Re: [dspace-tech] DSpace 5.X: Switching auth method from LDAP to Shibboleth
Hello Evelthon, Have you thought about scripting a bulk modification of the users netid? ( [dspace]/bin/dspace user --modify -h ). On Tuesday, February 14, 2023 at 9:21:55 AM UTC+3 Evelthon Prodromou wrote: > Hello Mark, > Thank you for your reply. > > eduPersonPrincipalName is close but not exactly the same. Will have to > review my options. > > Evelthon > > On Friday, February 10, 2023 at 3:24:41 PM UTC+2 Mark H. Wood wrote: > >> On Fri, Feb 10, 2023 at 03:06:53AM -0800, Evelthon Prodromou wrote: >> > Shibboleth SP is configured properly and attributes are released. >> > >> > The problem is with Epersons that were previously created with LDAP >> > authentication. When the same user attempts to authenticate via >> Shibboleth >> > a failure occurs and the following error is logged: >> > >> > ERROR org.dspace.authenticate.ShibAuthentication @ The identified >> EPerson >> > based upon Shibboleth email header, 'mail'='us...@domain.com', is >> locked to >> > another netid: 'a_username'. This might be a possible hacking attempt >> to >> > steal another >> > users credentials. If the user's netid has changed you will need to >> > manually change it to the correct value or unset it in the database. >> > >> > What is the proper way for Identity Scheme Migration (LDAP to >> Shibboleth)? >> >> I'm only guessing here, but it appears that the Shibboleth attribute >> that you are using for netid has different values for the same account >> than the LDAP attribute that you have been using. Does your IDP offer >> another attribute which tracks the LDAP service's attribute? >> >> -- >> Mark H. Wood >> Lead Technology Analyst >> >> University Library >> Indiana University - Purdue University Indianapolis >> 755 W. Michigan Street >> Indianapolis, IN 46202 >> 317-274-0749 <(317)%20274-0749> >> www.ulib.iupui.edu >> > -- All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx --- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to dspace-tech+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/ac96c977-1568-4900-a62c-7b905e091870n%40googlegroups.com.
Re: [dspace-tech] DSpace 5.X: Switching auth method from LDAP to Shibboleth
Hello Mark, Thank you for your reply. eduPersonPrincipalName is close but not exactly the same. Will have to review my options. Evelthon On Friday, February 10, 2023 at 3:24:41 PM UTC+2 Mark H. Wood wrote: > On Fri, Feb 10, 2023 at 03:06:53AM -0800, Evelthon Prodromou wrote: > > Shibboleth SP is configured properly and attributes are released. > > > > The problem is with Epersons that were previously created with LDAP > > authentication. When the same user attempts to authenticate via > Shibboleth > > a failure occurs and the following error is logged: > > > > ERROR org.dspace.authenticate.ShibAuthentication @ The identified > EPerson > > based upon Shibboleth email header, 'mail'='us...@domain.com', is > locked to > > another netid: 'a_username'. This might be a possible hacking attempt to > > steal another > > users credentials. If the user's netid has changed you will need to > > manually change it to the correct value or unset it in the database. > > > > What is the proper way for Identity Scheme Migration (LDAP to > Shibboleth)? > > I'm only guessing here, but it appears that the Shibboleth attribute > that you are using for netid has different values for the same account > than the LDAP attribute that you have been using. Does your IDP offer > another attribute which tracks the LDAP service's attribute? > > -- > Mark H. Wood > Lead Technology Analyst > > University Library > Indiana University - Purdue University Indianapolis > 755 W. Michigan Street > Indianapolis, IN 46202 > 317-274-0749 <(317)%20274-0749> > www.ulib.iupui.edu > -- All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx --- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to dspace-tech+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/ae2c10f0-0e41-4655-9ebf-97fc79614998n%40googlegroups.com.
[dspace-tech] Re: DSPACE 7.4 Upload failed
Hi Jan, Please use our "Troubleshoot an error" guide to try to locate the underlying error message: https://wiki.lyrasis.org/display/DSPACE/Troubleshoot+an+error#Troubleshootanerror-DSpace7.x(orabove) The "Upload failed" announcement is just a user-facing notice, and it doesn't tell us what the core problem may be. So, you should look for more specific error messages on either the frontend or backend by following the troubleshooting guide. Once you find the detailed error, if you cannot figure out a solution, you can send it this email list and someone here may be able to help. Tim On Monday, February 13, 2023 at 3:43:47 AM UTC-6 jan.b...@gmail.com wrote: > Hello, > I am currently testing managing collections in DSpace 7.4. When I try to > upload a new file (New -> Item within some collection), it crashes with > "Upload failed" announcement. > Tested in several browsers. > Any suggestion for this will be useful. > Thank you! > Jan > -- All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx --- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to dspace-tech+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/6ea6bd74-0555-42e8-bf16-0e4c4960a54dn%40googlegroups.com.
[dspace-tech] Re: Dspace 7.4 bad labeled item no restricted
if I see network debug in my browser , i see the following "org.springframework.data.rest.webmvc.ResourceNotFoundException: EntityRepresentationModel not found!\n\tat org.dspace.app.rest.repository.BitstreamRestRepository.findOne(BitstreamRestRepository.java:95)\n\tat org.dspace.app.rest.repository.BitstreamRestRepository.findOne(BitstreamRestRepository.java:55)\n\tat org.dspace.app.rest.repository.BitstreamRestRepository$$FastClassBySpringCGLIB$$aa11dbb2.invoke()\n\tat org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:218)\n\tat org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:793)\n\tat org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)\n\tat org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:763)\n\tat org.springframework.security.access.intercept.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:61)\n\tat org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186)\n\tat org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:763)\n\tat org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:708)\n\tat org.dspace.app.rest.repository.BitstreamRestRepository$$EnhancerBySpringCGLIB$$2514bae2.findOne()\n\tat org.dspace.app.rest.utils.Utils.findBaseObjectRest(Utils.java:1040)\n\tat org.dspace.app.rest.utils.Utils.getBaseObjectRestFromUri(Utils.java:989)\n\tat org.dspace.app.rest.repository.AuthorizationRestRepository.findAuthorizationsForUri(AuthorizationRestRepository.java:239)\n\tat org.dspace.app.rest.repository.AuthorizationRestRepository.findByObject(AuthorizationRestRepository.java:168)\n\tat org.dspace.app.rest.repository.AuthorizationRestRepository$$FastClassBySpringCGLIB$$63a754de.invoke()\n\tat org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:218)\n\tat org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:793)\n\tat org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)\n\tat org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:763)\n\tat org.springframework.security.access.intercept.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:61)\n\tat org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186)\n\tat org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:763)\n\tat org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:708)\n\tat org.dspace.app.rest.repository.AuthorizationRestRepository$$EnhancerBySpringCGLIB$$594441e6.findByObject()\n\tat jdk.internal.reflect.GeneratedMethodAccessor273.invoke(Unknown Source)\n\tat java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)\n\tat java.base/java.lang.reflect.Method.invoke(Method.java:566)\n\tat org.springframework.util.ReflectionUtils.invokeMethod(ReflectionUtils.java:282)\n\tat org.dspace.app.rest.utils.RestRepositoryUtils.invokeQueryMethod(RestRepositoryUtils.java:176)\n\tat org.dspace.app.rest.utils.RestRepositoryUtils.executeQueryMethod(RestRepositoryUtils.java:159)\n\tat org.dspace.app.rest.RestResourceController.executeSearchMethods(RestResourceController.java:999)\n\tat jdk.internal.reflect.GeneratedMethodAccessor271.invoke(Unknown Source)\n\tat java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)\n\tat java.base/java.lang.reflect.Method.invoke(Method.java:566)\n\tat org.springframework.web.method.support.InvocableHandlerMethod.doInvoke(InvocableHandlerMethod.java:205)\n\tat org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:150)\n\tat org.springframework.web.servlet.mvc.method.annotation.ServletInvocableHandlerMethod.invokeAndHandle(ServletInvocableHandlerMethod.java:117)\n\tat org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.invokeHandlerMethod(RequestMappingHandlerAdapter.java:895)\n\tat org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.handleInternal(RequestMappingHandlerAdapter.java:808)\n\tat org.springframework.web.servlet.mvc.method.AbstractHandlerMethodAdapter.handle(AbstractHandlerMethodAdapter.java:87)\n\tat org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:1067)\n\tat org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:963)\n\tat
[dspace-tech] Dspace 7.4 bad labeled item no restricted
HI, This document was uploaded many days ago, before migration fron 6.4 to 7.4 https://repository.urosario.edu.co/items/338d50a0-db95-41f0-92cf-9dcab7c6d9ed. Although the document is publicly accessible, it appears as restricted I already checked the database and I didn't find any problem, can you help me? Thanks in advance, Humberto -- All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx --- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to dspace-tech+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/e844e079-4580-40fd-9cf3-96e0a325e478n%40googlegroups.com.
[dspace-tech] DSPACE 7.4 Upload failed
Hello, I am currently testing managing collections in DSpace 7.4. When I try to upload a new file (New -> Item within some collection), it crashes with "Upload failed" announcement. Tested in several browsers. Any suggestion for this will be useful. Thank you! Jan -- All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx --- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to dspace-tech+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/9ff50ebc-d4f4-4a22-83c5-fe14caa58fa9n%40googlegroups.com.
