We need to upgrade our DSpace installations.
Our LDAP server does not permit anonymous searching so in the config
anonymous search is set to false. There is a problem!

There is, I think, a conflict in the new LDAPAuthentication.java
Other postings by several people seem to have problems that stem from
this.

The earlier version of DSpace used the class SpeakerToLDAP. Within this
class a  method ldapAuthenticate connected to the ldap server and also
collected information such as email, telephone, etc then returned true
or false depending if connection worked.

The new LDAPAuthentication.java has the user information collection in a
different method called getDNOfUser. This routine is only called if
anonymous is set to true, in which case none of the ldap variables can
be picked up by DSpace.

In previous DSpace versionsm, when a usertried to login, if the user
name and password "unlocked" the LDAP server which then returned their
data for use in DSpace.

Anonymous search of an LDAP server is not an option for many people
besides its a security/privacy problem.

I think the LDAP Authenticate Code needs instead to move the code that
collects ldap data, into the ldapAuthenticate method.

I am trying to do this now - if you have any commects suggestion I would
appreciate it.



------------------------------------------------------------------------------
LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint
2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes
Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13. 
http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk
_______________________________________________
DSpace-tech mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-tech
List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette

Reply via email to