<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
Hi,</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
We just upgraded OMERO from 5.0.6 to 5.1.2 at the same time moving to different virtual hardware, and we are having some issues with LDAP accounts.</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
As in the past, our account names are sometimes all uppercase, or all lowercase – but no one uses uppercase to login to anything. The work around has been to use:</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<span style="font-size: medium;">omero.security.password_provider=chainedPasswordProvider431</span></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
and create user names with lowercase and use the omero command line/python script to set the ldap dn. It doesn’t seem that this option is available any more (api docs say it is deprecated).</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
When I do:</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
bin/omero ldap list</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
the the users with “official" uppercase names give an error, others give the dn.</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
The log files give errors such as:</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div><font face="Calibri,sans-serif">1714:2015-06-16 14:52:27,966 INFO [ ome.services.util.ServiceHandler] (l.Server-3) Excp:<span class="Apple-tab-span" style="white-space: pre;">
</span>ome.conditions.ApiUsageException: Cannot find unique user DistinguishedName: found=1</font></div>
<div><font face="Calibri,sans-serif"><br>
</font></div>
<div>Does anyone know of a solution or workaround to this problem? I found some tickets for this issue, but they didn’t seem to be resolved.</div>
<div><font face="Calibri,sans-serif"><br>
</font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
here are the LDAP settings</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<div>omero.ldap.base=DC=sgc,DC=loc</div>
<div>omero.ldap.config=true</div>
<div>omero.ldap.password=*****</div>
<div>omero.ldap.referral=follow</div>
<div>omero.ldap.urls=ldap://directory.*.****</div>
<div>omero.ldap.user_filter=(objectClass=person)</div>
<div>omero.ldap.user_mapping=omeName=sAMAccountName,firstName=givenName,lastName=sn,email=mail</div>
<div>omero.ldap.username=CN=***<span style="font-weight: bold;"> </span>**<span style="font-weight: bold;"> </span>***,OU=Accounts-Infra,OU=AD Infrastructure,DC=sgc,DC=loc</div>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
Thanks</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
Chris</div>
<div><br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<div id="MAC_OUTLOOK_SIGNATURE"></div>
</div>
</body>
</html>