DSpace URL. Sounds like a job for your friendly neighborhood system administrator. On Thu, 2014-01-09 at 12:34 -0600, Shazia Sathar wrote: > Hello All, > > > I am trying to configure Authentication in DSpace 4 and not sure how > to proceed. The scenario I am trying to implement is to have two ways > to authenticate users to the DSpace site. > > > 1) If a staff/student at my university wishes to login then they click > on a link that routes them to the university authentication page. > After they are successfully authenticated, they are returned to DSpace > site to access resources based on their access rights. My university > uses Shibboleth. I am just not sure how to link it to DSpace though. > > > 2) For all other users it would be the default password-based > authentication. > > > > Is it possible to do this? Any pointers would be appreciated. I have > gone through the documentation but I am not sure where to start. I > have addded org.dspace.authenticate.ShibAuthentication to > authentication.cfg. > > > Thanks in advance for your help. > > > Regards, > Shazia > > > -- > CenturyLink Cloud: The Leader in Enterprise Cloud Services. > Learn Why More Businesses Are Choosing CenturyLink Cloud For > Critical Workloads, Development Environments & Everything In Between. > Get a Quote or Start a Free Trial Today. > http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk > ___ DSpace-tech mailing list > DSpace-tech@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/dspace-tech List Etiquette: > https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette -- CenturyLink Cloud: The Leader in Enterprise Cloud Services. Learn Why More Businesses Are Choosing CenturyLink Cloud For Critical Workloads, Development Environments & Everything In Between. Get a Quote or Start a Free Trial Today. http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk ___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
[Dspace-tech] Configuring Shibboleth for DSpace 4
Hello All, I am trying to configure Authentication in DSpace 4 and not sure how to proceed. The scenario I am trying to implement is to have two ways to authenticate users to the DSpace site. 1) If a staff/student at my university wishes to login then they click on a link that routes them to the university authentication page. After they are successfully authenticated, they are returned to DSpace site to access resources based on their access rights. My university uses Shibboleth. I am just not sure how to link it to DSpace though. 2) For all other users it would be the default password-based authentication. Is it possible to do this? Any pointers would be appreciated. I have gone through the documentation but I am not sure where to start. I have addded org.dspace.authenticate.ShibAuthentication to authentication.cfg. Thanks in advance for your help. Regards, Shazia -- CenturyLink Cloud: The Leader in Enterprise Cloud Services. Learn Why More Businesses Are Choosing CenturyLink Cloud For Critical Workloads, Development Environments & Everything In Between. Get a Quote or Start a Free Trial Today. http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette