Context Navigation

← Previous Ticket
Next Ticket →

Warning: Can't synchronize with repository "(default)" (/home/git/ome.git does not appear to be a Git repository.). Look in the Trac log for more information.

Notice: In order to edit this ticket you need to be either: a Product Owner, The owner or the reporter of the ticket, or, in case of a Task not yet assigned, a team_member"

User Story #1382 (new)

Opened 15 years ago

Last modified 12 years ago

Improve LDAP support — at Version 4

Reported by:	jamoore	Owned by:	jamoore
Priority:	major	Milestone:	OMERO-Beta4.2
Component:	Deployment	Keywords:	n.a.
Cc:	jay_copeland@…, stephen.ogg@…, FCORNELI@…, atarkowska, cxallan	Story Points:	n.a.
Sprint:	n.a.	Importance:	n.a.
Total Remaining Time:	9.0d	Estimated Remaining Time:	n.a.

Description (last modified by jmoore)

See forum thread: http://openmicroscopy.org/community/viewtopic.php?f=5&t=14

Other configuration systems for comparison:

Tasks:

interface for LDAP plugins
configuration- and possibly ice-based implementations
posix and active directory configurations (cf. sonatype above)
multiple server support (chaining) (thread)

References

Referenced by:

← Requirement (#1936): Secure Login and Ldap improvements
References:
→ Task (#2213): Version omero.config in order to detect old LDAP settings ( Owner: jamoore Remaining Time: 0 ) → Task (#6501): Sychronize LDAP changes to OMERO ( Owner: jamoore Remaining Time: 0 ) → Task (#8993): RFE: new_user_group should allow setting permissions ( Owner: jamoore ) → Task (#12604): RFE: make LDAP lookup attributes configurable → Task (#11660): RFE: Don't require ldap/ad users to log in before being allocatable to groups ( Owner: bpindelski ) → Task (#2027): Posix and active directory configurations ( Owner: jamoore Remaining Time: 3 ) → Task (#2028): Periodic LDAP sync rather than on-demand ( Owner: jamoore Remaining Time: 1 ) → Task (#2026): Multiple LDAP server support ( Owner: jamoore Remaining Time: 2 ) → Task (#1772): Modification LDAP to OMERO account ( Owner: atarkowska ) → Task (#8936): LDAP: improve error messages for SSL/TLS → Task (#6703): LDAP: allow root user lookup or disallow guest ( Owner: jamoore Remaining Time: 0 ) → Task (#6851): LDAP: add support for jpegphoto ( Owner: jamoore ) → Task (#4821): LDAP: Improve username case sensitivity support ( Owner: bpindelski ) → Task (#6702): LDAP: Disallow root user lookup ( Owner: jamoore Remaining Time: 0 ) → Task (#1828): LDAP authentication restriction via groups does not work ( Owner: jamoore Remaining Time: 0 ) → Task (#2025): Evaluation and configuration implementation ( Owner: jamoore Remaining Time: 0 ) → Task (#2029): Create interface to allow user-written plugins ( Owner: jamoore Remaining Time: 3 ) → Task (#6502): Complex new_user_group configurations ( Owner: jamoore ) → Task (#6885): Bug: LdapPasswordProvider regression ( Owner: jamoore Remaining Time: 0 ) → Task (#1253): Bug: LDAP password checks throws exception ( Owner: jamoore Remaining Time: 0 Keywords: ldap ) → Task (#1441): Add configuration for Sun's LDAP implementation to handle connection leaks ( Owner: jamoore )

Change History (4)

comment:1 Changed 15 years ago by jmoore

Cc stephen.ogg at imb.a-star.edu.sg FCORNELI@… added; stephen.ogg at imb.a-star.edu.sg FCORNELI at its.jnj.com removed

comment:2 Changed 15 years ago by jmoore

Cc stephen.ogg@… added; stephen.ogg at imb.a-star.edu.sg removed

comment:3 Changed 15 years ago by jmoore

Milestone changed from OMERO-Beta4.1 to OMERO-Beta4.2

comment:4 Changed 14 years ago by jmoore

Cc cxallan added
Description modified (diff)

The liferay integration uses the following parameters:

    ldap.auth.enabled=true
    ldap.auth.required=true

    ldap.users.dn=ou=People,dc=localdomain
    ldap.groups.dn=ou=Groups,dc=localdomain

    ldap.user.mappings=screenName=cn\npassword=userPassword\nemailAddress=mail\nfirstName=givenName\nlastName=sn\njobTitle=title\ngroup=groupMembership
    ldap.user.impl=com.liferay.portal.security.ldap.LDAPUser

    ldap.group.mappings=groupName=cn\ndescription=description\nuser=uniqueMember

    ldap.import.user.search.filter=(objectClass=inetOrgPerson)
    ldap.import.group.search.filter=(objectClass=groupOfUniqueNames)

    ldap.auth.search.filter=(mail=@email_address@)

Note: See TracTickets for help on using tickets. You may also have a look at Agilo extensions to the ticket.

Download in other formats: