Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

...

Enabling Hierarchical LDAP Authentication

Info

Please note, that DSpace 3.0 doesn't contain the LDAPHierarchicalAuthentication class anymore. This functionality is now supported by LDAPAuthentication, which uses the same configuration options. See Upgrading From 1.8.x to 3.x for information about upgrading.

If your users are spread out across a hierarchical tree on your LDAP server, you may wish to instead use the Hierarchical LDAP Authentication plugin.

To enable Hierarchical LDAP Authentication, you must ensure the org.dspace.authenticate.LDAPHierarchicalAuthentication class is listed as one of the AuthenticationMethods in the following configuration:

...

Configuration File:

...

[dspace]/config/modules/authentication.cfg

...

Property:

...

plugin.sequence.org.dspace.authenticate.AuthenticationMethod

have DSpace search for the user name in your tree. Here's how it works:

  1. DSpace gets the user name from the login form
  2. DSpace binds to LDAP as an administrative user with right to search in DNs (LDAP may be configured to allow anonymous users to search)
  3. DSpace searches for the user name as within DNs (username is a part of full DN)
  4. DSpace binds with the found full DN and password from login form
  5. DSpace logs user in if LDAP reports successful authentication; refuses login otherwise

...

Example Value:

...

Configuring Hierarchical LDAP Authentication

...