[ome-users] Weird LDAP issue - subtree/forest can't auth?

[Aleksandra Tarkowska]

Hi Jake

Could you please send an output of:

bin/omero config get

and examples of top level entry that can authenticate and those inside entries you are having problems?

Kind regards
Ola

From: Jake Carroll <jake.carroll at uq.edu.au<mailto:jake.carroll at uq.edu.au>>
Date: Tue, 5 Aug 2014 11:11:27 +0000
To: "ome-users at lists.openmicroscopy.org.uk<mailto:ome-users at lists.openmicroscopy.org.uk>" <ome-users at lists.openmicroscopy.org.uk<mailto:ome-users at lists.openmicroscopy.org.uk>>
Subject: [ome-users] Weird LDAP issue - subtree/forest can't auth?

Hi all.

Just a quick LDAP/auth question.

I've got an LDAP schema and hierarchy that seemed to be working quite well with Omero up until we tried to auth somebody who was a sub OU of my OU.

Anyone in the top-level container of the OU can auth perfectly, but people INSIDE that, inside another OU (within my OU) are having problems. Ostensibly, it should work, as they are part of the one larger container - but they happen to be "enclosed" within another LDAP base (within the primary base).

Any ideas why Omero doesn't like this and what I can do about it in terms of LDAP config within Omero? Does this involve compound filters or is there a way to match multiple bind DN's or some such?

Thanks, all!

-jc

_______________________________________________ ome-users mailing list ome-users at lists.openmicroscopy.org.uk<mailto:ome-users at lists.openmicroscopy.org.uk> http://lists.openmicroscopy.org.uk/mailman/listinfo/ome-users
The University of Dundee is a registered Scottish Charity, No: SC015096
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openmicroscopy.org.uk/pipermail/ome-users/attachments/20140805/ddaa2946/attachment.html>