[ome-users] Omero 5 + LDAP + Ubuntu - more detail

[Josh Moore]

On Nov 1, 2013, at 5:37 AM, Jake Carroll wrote:

> All,
> 
> A further bit of data.
> 
> 2013-11-01 07:51:11,801 INFO  [        ome.services.util.ServiceHandler]
> (l.Server-2)  Excp:	org.springframework.ldap.InvalidSearchFilterException:
> Missing 'equals'; nested exception is
> javax.naming.directory.InvalidSearchFilterException: Missing 'equals';
> remaining name ''
> 
> Seeing that now. Any ideas?

Base on the config sent off list, e.g.

  omero.ldap.username='uid=abc,...c=au'

omit the quotes. The instructions list them for use on the command-line, but they aren't part of the actual LDAP strings. What counts is what is printed by:

 bin/omero config get

That should _not_ show any quotes for base or username.

Cheers,
~Josh.


> ‹jc
> 
> 
> 
> 
>> ----------------------------------------------------------------------
>> 
>> Message: 1
>> Date: Thu, 31 Oct 2013 20:15:30 +0000
>> From: Jake Carroll <jake.carroll at uq.edu.au>
>> To: "ome-users at lists.openmicroscopy.org.uk"
>> 	<ome-users at lists.openmicroscopy.org.uk>
>> Subject: [ome-users] Omero 5 + LDAP + Ubuntu
>> Message-ID: <CE98F778.2DF12%jake.carroll at uq.edu.au>
>> Content-Type: text/plain; charset="windows-1252"
>> 
>> Hi all,
>> 
>> In the throws of making some LDAP auth work with my 13.10 Ubuntu Omero 5
>> host.
>> 
>> The host itself and Omero service came together very nicely and
>> everything is working well. Just following this guide:
>> 
>> http://www.openmicroscopy.org/site/support/omero5/sysadmins/server-ldap.ht
>> ml
>> 
>> And wondering if there are any gotchas or issues associated with LDAP
>> binding using Ubuntu 13.10/any dependencies you?d expect need to be
>> involved etc.
>> 
>> Also, are there any logs/auth-logs or otherwise which I should look to,
>> to troubleshoot my bind?
>> 
>> Thank you, all!
>> 
>> ?jc
>> 
>> 
>> -------------- next part --------------
>> An HTML attachment was scrubbed...
>> URL: 
>> <http://lists.openmicroscopy.org.uk/pipermail/ome-users/attachments/201310
>> 31/7f2b85cb/attachment-0001.html>
>> 
>> ------------------------------
>> 
>> Message: 2
>> Date: Thu, 31 Oct 2013 21:28:38 +0100
>> From: Josh Moore <josh at glencoesoftware.com>
>> To: Jake Carroll <jake.carroll at uq.edu.au>
>> Cc: "ome-users at lists.openmicroscopy.org.uk"
>> 	<ome-users at lists.openmicroscopy.org.uk>
>> Subject: Re: [ome-users] Omero 5 + LDAP + Ubuntu
>> Message-ID: <2271AB2B-DC26-4BD1-8AEB-27DE4BC8A230 at glencoesoftware.com>
>> Content-Type: text/plain; charset=windows-1252
>> 
>> 
>> On Oct 31, 2013, at 9:15 PM, Jake Carroll wrote:
>> 
>>> Hi all,
>> 
>> Hi Jake,
>> 
>>> In the throws of making some LDAP auth work with my 13.10 Ubuntu Omero
>>> 5 host.
>>> 
>>> The host itself and Omero service came together very nicely and
>>> everything is working well. Just following this guide:
>>> 
>>> 
>>> http://www.openmicroscopy.org/site/support/omero5/sysadmins/server-ldap.h
>>> tml
>>> 
>>> And wondering if there are any gotchas or issues associated with LDAP
>>> binding using Ubuntu 13.10/any dependencies you?d expect need to be
>>> involved etc.
>> 
>> There shouldn't be anything Ubuntu-specific to be aware of since all the
>> LDAP communication is Java-based and platform independent.
>> 
>>> Also, are there any logs/auth-logs or otherwise which I should look to,
>>> to troubleshoot my bind?
>> 
>> Any messages related to LDAP will be in var/log/Blitz-0.log. If you're
>> having any troubles, do send that along.
>> 
>>> Thank you, all!
>>> ?jc
>> 
>> Cheers,
>> ~Josh
>> 
>> ------------------------------
>> 
>> Message: 3
>> Date: Thu, 31 Oct 2013 20:35:14 +0000
>> From: Jake Carroll <jake.carroll at uq.edu.au>
>> To: Josh Moore <josh at glencoesoftware.com>
>> Cc: "ome-users at lists.openmicroscopy.org.uk"
>> 	<ome-users at lists.openmicroscopy.org.uk>
>> Subject: Re: [ome-users] Omero 5 + LDAP + Ubuntu
>> Message-ID: <CE98FBA4.2DF18%jake.carroll at uq.edu.au>
>> Content-Type: text/plain; charset="Windows-1252"
>> 
>> Great!
>> 
>> Thanks Josh. See below.
>> 
>> On 1/11/2013 6:28, "Josh Moore" <josh at glencoesoftware.com> wrote:
>> 
>>> 
>>> On Oct 31, 2013, at 9:15 PM, Jake Carroll wrote:
>>> 
>>>> Hi all,
>>> 
>>> Hi Jake,
>>> 
>>>> In the throws of making some LDAP auth work with my 13.10 Ubuntu Omero
>>>> 5 host.
>>>> 
>>>> The host itself and Omero service came together very nicely and
>>>> everything is working well. Just following this guide:
>>>> 
>>>> 
>>>> http://www.openmicroscopy.org/site/support/omero5/sysadmins/server-ldap.
>>>> h
>>>> tml
>>>> 
>>>> And wondering if there are any gotchas or issues associated with LDAP
>>>> binding using Ubuntu 13.10/any dependencies you?d expect need to be
>>>> involved etc.
>>> 
>>> There shouldn't be anything Ubuntu-specific to be aware of since all the
>>> LDAP communication is Java-based and platform independent.
>> 
>> OK. That?s really nice. All self contained! Cool, and to that end, do I
>> *need* a secure keystore if I do LDAP-secure (SSL to the ldap server) such
>> that I?d need to put a keystore somewhere on the host? Any best practice
>> on where said keystore should be?
>> 
>>> 
>>>> Also, are there any logs/auth-logs or otherwise which I should look to,
>>>> to troubleshoot my bind?
>>> 
>>> Any messages related to LDAP will be in var/log/Blitz-0.log. If you're
>>> having any troubles, do send that along.
>> 
>> I?ll look around now?
>> 
>>> 
>>>> Thank you, all!
>>>> ?jc
>>> 
>>> Cheers,
>>> ~Josh
>>