On Fri, Dec 03, 2010 at 10:46:13AM +0200, Edgaras wrote: > i have configured LDAP on DSpace. It's working nicely but i miss one > feature - dspace is not updating user information if admin change it after > users first login. > > E.g. > User logs in: > username: test > password: testword > Telephone number: 123456789 > > Then telephoneNumber is changed to 987654321, user logs in again but > contact telephone remains same. > > Do I miss something?
No; that is the way it works. DSpace will go get the user's telephoneNumber attribute from the directory when the user is created, but it does not check for updates. IMHO this is the wrong approach. If we want to pass through directory object attributes such as telephoneNumber, we should fetch them from the directory every time we want them. The value maintained by DSpace should be missing or null or whatever would indicate that we don't store it for this user. If the user or an administrator fills in one of these fields locally in DSpace then it should prevail: we show a local value if it exists, otherwise ask the directory if there is one, otherwise show nothing. Perhaps there should be a time-limited cache for directory object attributes, although directory servers are usually quite fast and do their own caching arguably better than we could. The scheme should not be confied to LDAP; it should be general enough to e.g. accept identity attributes from Shibboleth. That is: it should be part of the authentication framework so that any suitable authentication source may contribute. -- Mark H. Wood, Lead System Programmer [email protected] Balance your desire for bells and whistles with the reality that only a little more than 2 percent of world population has broadband. -- Ledford and Tyler, _Google Analytics 2.0_
pgpZEMhCOAah9.pgp
Description: PGP signature
------------------------------------------------------------------------------ Increase Visibility of Your 3D Game App & Earn a Chance To Win $500! Tap into the largest installed PC base & get more eyes on your game by optimizing for Intel(R) Graphics Technology. Get started today with the Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs. http://p.sf.net/sfu/intelisp-dev2dev
_______________________________________________ DSpace-tech mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/dspace-tech
