<html> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"> </head> <body bgcolor="#FFFFFF" text="#000000"> Hi there, is there any tips you may share? Cheers, A. <div class="moz-forward-container">-------- Forwarded Message -------- <table class="moz-email-headers-table" border="0" cellpadding="0" cellspacing="0"> <tbody> <tr> <th align="RIGHT" nowrap="nowrap" valign="BASELINE">Subject: </th> <td>Re: [librecat-dev] LDAP, Logging and more</td> </tr> <tr> <th align="RIGHT" nowrap="nowrap" valign="BASELINE">Date: </th> <td>Tue, 9 Aug 2016 12:14:14 +0200</td> </tr> <tr> <th align="RIGHT" nowrap="nowrap" valign="BASELINE">From: </th> <td>Arash Samadi <a class="moz-txt-link-rfc2396E" href="mailto:samadi@sub.uni-goettingen.de"><samadi@sub.uni-goettingen.de></a></td> </tr> <tr> <th align="RIGHT" nowrap="nowrap" valign="BASELINE">Reply-To: </th> <td><a class="moz-txt-link-abbreviated" href="mailto:samadi@sub.uni-goettingen.de">samadi@sub.uni-goettingen.de</a></td> </tr> <tr> <th align="RIGHT" nowrap="nowrap" valign="BASELINE">Organization: </th> <td>State- and University's Library, Gerog-August University of Goettingen</td> </tr> <tr> <th align="RIGHT" nowrap="nowrap" valign="BASELINE">To: </th> <td><a class="moz-txt-link-abbreviated" href="mailto:librecat-dev@lists.uni-bielefeld.de">librecat-dev@lists.uni-bielefeld.de</a> <a class="moz-txt-link-rfc2396E" href="mailto:librecat-dev@lists.uni-bielefeld.de"><librecat-dev@lists.uni-bielefeld.de></a>, <a class="moz-txt-link-abbreviated" href="mailto:Nicolas.Franck@UGent.be">Nicolas.Franck@UGent.be</a></td> </tr> <tr> <th align="RIGHT" nowrap="nowrap" valign="BASELINE">CC: </th> <td>Patrick Hochstenbach <a class="moz-txt-link-rfc2396E" href="mailto:Patrick.Hochstenbach@UGent.be"><Patrick.Hochstenbach@UGent.be></a></td> </tr> </tbody> </table> <meta http-equiv="content-type" content="text/html; charset=utf-8"> Hi, allright, thank you for the feed back. Here is what I have done: 1. I've changed the settings in log4perl.conf like this: <tt>l</tt><tt>og4perl.category.LibreCat::Auth=DEBUG,LOGFILE</tt><tt> </tt><tt>log4perl.category.LibreCat::FileStore=DEBUG,LOGFILE</tt><tt> </tt><tt>log4perl.category.LibreCat::Worker=DEBUG,LOGFILE</tt><tt> </tt><tt> </tt><tt>log4perl.appender.LOGFILE=Log::Log4perl::Appender::File</tt><tt> </tt><tt>log4perl.appender.LOGFILE.filename=/srv/LibreCat/logs/librecat.log</tt><tt> </tt><tt>log4perl.appender.LOGFILE.mode=append</tt><tt> </tt><tt>log4perl.appender.LOGFILE.layout=PatternLayout</tt><tt> </tt><tt>log4perl.appender.LOGFILE.layout.ConversionPattern=%d [%P] - %c[%L] : %m%n</tt><tt> </tt><tt> </tt> Still, the only log what I get is something after the successful login and nothing more! I would like to know how to change that? 2. I thought of something, shouldn't I add the LDAP authentication to the 'uers:' section in 'catmandu.local.yml' as well? And if so, how exactly should I do that? Is something like this correct? <tt>- host: ug-sub-s1.sub.uni-goettingen.de</tt><tt> </tt><tt> username_attr: cn</tt> 3. I've tried using 'bin/authentication_admin.pl' as well. I only get one usage syntax message: usage: bin/authentication_admin.pl [--package=MODULE] [[--param=...]] login at bin/authentication_admin.pl line 44. So, I've tried something like this: $ bin/authentication_admin.pl --package=LibreCat::Auth::LDAP --param host=ug-sub-s1.sub.uni-goettingen.de base=**** password=*** auth_base=cn=%s,ou=Benutzer,dc=sub,dc=uni-goettingen,dc=de Well, I get another error saying the auth_base is missing! Any ideas? Cheers, A. PS> BTW, in new build you've removed 'Catmandu::CrossRef'. As per Péter's suggestion we can remove it from 'cpanfile', but don't we need it anymore? <div class="moz-cite-prefix">On 09.08.2016 08:30, Patrick Hochstenbach wrote: </div> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <style type="text/css" style="display:none">#mid_1470724258639_58826_UGent_be p { margin-top: 0px; margin-bottom: 0px; } </style> Still in vacation here. But you can use a command line tool to test the authentication setup: $ bin/authentication_admin.pl There are very many options when doing a LDAP authentication. Every institution can have local variations. If the code doesn't provide a stack trace, then the code is ok, but the authentication handshakes don't provide the desired results. With the authentical_admin you have at least a Perl program you can run through a debugger and see which step doesn't provide the desired result. We based the code on what Bielefeld or Ghent University does with LDAP (both use a somewhat different strategy). Cheers and till later Patrick <div style="color: rgb(33, 33, 33);"> <hr tabindex="-1" style="display:inline-block; width:98%"> <div id="divRplyFwdMsg" dir="ltr">From: <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:librecat-dev-bounces@lists.uni-bielefeld.de">librecat-dev-bounces@lists.uni-bielefeld.de</a> <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:librecat-dev-bounces@lists.uni-bielefeld.de"><librecat-dev-bounces@lists.uni-bielefeld.de></a> on behalf of Arash Samadi <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:samadi@sub.uni-goettingen.de"><samadi@sub.uni-goettingen.de></a> Sent: Monday, August 8, 2016 2:16 PM To: <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:librecat-dev@lists.uni-bielefeld.de">librecat-dev@lists.uni-bielefeld.de</a> Subject: [librecat-dev] LDAP <div> </div> </div> <div> Hi there, hope you had a great vacation or maybe you still enjoying it ;) Anyways, I replaced the info based on our own LDP-Configuration in 'catmandu.local.yml', but probably missing something, because it is not working. I would really appreciate your input: - package: LibreCat::Auth::LDAP options: host: 'ug-sub-s1.sub.uni-goettingen.de' base: '************' password: '****************' auth_base: 'cn=%s,ou=Benutzer,dc=sub,dc=uni-goettingen,dc=de' search_filter: '(cn=%s)' search_base: 'OU=Benutzer,DC=sub,DC=uni-goettingen,DC=de' search_attr: 'cn' Cheers, A. <div class="moz-signature">-- <div id="Signiture" style="font-size:11pt"> Arash Samadi Digitale Biblothek, Bibliotheksysteme (BIS) Georg-August-Universität Göttingen Niedersächsische Staats- und Universitätsbibliothek D-37073 Göttingen Platz der Göttinger Sieben 1 (Zentralbibliothek, LRC, Raum 2.19) Tel: +49 39-20726 m@il: <a moz-do-not-send="true" href="mailto:samadi@sub.uni-goettingen.de">samadi@sub.uni-goettingen.de</a> www: <a moz-do-not-send="true" href="http://www.sub.uni-goettingen.de">http://www.sub.uni-goettingen.de</a> </div> </div> </div> </div> <div class="moz-signature">-- <div id="Signiture" style="font-size: 11pt;"> Arash Samadi Digitale Biblothek, Bibliotheksysteme (BIS) Georg-August-Universität Göttingen Niedersächsische Staats- und Universitätsbibliothek D-37073 Göttingen Platz der Göttinger Sieben 1 (Zentralbibliothek, LRC, Raum 2.19) Tel: +49 39-20726 m@il: <a moz-do-not-send="true" href="mailto:samadi@sub.uni-goettingen.de">samadi@sub.uni-goettingen.de</a> www: <a moz-do-not-send="true" href="http://www.sub.uni-goettingen.de">http://www.sub.uni-goettingen.de</a> </div> </div> </div> </body> </html>