[ome-users] ldap new_user_group not working with :dn_attribute:

[Aleksandra Tarkowska (Staff)]

Hi Tjelvar

Could you send logs OMERO.server/var/log/Blitz-0.log and OMEROweb.log to let us look what the problem is exactly?

Ola
Software Engineer
Open Microscopy Environment
University of Dundee

On 8 Apr 2016, at 12:50, Tjelvar Olsson (JIC) <Tjelvar.Olsson at jic.ac.uk<mailto:Tjelvar.Olsson at jic.ac.uk>> wrote:

Dear all,

I’m trying to configure OMERO to assign users to specific groups from an LDAP server.

I have gotten to the stage where I can get it to assign the full domain name as the default group the first time a user logs in to OMERO, e.g.

cn=awesome,ou=groups,dc=scicomp,dc=jic,dc=ac,dc=uk

Now I am trying, and failing, to get OMERO to use the common name (cn) of the ldap group as the OMERO group name, e.g. awesome.

However,

When I use :dn_attribute:memberOf instead of :attribute:memberOf as the value of the “new_user_group” the (web) login hangs (on first login) and eventually returns with an “Internal Server Error” page.

Has anyone managed to configure an OMERO server to talk to LDAP using the :dn_attribute:?

Below is the configuration used in the failing case.

$ ./bin/omero config get
omero.db.name=omero
omero.db.pass=secret
omero.db.user=omero_db_user
omero.ldap.base=ou=people,dc=scicomp,dc=jic,dc=ac,dc=uk
omero.ldap.config=true
omero.ldap.group_mapping=name=cn
omero.ldap.new_user_group=:dn_attribute:memberOf
omero.ldap.urls=ldap://192.168.99.100:389
omero.ldap.user_filter=(objectClass=inetOrgPerson)
omero.ldap.user_mapping=omeName=uid,firstName=givenName,lastName=sn,email=mail
omero.web.application_server=wsgi

Kind regards,

Tjelvar
_______________________________________________
ome-users mailing list
ome-users at lists.openmicroscopy.org.uk<mailto:ome-users at lists.openmicroscopy.org.uk>
http://lists.openmicroscopy.org.uk/mailman/listinfo/ome-users


The University of Dundee is a registered Scottish Charity, No: SC015096
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openmicroscopy.org.uk/pipermail/ome-users/attachments/20160408/f8b789af/attachment.html>