hi i guess there are 2 filters being used. the 1st filter is used when a bind user tries to find the authenticating user and looks like id_field = username. here is no question. i wanted to specify the custom 2nd filter, when the authenticating user tries to authenticate (&(objectclass=inetorgperson)(memberof=***)) instead of (objectclass=*) but there's no option in the gui
will this option be backlogged to be implemented in the future? erza четверг, 8 июля 2021 г. в 21:56:55 UTC+6, Mark H. Wood: > On Thu, Jul 08, 2021 at 03:03:56AM -0700, Erza Erzin wrote: > > i'm using DSpace 6 & OpenLDAP. > > OpenLDAP is used by several systems. > > i want to restrict access to my systems using filter by OpenLDAP user > > attributes or by OpenLDAP group membership. > > without filter ldap authentication in DSpace is successful. > > > > i have a group cn=system.regulations,ou=esup,ou=groups,dc=*,dc=*,dc=* > > and every user in this group has the attribute > > memberof=cn=system.regulations,ou=esup,ou=groups,dc=*,dc=*,dc=* > > i want to successfully authenticate at DSpace only these OpenLDAP users. > > > > i'm failing to specify filters. > > i tried to specify user filter in the ldap URL, in the search context > and > > even in the id_field like this: > > authentication-ldap.id_field = sn=Batpenoff)(cn > > just to test the filter, but failed escaping opening and closing brackets > > > > in the OpenLDAP log i also see that DSpace uses default filter > > (objectclass=*) > > but it seems hardcoded. > > I don't see a way to set a custom filter. The filter will always be > an equality comparison between the configured > 'authentication-ldap.id_field' and the entered username. > > > https://github.com/DSpace/DSpace/blob/b574fb141a9424d3d0776647b0fcba01173fd837/dspace-api/src/main/java/org/dspace/authenticate/LDAPAuthentication.java#L517 > > -- > Mark H. Wood > Lead Technology Analyst > > University Library > Indiana University - Purdue University Indianapolis > 755 W. Michigan Street > Indianapolis, IN 46202 > 317-274-0749 <(317)%20274-0749> > www.ulib.iupui.edu > -- All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx --- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/2db9afa1-b3a9-46b3-8874-b1a9a846303en%40googlegroups.com.
