Hello!

During the configuration of the LDAP Authentication for GeoServer we ran into the problem, that authentication works but only for users in the same subtree in the LDAP, but not for other users.

The user tree in LDAP looks like this:

cn=users,dc=company,dc=en

Below this there are further subtrees for organizational units:

cn=department-a,cn=users,dc=company,dc=en
cn=department-b,cn=users,dc=company,dc=en
cn=department-c,cn=users,dc=company,dc=en

User accounts are created below the organizational units and are therefore not in the same subtree:

cn=user01,cn=department-a,cn=users,dc=company,dc=en
...
cn=user99,cn=department-c,cn=users,dc=company,dc=de


There is also a subtree for technical users:

cn=technical-services,cn=users,dc=company,dc=en

with corresponding accounts like this:

cn=service-x,cn=technical-services,cn=users,dc=company,dc=en

Technical accounts have read access to users and groups in LDAP but no other rights.

How must the GeoServer be configured in this constellation in order to be able to carry out user authentication via LDAP?

Best regards,
Mathias Gröbe

--
---------------------------------------------
Aufwind durch Wissen!
Web-Seminare und Online-Schulungen
bei der www.foss-academy.com
---------------------------------------------

WhereGroup GmbH
Bundesallee 23
10717 Berlin
Germany

Tel: +49 (0) 30 / 51 30 278 - 81
Fax: +49 (0) 30 / 51 30 278 - 11

mathias.gro...@wheregroup.com
www.wheregroup.com

Geschäftsführer:
Olaf Knopp, Peter Stamm
Amtsgericht Bonn, HRB 9885
-----------------------------------


_______________________________________________
Geoserver-users mailing list

Please make sure you read the following two resources before posting to this 
list:
- Earning your support instead of buying it, but Ian Turton: 
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines: 
http://geoserver.org/comm/userlist-guidelines.html

If you want to request a feature or an improvement, also see this: 
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer


Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Reply via email to