<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Hi all.
<div class=""><br class="">
</div>
<div class=""><br class="">
<div>
<blockquote type="cite" class="">
<div class="">On 5 Aug 2014, at 11:29 pm, Josh Moore <<a href="mailto:josh@glencoesoftware.com" class="">josh@glencoesoftware.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class=""><br class="">
On Aug 5, 2014, at 3:22 PM, Aleksandra Tarkowska wrote:<br class="">
<br class="">
<blockquote type="cite" class="">Hi Jake<br class="">
<br class="">
Could you please send an output of:<br class="">
<br class="">
bin/omero config get<br class="">
</blockquote>
</div>
</blockquote>
<div><br class="">
</div>
<div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);" class="">
omero.data.dir=/omero.store</div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);" class="">
omero.db.name=omero_uq_public_db</div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);" class="">
omero.db.pass=********************</div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);" class="">
omero.db.poolsize=50</div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);" class="">
omero.db.user=omero_uq_public_db_user</div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);" class="">
omero.ldap.base=ou=staff,ou=people,o=the university of queensland,c=au</div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);" class="">
omero.ldap.config=true</div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);" class="">
omero.ldap.password=****************</div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);" class="">
omero.ldap.referral=follow</div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);" class="">
omero.ldap.urls=<a href="ldap://ldap.uq.edu.au:389" class="">ldap://ldap.uq.edu.au:389</a></div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);" class="">
omero.ldap.user_filter=(ou=Queensland Brain Institute)</div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);" class="">
omero.ldap.user_mapping=omeName=uid,firstName=givenName,lastName=sn,email=mail</div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);" class="">
omero.ldap.username=uid=qbi_omero,ou=Special,o=The University of Queensland,c=AU</div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);" class="">
omero.search.batch=200</div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);" class="">
omero.search.max_file_size=262144000</div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);" class="">
omero.sessions.timeout=3600000</div>
</div>
<div><br class="">
</div>
<div>So, the full DN to where the people container resides, appears like this:</div>
<div><br class="">
</div>
<blockquote type="cite" class="">
<div class="">
<blockquote type="cite" class=""><br class="">
and examples of top level entry that can authenticate and those inside entries you are having problems?<br class="">
</blockquote>
</div>
</blockquote>
<div><br class="">
</div>
<div>So, a top level entry in the “people” container might be:</div>
<div><br class="">
</div>
<div>
<div>ou=People,ou=Queensland Brain Institute,ou=Deputy Vice-Chancellor Research,ou=Vice-Chancellor,o=The University of Queensland,c=AU</div>
<div class=""><br class="">
</div>
<div class="">The thing is….</div>
</div>
<br class="">
<blockquote type="cite" class="">
<div class=""><br class="">
And one add on question: is this Active Directory?<br class="">
</div>
</blockquote>
<div><br class="">
</div>
<div>Because this *IS* AD based (and we are hooking up to the LDAP semantics of it (because they won’t let us chat native AD to it for security reasons…), we can’t “see” the secondary internal container inside it. All we see is people in the above OU. We don’t
“see” that container and (from what I can see) we can’t traverse into it, because all LDAP sees is a flat bind DN like the ou= string I showed you above.</div>
<div><br class="">
</div>
<div>So - the question is, is there any way around it, or do I need some kind of magical binddn that takes into account sub-containers?</div>
<div><br class="">
</div>
<div>Thanks.</div>
<div><br class="">
</div>
<div>-jc</div>
<br class="">
<blockquote type="cite" class="">
<div class="">~J<br class="">
<br class="">
<br class="">
<blockquote type="cite" class="">Kind regards<br class="">
Ola<br class="">
<br class="">
From: Jake Carroll <<a href="mailto:jake.carroll@uq.edu.au" class="">jake.carroll@uq.edu.au</a><<a href="mailto:jake.carroll@uq.edu.au" class="">mailto:jake.carroll@uq.edu.au</a>>><br class="">
Date: Tue, 5 Aug 2014 11:11:27 +0000<br class="">
To: "<a href="mailto:ome-users@lists.openmicroscopy.org.uk" class="">ome-users@lists.openmicroscopy.org.uk</a><<a href="mailto:ome-users@lists.openmicroscopy.org.uk" class="">mailto:ome-users@lists.openmicroscopy.org.uk</a>>" <<a href="mailto:ome-users@lists.openmicroscopy.org.uk" class="">ome-users@lists.openmicroscopy.org.uk</a><<a href="mailto:ome-users@lists.openmicroscopy.org.uk" class="">mailto:ome-users@lists.openmicroscopy.org.uk</a>>><br class="">
Subject: [ome-users] Weird LDAP issue - subtree/forest can't auth?<br class="">
<br class="">
Hi all.<br class="">
<br class="">
Just a quick LDAP/auth question.<br class="">
<br class="">
I've got an LDAP schema and hierarchy that seemed to be working quite well with Omero up until we tried to auth somebody who was a sub OU of my OU.<br class="">
<br class="">
Anyone in the top-level container of the OU can auth perfectly, but people INSIDE that, inside another OU (within my OU) are having problems. Ostensibly, it should work, as they are part of the one larger container - but they happen to be "enclosed" within
another LDAP base (within the primary base).<br class="">
<br class="">
Any ideas why Omero doesn't like this and what I can do about it in terms of LDAP config within Omero? Does this involve compound filters or is there a way to match multiple bind DN's or some such?<br class="">
<br class="">
Thanks, all!<br class="">
<br class="">
-jc<br class="">
<br class="">
_______________________________________________ ome-users mailing list <a href="mailto:ome-users@lists.openmicroscopy.org.uk" class="">
ome-users@lists.openmicroscopy.org.uk</a><<a href="mailto:ome-users@lists.openmicroscopy.org.uk" class="">mailto:ome-users@lists.openmicroscopy.org.uk</a>>
<a href="http://lists.openmicroscopy.org.uk/mailman/listinfo/ome-users" class="">
http://lists.openmicroscopy.org.uk/mailman/listinfo/ome-users</a><br class="">
The University of Dundee is a registered Scottish Charity, No: SC015096<br class="">
_______________________________________________<br class="">
ome-users mailing list<br class="">
<a href="mailto:ome-users@lists.openmicroscopy.org.uk" class="">ome-users@lists.openmicroscopy.org.uk</a><br class="">
http://lists.openmicroscopy.org.uk/mailman/listinfo/ome-users<br class="">
</blockquote>
<br class="">
</div>
</blockquote>
</div>
<br class="">
<div apple-content-edited="true" class=""><span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px;">----------<br class="">
Jake Carroll --- Information Technology Manager<br class="">
The Queensland Brain Institute, The University of Queensland, Australia<br class="">
E:<span class="Apple-tab-span" style="white-space: pre; "> </span><a href="mailto:jake.carroll@uq.edu.au" class="">jake.carroll@uq.edu.au</a><br class="">
P: <span class="Apple-tab-span" style="white-space: pre; "> </span>+61 7 334 66407<br class="">
M: <span class="Apple-tab-span" style="white-space: pre; "> </span>0402739157<br class="">
<br class="">
"We are shaped by our thoughts, we become what we think. When the mind is pure, joy follows like a shadow that never leaves" - Buddha.</span>
</div>
<br class="">
</div>
</body>
</html>