[sage-support] Re: Filter for LDAP login

2015-07-31 Thread Jeff Taylor
After much debugging, it turns out the LDAP bind account I was given didn't have the ability to read fields other than the uid. I was provided with another account and the full query filter is now working as intended. Now I'm just down to fine-tuning my filter for the appropriate departments a

[sage-support] Re: Filter for LDAP login

2015-07-31 Thread Jeff Taylor
Ah ok, I see I only have to restart sage itself for the changes to take place... So I've been testing various options, and so far everything seems to prevent a valid login. Perhaps you can help with this? Initially in auth.py, I was trying to modify lines 94-95 like this: query = filte

[sage-support] Re: Filter for LDAP login

2015-07-31 Thread Jeff Taylor
I have to restart the webserver to test each change? That's rather awkward since I don't have direct control of apache on this system. I've been using "python -m py_compile auth.py" to generate the new .pyc file, isn't there some way to force the system to read the new file without a full res

[sage-support] Re: Filter for LDAP login

2015-07-31 Thread Jeff Taylor
Thanks for forwarding my message to the proper group, I'll continue from here. Regarding your reply, this doesn't really answer the question of where I should be looking in the code to make the change correctly. And if this is in fact the right bit of code where users are looked up in LDAP, why

[sage-support] Filter for LDAP login

2015-07-29 Thread Jeff Taylor
We have Sage 6.7 installed and are successfully using LDAP authentication for logins, however we would like to restrict access to a specific department. In our case the filter would be 'department=Math', so the login query would need to be something like (&(uid=username)(department=Math)) I'v