DSpace 1.7.0 cannot search LDAP's subtree (OU) on openldap
----------------------------------------------------------
Key: DS-835
URL: https://jira.duraspace.org/browse/DS-835
Project: DSpace
Issue Type: Bug
Affects Versions: 1.7.0
Environment: Ubuntu Server Ubuntu 10.04.2 LTS, slapd 2.4.21 using
ldaps, Tomcat 6.0.24-2ubuntu1.6
Reporter: Daniel Ettore
Priority: Blocker
DSpace cannot search on ldap's subtree (OUs).
My dspace.cfg - ldap is:
ldap.enable = true
ldap.provider_url = ldaps://IPADDRESS:636/
ldap.id_field = uid
ldap.object_context = ou=users,ou=users,dc=company,dc=br
ldap.search_context = ou=users,ou=users,dc=company,dc=br # (we have others OU
under this, exemple: ou=student,ou=users,ou=users,dc=company,dc=br -
ou=abc,ou=users,dc=company,dc=br,ou=br and others)
ldap.email_field = mail
ldap.surname_field = sn
ldap.givenname_field = givenName
#ldap.phone_field = telephoneNumber
webui.ldap.autoregister = true
ldap.search_scope = 2
ldap.search.user = uid=read-only,ou=users,dc=company,dc=br
ldap.search.password = password
plugin.sequence.org.dspace.authenticate.AuthenticationMethod = \
org.dspace.authenticate.LDAPHierarchicalAuthentication ,\
org.dspace.authenticate.PasswordAuthentication
Log from LDAP
Mar 3 15:38:16 ldap slapd[3541]: conn=1772 fd=19 ACCEPT from
IP=IPADDRESS:35681 (IP=0.0.0.0:636)
Mar 3 15:38:16 ldap slapd[3541]: conn=1772 fd=19 TLS established tls_ssf=128
ssf=128
Mar 3 15:38:16 ldap slapd[3541]: conn=1772 op=0 BIND
dn="uid=read-only,ou=users,dc=company,dc=br" method=128
Mar 3 15:38:16 ldap slapd[3541]: conn=1772 op=0 BIND
dn="uid=read-only,ou=users,dc=company,dc=br" mech=SIMPLE ssf=0
Mar 3 15:38:16 ldap slapd[3541]: conn=1772 op=0 RESULT tag=97 err=0 text=
Mar 3 15:38:16 ldap slapd[3541]: conn=1772 op=1 SRCH
base="ou=users,ou=users,dc=company,dc=br" scope=2 deref=3
filter="(&(uid=LOGIN))" ---> at this point, the user LOGIN is on
ou=student,ou=users,ou=users,dc=company,dc=br
Mar 3 15:38:16 ldap slapd[3541]: conn=1772 op=1 SEARCH RESULT tag=101 err=32
nentries=0 text=
Mar 3 15:38:16 ldap slapd[3541]: conn=1772 op=2 UNBIND
Mar 3 15:38:16 ldap slapd[3541]: conn=1772 fd=19 closed
Mar 3 15:38:16 ldap slapd[3541]: conn=1771 op=1 UNBIND
Mar 3 15:38:16 ldap slapd[3541]: conn=1771 fd=18 closed
Log from DSpace:
2011-03-03 16:47:50,078 INFO
org.dspace.authenticate.LDAPHierarchicalAuthentication @
anonymous:session_id=8B6701643D44F55673C0F04B07C733E7:ip_addr=200.136.207.231:auth:attempting
trivial auth of user=LOGIN
2011-03-03 16:47:50,165 WARN
org.dspace.authenticate.LDAPHierarchicalAuthentication @
anonymous:session_id=8B6701643D44F55673C0F04B07C733E7:ip_addr=200.136.207.231:ldap_attribute_lookup:type=failed_search
javax.naming.NameNotFoundException\colon; [LDAP\colon; error code 32 - No Such
Object]; remaining name 'ou=users,ou=users,dc=company,dc=br'
2011-03-03 16:47:50,166 INFO
org.dspace.authenticate.LDAPHierarchicalAuthentication @
anonymous:session_id=8B6701643D44F55673C0F04B07C733E7:ip_addr=200.136.207.231:failed_login:no
DN found for user LOGIN
2011-03-03 16:47:50,166 INFO org.dspace.authenticate.PasswordAuthentication @
anonymous:session_id=8B6701643D44F55673C0F04B07C733E7:ip_addr=200.136.207.231:authenticate:attempting
password auth of user=LOGIN
2011-03-03 16:47:50,167 INFO org.dspace.app.webui.servlet.PasswordServlet @
anonymous:session_id=8B6701643D44F55673C0F04B07C733E7:ip_addr=200.136.207.231:failed_login:email=LOGIN,
result=2
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.duraspace.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
------------------------------------------------------------------------------
Free Software Download: Index, Search & Analyze Logs and other IT data in
Real-Time with Splunk. Collect, index and harness all the fast moving IT data
generated by your applications, servers and devices whether physical, virtual
or in the cloud. Deliver compliance at lower cost and gain new business
insights. http://p.sf.net/sfu/splunk-dev2dev
_______________________________________________
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel
