On Thu, Jul 08, 2021 at 03:03:56AM -0700, Erza Erzin wrote: > i'm using DSpace 6 & OpenLDAP. > OpenLDAP is used by several systems. > i want to restrict access to my systems using filter by OpenLDAP user > attributes or by OpenLDAP group membership. > without filter ldap authentication in DSpace is successful. > > i have a group cn=system.regulations,ou=esup,ou=groups,dc=*,dc=*,dc=* > and every user in this group has the attribute > memberof=cn=system.regulations,ou=esup,ou=groups,dc=*,dc=*,dc=* > i want to successfully authenticate at DSpace only these OpenLDAP users. > > i'm failing to specify filters. > i tried to specify user filter in the ldap URL, in the search context and > even in the id_field like this: > authentication-ldap.id_field = sn=Batpenoff)(cn > just to test the filter, but failed escaping opening and closing brackets > > in the OpenLDAP log i also see that DSpace uses default filter > (objectclass=*) > but it seems hardcoded.
I don't see a way to set a custom filter. The filter will always be an equality comparison between the configured 'authentication-ldap.id_field' and the entered username. https://github.com/DSpace/DSpace/blob/b574fb141a9424d3d0776647b0fcba01173fd837/dspace-api/src/main/java/org/dspace/authenticate/LDAPAuthentication.java#L517 -- Mark H. Wood Lead Technology Analyst University Library Indiana University - Purdue University Indianapolis 755 W. Michigan Street Indianapolis, IN 46202 317-274-0749 www.ulib.iupui.edu -- All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx --- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/YOcgQuOfLv1UpzaM%40IUPUI.Edu.
signature.asc
Description: PGP signature
