Hi Mihal,
2013/6/20 <[email protected]>
> Hi Mauro,
>
> thank you very much for your answer!
>
> Dne 19.06.2013 20:50, Mauro Bartolomeoli napsal:
>
>
> From my experience it depends on the LDAP server used. I had
>> successfully configured it with OpenLDAP. Which type of server are you
>> using?
>>
>
> I just used the acme-ldap.jar referenced from the tutorial.
> http://docs.geoserver.org/**latest/en/user/security/**
> tutorials/ldap/index.html<http://docs.geoserver.org/latest/en/user/security/tutorials/ldap/index.html>
> I can try the OpenLDAP instead.
Please, try if you can, I used that in the past successfully.
>
> I assume you mean to be logged in into the LDAP, am I right?
Yes, but what I exactly mean is that the Geoserver LDAP module, internally,
does two things:
1) login to the LDAP server with the user credentials to authenticate it
(and this seems to be working for you) and then logs out from the LDAP
server (it only logins to check the user is authenticated)
2) retrieve user groups with an anonymous search, without making a new
login to the LDAP server with user credentials. Many LDAP servers deny the
search to anonymous users and so no groups are retrieved, also if the user
is correctly authenticated
> As in the tutorial:
>
> LDAP:
>
> ou=groups,dc=acme,dc=org
> cn=users,ou=groups,dc=acme,dc=**org
> member: uid=bob,ou=people,dc=acme,dc=**org
> member: uid=alice,ou=people,dc=acme,**dc=org
> cn=admins,ou=groups,dc=acme,**dc=org
> member: uid=bill,ou=people,dc=acme,dc=**org
>
> GeoServer:
>
> Set Group search base to “ou=groups”
> Set Group search filter to “member={0}”
>
>
Ok, I will try to look at the tutorial to see if there are any mistake in
it.
Mauro
--
==
Our support, Your Success! Visit http://opensdi.geo-solutions.it for more
information.
==
Dott. Mauro Bartolomeoli
@mauro_bart
Senior Software Engineer
GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
http://www.geo-solutions.it
http://twitter.com/geosolutions_it
-------------------------------------------------------
------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:
Build for Windows Store.
http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Geoserver-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-users
