Re: [Koha] koha opac users integrate with Active directory

2016-03-02 Thread mourik jan heupink



On 03/02/2016 06:28 PM, Ahmad Amanullah Khan wrote:

Dear All

These links are better to read. No successful implementation I am searching 
since last 2 years.


Just for the record: ldap/AD authentication working fine here.

Setting it up was a bit complicated, specially since koha seemed to 
prefer (at that time) the 'password compare' approach. Which never works 
with AD, and also not with openldap, afaik.


But the auth_by_bind method works perfectly. Just needs to be configured 
correctly. (which can be a pain, yes)


MJ
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
https://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] Koha and LDAP: Password comparison fails

2015-09-10 Thread mourik jan heupink

Here is the AD bit from our koha-conf.xml:


 
samba.domain.com
CN=Users,DC=samba,DC=domain,DC=com
1
1
1
%s...@samba.domain.com
 
  
  
  
  
  
  our_branch
  
  
  
  A
  

  


Explained:
samba.domain.com is the name of our active directory, if you specify 
that as hostname to bind to, koha will use (round robin) dns to connect 
to all DC's. Gives you a nice load spread, plus if one DC happens to be 
down, only some logons will fail.


(verify with "host samba.domain.com" reveral times in a row, it should 
normally return different ip's, dependin on your number of dc's)


Base should be your users container.

Principal took me some time to understand: 
%s...@samba.domain.com


%s is replaced with a username, so in my example koha tries to bind as 
usern...@samba.domain.com


I think the above explains it all?

MJ



On 09/10/2015 09:18 AM, Ahmad Amanullah Khan wrote:

Dear All

I will appreciate if you guide us how you integrated KOHA with AD. Any
guide will be highly appreciated.

Thanks

On Thu, Sep 10, 2015, 3:45 AM uwe <singlespeedfah...@yandex.com> wrote:


Am Freitag, den 21.08.2015, 10:36 +0200 schrieb mourik jan heupink:

I have no other clues, no. Must say I'm rather surprised to read that
auth by bind is no option for you. Are you sure? Why not


It seems that I misunderstood the auth-by-bind function. Finally
someone who has more ldap knowledge helped out to connect the ldap to
our koha installation. Now it works with auth-by-bind as you suggested.
Thank you very much. Your hint guided us into the right way to get it
to work.

Best wishes
Uwe




On 08/20/2015 03:02 PM, uwe wrote:

Hello,

Am Mittwoch, den 19.08.2015, 22:24 +0200 schrieb mourik jan
heupink:

I'm not sure if it will help you, but we have never had much luck

with the password compare routine, which koha seems to like.

I don't know any other ldap client that works like that. The
usual
way
(and this one works perfectly here, using openldap and also
samba4/AD)
is: use 1

Your principal_name would then be something like:

dn=%s,ou=id,dc=MY_ORG,dc=org


Thank you for your answer and hints but unfortunally auth_by_bind
seems
to be no option for us.

Is there another way to solve the issue?

Thanks in advance
Uwe


Hopefully this helps you as well.

MJ

On 8/18/2015 14:35, uwe wrote:

Hello,

we have a Koha-Installation and would like to connect to our
OpenLDAP
-server, but I can't get it to work.

First our Koha setup:


OS: debian wheezy
Koha: 3.20.02


Connecting to ldap-server works fine but the password
comparison
fails
with the follwing error (tested in the console but also fails
in
the
web gui; also given password is correct):


root@biblio:/etc/koha/sites/MY_SITE# env
PERL5LIB=/usr/share/koha/lib

KOHA_CONF=/etc/koha/sites/MY_SITE/koha-conf.xml perl
/usr/share/koha/opac/cgi-bin/opac/opac-user.pl
userid=MY_MAIL_NAME@MY_
ORG.org password=MY_PASSWORD. | head -5


Got 2 ldap mapkeys (  total  ): userid
Got 2 ldap mapkeys (populated): userid
Checking Auth at /usr/share/koha/lib/C4/Auth.pm line 703,

line

558.

kohaversion : 3.2002000
## checkpw - checking LDAP
LDAP Auth rejected : invalid password for user
'MY_MAIL_NAME@MY_O
RG.o

rg'. LDAP error #5: LDAP_COMPARE_FALSE

# This code is returned when a compare request completes and
the

attribute value given is not in the entry specified


Login failed, resetting anonymous session... at

/usr/share/koha/lib/C4/Auth.pm line 1107,  line 595.

Configuration in koha-conf.xml, see below. Our ldap-server uses
SSHA as
password sheme. Could this be the problem?

How can I solve it? Can't find much usefull when searching
internet
for
the problem.

Thanks and best wishes
Uwe


1 





MY_LDAP_SERVER
  ou=id,dc=MY_ORG,dc=org
  cn=biblio,ou=daemons,dc=MY_ORG,dc=org


  MY_SECRET_PASSWORD  

 0 

  0  

  0
  0 

 
   

  
  
  
  




(hint: some private data is anonymized with large letters)


___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
https://lists.katipo.co.nz/mailman/listinfo/koha

___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
https://lists.katipo.co.nz/mailman/listinfo/koha

--
Q:  What is green and lives in the ocean?
A:  Moby Pickle.


___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
https://lists.katipo.co.nz/mailman/listinfo/koha


___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
https://lists.katipo.co.nz/mailman/listinfo/koha


___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
https://li

Re: [Koha] Koha and LDAP: Password comparison fails

2015-08-21 Thread mourik jan heupink
Hi,

I have no other clues, no. Must say I'm rather surprised to read that
auth by bind is no option for you. Are you sure? Why not?

MJ


On 08/20/2015 03:02 PM, uwe wrote:
 Hello,
 
 Am Mittwoch, den 19.08.2015, 22:24 +0200 schrieb mourik jan heupink:
 I'm not sure if it will help you, but we have never had much luck

 with the password compare routine, which koha seems to like.

 I don't know any other ldap client that works like that. The usual 
 way 
 (and this one works perfectly here, using openldap and also 
 samba4/AD) 
 is: use auth_by_bind1/auth_by_bind

 Your principal_name would then be something like:

 principal_namedn=%s,ou=id,dc=MY_ORG,dc=org/principal_name
 
 Thank you for your answer and hints but unfortunally auth_by_bind seems
 to be no option for us. 
 
 Is there another way to solve the issue? 
 
 Thanks in advance
 Uwe
 
 Hopefully this helps you as well.

 MJ

 On 8/18/2015 14:35, uwe wrote:
 Hello,

 we have a Koha-Installation and would like to connect to our 
 OpenLDAP
 -server, but I can't get it to work.

 First our Koha setup:

 OS: debian wheezy
 Koha: 3.20.02

 Connecting to ldap-server works fine but the password comparison 
 fails
 with the follwing error (tested in the console but also fails in 
 the
 web gui; also given password is correct):

 root@biblio:/etc/koha/sites/MY_SITE# env 
 PERL5LIB=/usr/share/koha/lib
 KOHA_CONF=/etc/koha/sites/MY_SITE/koha-conf.xml perl
 /usr/share/koha/opac/cgi-bin/opac/opac-user.pl  
 userid=MY_MAIL_NAME@MY_
 ORG.org password=MY_PASSWORD. | head -5

 Got 2 ldap mapkeys (  total  ): userid
 Got 2 ldap mapkeys (populated): userid
 Checking Auth at /usr/share/koha/lib/C4/Auth.pm line 703, DATA 
 line
 558.
 kohaversion : 3.2002000
 ## checkpw - checking LDAP
 LDAP Auth rejected : invalid password for user 'MY_MAIL_NAME@MY_O
 RG.o
 rg'. LDAP error #5: LDAP_COMPARE_FALSE
 # This code is returned when a compare request completes and the
 attribute value given is not in the entry specified

 Login failed, resetting anonymous session... at
 /usr/share/koha/lib/C4/Auth.pm line 1107, DATA line 595.

 Configuration in koha-conf.xml, see below. Our ldap-server uses 
 SSHA as
 password sheme. Could this be the problem?

 How can I solve it? Can't find much usefull when searching internet 
 for
 the problem.

 Thanks and best wishes
 Uwe

 useldapserver1/useldapserver !-- see C4::Auth_with_ldap for
 extra configs you must add if you want to turn this on --

 !-- LDAP SERVER (optional) --

 ldapserver id=ldapserver  listenref=ldapserver
hostnameMY_LDAP_SERVER/hostname
  baseou=id,dc=MY_ORG,dc=org/base
  usercn=biblio,ou=daemons,dc=MY_ORG,dc=org/user !-- 
 DN,
 if not anonymous --
  passMY_SECRET_PASSWORD/pass  !-- password, if not
 anonymous --
 replicate0/replicate !-- add new users from LDAP to 
 Koha
 database --
  update0/update  !-- update existing users in Koha
 database --
  anonymous_bind0/anonymous_bind
  auth_by_bind0/auth_by_bind !-- set to 1 to 
 authenticate
 by binding instead of password comparison, e.g., to use Active
 Directory --
 !--principal_name%s@MY_ORG.org/principal_name--
  mapping !-- match koha SQL field names to your LDAP 
 record
 field names --
  !--firstname is=firstname/firstname
  surname is=surname/surname
  address is=postaladdresshier/address
  city is=lBerlin/city
  zipcode is=postalcode1000/zipcode
  branchcode is=businesscategory/branchcode 
 --
  userid is=uid/userid
  !--password is=USER_PASSWORD/password
  email is=mail/email
  categorycode 
 is=employeetypePT/categorycode
  phone is=telephonenumber1/phone
  flags is=flags2/flags --
  /mapping
 /ldapserver


 (hint: some private data is anonymized with large letters)

 ___
 Koha mailing list  http://koha-community.org
 Koha@lists.katipo.co.nz
 https://lists.katipo.co.nz/mailman/listinfo/koha
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
https://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] koha-common | mpm-itk on wheezy

2015-04-02 Thread mourik jan heupink
Hi Robin, list,

Sorry for the delay. Here are the requested outputs:

root@data:~# /usr/sbin/apache2ctl -v
Server version: Apache/2.2.22 (Debian)
Server built:   Dec 23 2014 22:48:29
root@data:~# /usr/sbin/apache2ctl -M
apache2: bad user name oursite-koha
Action '-M' failed.
The Apache error log may have more information.
root@data:~#

Regards,
Mourik Jan


On 04/02/2015 12:45 AM, Robin Sheat wrote:
 mourik jan heupink schreef op wo 01-04-2015 om 13:43 [+0200]:

 Trying to create a new site on wheezy, koha-common 3.18.05.1:

 root@data:~# koha-create --create-db --marcflavor unimarc --zebralang 
 Koha requires mpm_itk to be enabled within Apache in order to run.
 Typically this can be enabled with:
 
 Curious. Can you please paste the output of:
 
 sudo /usr/sbin/apache2ctl -v
 
 and
 
 sudo /usr/sbin/apache2ctl -M
 
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] koha-common | mpm-itk on wheezy

2015-04-02 Thread mourik jan heupink
Hi Fridolin,

 Do you have /usr/lib/apache2/mpm-itk ?
Yes we do.

 
 The itk package just changes the symlink : /usr/sbin/apache2 -
 /usr/lib/apache2/mpm-worker/apache2
In our case, the symlink /usr/sbin/apache2 goes to
/usr/lib/apache2/mpm-itk/apache2

Regards,
Mourik Jan
 
 Regards,
 
 Le 01/04/2015 14:03, mourik jan heupink a écrit :
 Hi Mark,

 root@data:/etc/apache2# apt-get install libapache2-mpm-itk
 Reading package lists... Done
 Building dependency tree
 Reading state information... Done
 E: Unable to locate package libapache2-mpm-itk
 root@data:/etc/apache2#

 I guess ubuntu calls it libapache2-mpm-itk, and debian calls it
 apache2-mpm-itk. (because that second package IS installed)


 On 4/1/2015 13:56, Mark Tompsett wrote:
 Greetings,

 Did you check for libapache2-mpm-itk?
 $ sudo apt-get install libapache2-mpm-itk
 $ sudo a2enmod mpm_itk

 GPML,
 Mark Tompsett

 -Original Message- From: mourik jan heupink Sent: Wednesday,
 April 01, 2015 7:43 AM To: koha@lists.katipo.co.nz Subject: [Koha]
 koha-common | mpm-itk on wheezy
 Hi,

 Trying to create a new site on wheezy, koha-common 3.18.05.1:

 root@data:~# koha-create --create-db --marcflavor unimarc --zebralang en
 test

 I get:

 Koha requires mpm_itk to be enabled within Apache in order to run.
 Typically this can be enabled with:

  sudo a2enmod mpm_itk

 root@data:~#  a2enmod mpm_itk
 ERROR: Module mpm_itk does not exist!
 root@data:~# apt-get install apache2-mpm-itk
 Reading package lists... Done
 Building dependency tree
 Reading state information... Done
 apache2-mpm-itk is already the newest version.

 So, it seems I have apache2-mpm-itk installed, however nothing *itk* is
 present under /etc/apache2/mods-available, and I cannot enable it.

 Any ideas?
 ___
 Koha mailing list  http://koha-community.org
 Koha@lists.katipo.co.nz
 http://lists.katipo.co.nz/mailman/listinfo/koha
 ___
 Koha mailing list  http://koha-community.org
 Koha@lists.katipo.co.nz
 http://lists.katipo.co.nz/mailman/listinfo/koha
 
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] koha-common | mpm-itk on wheezy

2015-04-01 Thread mourik jan heupink

Hi Mark,

root@data:/etc/apache2# apt-get install libapache2-mpm-itk
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Unable to locate package libapache2-mpm-itk
root@data:/etc/apache2#

I guess ubuntu calls it libapache2-mpm-itk, and debian calls it 
apache2-mpm-itk. (because that second package IS installed)



On 4/1/2015 13:56, Mark Tompsett wrote:

Greetings,

Did you check for libapache2-mpm-itk?
$ sudo apt-get install libapache2-mpm-itk
$ sudo a2enmod mpm_itk

GPML,
Mark Tompsett

-Original Message- From: mourik jan heupink Sent: Wednesday,
April 01, 2015 7:43 AM To: koha@lists.katipo.co.nz Subject: [Koha]
koha-common | mpm-itk on wheezy
Hi,

Trying to create a new site on wheezy, koha-common 3.18.05.1:

root@data:~# koha-create --create-db --marcflavor unimarc --zebralang en
test

I get:

Koha requires mpm_itk to be enabled within Apache in order to run.
Typically this can be enabled with:

 sudo a2enmod mpm_itk

root@data:~#  a2enmod mpm_itk
ERROR: Module mpm_itk does not exist!
root@data:~# apt-get install apache2-mpm-itk
Reading package lists... Done
Building dependency tree
Reading state information... Done
apache2-mpm-itk is already the newest version.

So, it seems I have apache2-mpm-itk installed, however nothing *itk* is
present under /etc/apache2/mods-available, and I cannot enable it.

Any ideas?
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha

___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


[Koha] koha-common | mpm-itk on wheezy

2015-04-01 Thread mourik jan heupink

Hi,

Trying to create a new site on wheezy, koha-common 3.18.05.1:

root@data:~# koha-create --create-db --marcflavor unimarc --zebralang en 
test


I get:

Koha requires mpm_itk to be enabled within Apache in order to run.
Typically this can be enabled with:

sudo a2enmod mpm_itk

root@data:~#  a2enmod mpm_itk
ERROR: Module mpm_itk does not exist!
root@data:~# apt-get install apache2-mpm-itk
Reading package lists... Done
Building dependency tree
Reading state information... Done
apache2-mpm-itk is already the newest version.

So, it seems I have apache2-mpm-itk installed, however nothing *itk* is 
present under /etc/apache2/mods-available, and I cannot enable it.


Any ideas?
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] Koha 3.18.0 released

2014-12-01 Thread mourik jan heupink - merit

Thanks Robin!

It's appreciated.

On 12/01/2014 02:50 AM, Robin Sheat wrote:

Vinod Kumar Mishra schreef op za 29-11-2014 om 06:29 [+]:

When it will be available for package installation ?


That would be about now.


___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] wheezy apt repo

2014-10-03 Thread mourik jan heupink - merit

Thanks Robin and Uwe!

On 10/03/2014 12:21 AM, Robin Sheat wrote:

mourik jan heupink - merit schreef op do 02-10-2014 om 17:26 [+0200]:

Just to be sure...: koha on wheezy is supported?


 From here:

http://wiki.koha-community.org/wiki/Debian

The Debian squeeze (6.0) and wheezy (7.0) releases are supported.

I really need to make some changes to the naming of things one of these
days, but it has to be done in a way that it doesn't break for people
currently using it.


___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


[Koha] wheezy apt repo

2014-10-02 Thread mourik jan heupink - merit

Hi,

Just to be sure...: koha on wheezy is supported?

As the apt repo looks a bit squeeze-ish:

deb http://debian.koha-community.org/koha squeeze main

I tried 'wheezy' instead of 'squeeze', but that didn't work.

Using the above source list I am able to install koha-common. Is that 
normal the way..? It looks a bit unlogical to me...?


We have a running koha on squeeze, but I'd like to move that install to 
wheezy on kvm - meaning a new install.


Regards,
MJ
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] Should Koha support old versions of Internet Explorer?

2014-10-02 Thread mourik jan heupink - merit

Hi Owen,

We have completely moved over to win7, and have no need for older IE 
support anymore. Most of our users use other browsers anyway: mostly 
firefox  chrome.



- In your use of Koha are you required to use any version of Internet
Explorer and if so what version?

If IE is used, it's mostly recent versions. (IE11)


- In your use of Koha do you work with library patrons who are
required to use any version of Internet Explorer?

Nope.


- In your opinion what should be the minimum supported version of
Internet Explorer?

No idea, others are probably more 'into' browser versions.

Regards,
MJ


I'm not counting votes, but I am interested in hearing everyone's opinions.

Thanks,

   Owen


___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] integrate with active directory

2014-10-01 Thread mourik jan heupink - merit

Hi Mohamed,

I think I answered your question a few days ago:

http://lists.katipo.co.nz/pipermail/koha/2014-September/040933.html

MJ

On 9/28/2014 22:25, Mohamed Fekry Negm wrote:


Hi all i want to making integration between koha and my active
directory , i searched many on web but didn't got links guide me to
LDAP configuration wit koha  , could any body help me to  start that
thank you all

 ___ Koha mailing list
http://koha-community.org Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] active directory + koha

2014-09-29 Thread mourik jan heupink - merit

Hi Mohamed,

This config works here, with samba4 AD:


  ldapserver id=dc2
hostname192.87.y.x/hostname
baseCN=Users,DC=samba,DC=company,DC=com/base
replicate1/replicate
update1/update
auth_by_bind1/auth_by_bind
principal_name%s...@samba.company.com/principal_name
mapping !-- match koha SQL field names to your LDAP 
record field names --
  firstnameis=givenName  /firstname
  surname  is=sn /surname
  address  is=streetAddress  Keizer Karelplein 19/address
  city is=l  Maastricht/city
  zipcode  is=postalCode 6211 TC/zipcode
  branchcode   is=branch MERIT/branchcode
  userid   is=uid   /userid
  password is=userPassword   /password
  emailis=mail   /email
  categorycode is=employeeType   A/categorycode
  phoneis=telephoneNumber/phone
/mapping
  /ldapserver


Unfortunately the only thing that doesn't seem to be implemented is 
multiple dc's - failover. (or am i missing it?)


Hope that helps,
MJ

On 09/29/2014 07:05 AM, Mohamed Fekry Negm wrote:

hi all




thanks for replay




Few questions:

Koha version 3.16

OS Version Ubuntu 14.04

Active Directory Version   Windows Server  2008







Riley Childs

Senior

Charlotte United Christian Academy

Library Services Administrator

IT Services

(704) 497-2086

rileychilds.net

@rowdychildren



From:
Mohamed Fekry Negm

Sent:
‎9/‎28/‎2014 4:41 PM

To:
koha@lists.katipo.co.nz

Subject:
[Koha] active directory + koha






Hi all i want to making integration between koha and my active directory , i 
searched many on web but didn't got links guide me to LDAP configuration wit 
koha  , could any body help me to  start that thank you all








___

Koha mailing list  http://koha-community.org

Koha@lists.katipo.co.nz

http://lists.katipo.co.nz/mailman/listinfo/koha



___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


[Koha] multiple ldap servers (redundancy)

2014-09-03 Thread mourik jan heupink - merit

Hi,

I just found out something by trying, and thought I'd share it on the 
list, as I've never seen it in any of the examples.


We have three samba dc's, and you can configure koha to use all three 
ldap servers, to gain failover. Do it like this:


 ldapserver id=ad
hostnamedc1.my.domain/hostname
hostnamedc2.my.domain/hostname
hostnamedc3.my.domain/hostname
baseCN=Users,DC=samba,DC=my,DC=domain/base
...
 /ldapserver

It seems to work nicely, and all examples only use one single 
hostname. I hope this info will help someone.


Regards,
Mourik Jan
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] difficulties authenticating after samba/openldap - samba4 AD migration

2014-04-05 Thread mourik jan heupink - merit

Hi list  chr...@catalyst.net.nz,

This message is to archive what our problem was:

After making changes to koha-conf.xml, it's not enough to restart 
apache2, you also have to restart memcached. (if you are using it)


After restarting memcached, the config as posted below works beautifully.

Thanks!
MJ


On 04/01/2014 07:42 PM, mourik jan heupink - merit wrote:


Hi all,

We've been running samba3/openldap in combo with koha for years, until 
the time came to upgrade to samba4 AD. Did that last weekend, and 
today I  tried to connect koha (3.12.01, I know, we have to upgrade) 
to the samba4 ldap server.


We're using auth_by_bind, which should be supported by Active 
Directory, checked principle name many times.


However, I can't login, apache logs says:  LDAP Auth rejected : 
(uid=heupink) gets 0 hits. Using tcpflow, I can see that my dc1 
answers 62020: Operation unavailable without authentication.


So, before I start doing bigger things (like updating koha, which has 
always been running fine) I'd like to know if I'm missing something 
obvious? I'm sure many people here are using (native) active directory 
to authenticate to? Any tips..?


Here is my AD samba4 config:

 ldapserver id=dc1
hostnamedc1.my.domain/hostname
baseCN=Users,DC=samba,DC=my,DC=domain/base

replicate1/replicate
update1/update
auth_by_bind1/auth_by_bind

principal_nameCN=%s,CN=Users,DC=samba,DC=my,DC=domain/principal_name

mapping
  firstnameis=givenName  /firstname
  surname  is=sn /surname
  address  is=streetAddress  our address/address
  city is=l  our city/city
  zipcode  is=postalCode our postcode/zipcode
  branchcode   is=branch our_branch/branchcode
  userid   is=uid/userid
  password is=userPassword   /password
  emailis=mail   /email
  categorycode is=employeeType A/categorycode
  phoneis=telephoneNumber/phone
/mapping
  /ldapserver

Regards,
MJ


___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


[Koha] difficulties authenticating after samba/openldap - samba4 AD migration

2014-04-01 Thread mourik jan heupink - merit


Hi all,

We've been running samba3/openldap in combo with koha for years, until 
the time came to upgrade to samba4 AD. Did that last weekend, and today 
I  tried to connect koha (3.12.01, I know, we have to upgrade) to the 
samba4 ldap server.


We're using auth_by_bind, which should be supported by Active Directory, 
checked principle name many times.


However, I can't login, apache logs says:  LDAP Auth rejected : 
(uid=heupink) gets 0 hits. Using tcpflow, I can see that my dc1 answers 
62020: Operation unavailable without authentication.


So, before I start doing bigger things (like updating koha, which has 
always been running fine) I'd like to know if I'm missing something 
obvious? I'm sure many people here are using (native) active directory 
to authenticate to? Any tips..?


Here is my AD samba4 config:

 ldapserver id=dc1
hostnamedc1.my.domain/hostname
baseCN=Users,DC=samba,DC=my,DC=domain/base

replicate1/replicate
update1/update
auth_by_bind1/auth_by_bind

principal_nameCN=%s,CN=Users,DC=samba,DC=my,DC=domain/principal_name

mapping
  firstnameis=givenName  /firstname
  surname  is=sn /surname
  address  is=streetAddress  our address/address
  city is=l  our city/city
  zipcode  is=postalCode our postcode/zipcode
  branchcode   is=branch our_branch/branchcode
  userid   is=uid/userid
  password is=userPassword   /password
  emailis=mail   /email
  categorycode is=employeeType   A/categorycode
  phoneis=telephoneNumber/phone
/mapping
  /ldapserver

Regards,
MJ
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] Koha Upgrade

2013-01-20 Thread mourik jan heupink

Hi!


Is there a guide somewhere ?

I have been searching the wiki and i was not able to find it.

Please someone guide us in the right direction.


A little while ago we have paid the liblibre folks (specifically: Paul 
Poulain) to do this migration job for us. Worked out well.


I guess other support companies could do it for you as well.

Hope that helps,
MJ
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] Koha 3.10.1 not in repository

2013-01-01 Thread mourik jan heupink

Hi all,

On 12/31/2012 03:44 AM, Robin Sheat wrote:

Was away on holiday for a week, but they have been built for 3.8.8 and
3.10.01. Share and enjoy!

Thanks very much for your efforts. Hope you enjoyed your holiday!

BTW: Best wishes for 2013 to everybody here!

Mourik Jan
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] add member from ldap failed

2012-10-08 Thread mourik jan heupink
Please show your ldap configuration from koha-conf.xml. I have ldap
authentication working here, so perhaps I can help.

MJ

On 10/08/2012 02:20 PM, Samuel Desseaux wrote:
 Hi,
 
 I've configured the connexion to our ldap.
 
 I've thsi error
 
 AddMember failed at /usr/share/koha/lib/C4/Auth_with_ldap.pm line 158.
 
 
 What does it mean and what can i do? I've seen in the logs and nothing
 special.
 
 Best regards
 
 samuel
 
 
 
 
 ___
 Koha mailing list  http://koha-community.org
 Koha@lists.katipo.co.nz
 http://lists.katipo.co.nz/mailman/listinfo/koha
 
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] add member from ldap failed

2012-10-08 Thread mourik jan heupink
Seems you have left many settings unconfigured...:

  hostname/hostname
  base/base
  user/user
  pass/pass

You need to enter the details for your ldap server, above.

MJ
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] Error in 'My Tags opac user account

2012-07-27 Thread mourik jan heupink
 Software error:
 C4::Output version 3.02 required--this is only version 3.08.01.002 at 
 /usr/share/koha/opac/cgi-bin/opac/opac-tags.pl line 41.
 BEGIN failed--compilation aborted at 
 /usr/share/koha/opac/cgi-bin/opac/opac-tags.pl line 41.

I think this should be solved in 3.8.3 that just came out.

MJ
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] opaccloud syspref

2012-07-07 Thread mourik jan heupink


On 07/06/2012 12:38 PM, Chris Cormack wrote:
 Interesting when I turn it off I don't see it.

Interesting indeed. I've even tried restarting apache and memcached, no
difference.

Guess we can learn to live with it :-)

MJ
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] opaccloud syspref

2012-07-06 Thread mourik jan heupink
Hi list, Chris,

 OpacBrowser is for the subject cloud
 If you want the Tag cloud not to show you have to turn tags off. With
 TagsEnabled
Setting TagsEnabled to false gets rid of the Tag Cloud link. Thanks Chris.

I have set OpacBrowser to don't allow patrons to browse subject
authorities on OPAC, but the subject cloud link is still present...

Clicking it only shows Note: This feature only available to French
catalogs where ISBD subjects have been populated, and an index built by
separate script.

Would be nice to not show that link, since we're not a French catalog...

MJ
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


[Koha] website

2011-06-26 Thread mourik jan heupink
http://koha-community.org/ seems to be down..?
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] Share Koha-LDAP conf

2011-06-25 Thread mourik jan heupink
Your suggestion works perfectly!

Thank you!

 I'm assuming that auth_by_bind means that koha tries to bind with the
 openldap server using the username and password the user provided.

 This is correct assumption.

 I'm unsure where to configure HOW koha should bind with the ldap
 server... (something like uid=%s,ou=users,dc=blah,dc=blah)

 principal_nameuid=%s,ou=users,dc=blah,dc=blah/principal_name
 should be enough.
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha


Re: [Koha] Share Koha-LDAP conf

2011-06-24 Thread mourik jan heupink
I would also very much like to see an example of a working config with 
an openldap backend, and using the auth-by-bind method.

I'm assuming that auth_by_bind means that koha tries to bind with the 
openldap server using the username and password the user provided.

I'm unsure where to configure HOW koha should bind with the ldap 
server... (something like uid=%s,ou=users,dc=blah,dc=blah)

(principal_name seems to be for active directory..?)

Hopefully someone has a nice working example. :-)

Have a nice weekend!
___
Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
http://lists.katipo.co.nz/mailman/listinfo/koha