[ome-users] Weird LDAP issue - subtree/forest can't auth?

[Jake Carroll]

Hi all.

Just a quick LDAP/auth question.

I’ve got an LDAP schema and hierarchy that seemed to be working quite well with Omero up until we tried to auth somebody who was a sub OU of my OU.

Anyone in the top-level container of the OU can auth perfectly, but people INSIDE that, inside another OU (within my OU) are having problems. Ostensibly, it should work, as they are part of the one larger container - but they happen to be “enclosed” within another LDAP base (within the primary base).

Any ideas why Omero doesn’t like this and what I can do about it in terms of LDAP config within Omero? Does this involve compound filters or is there a way to match multiple bind DN’s or some such?

Thanks, all!

-jc

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openmicroscopy.org.uk/pipermail/ome-users/attachments/20140805/b29a25e4/attachment.html>