<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
So,<br>
<br>
I sorted this out after seeing this post: <a
href="http://lists.koha.org/pipermail/koha-devel/2008-October/008493.html">http://lists.koha.org/pipermail/koha-devel/2008-October/008493.html</a><br>
<br>
Active Directory users can log in (and their data in the borrowers
table is updated) after replacing<br>
"<br>
<pre> my $cmpmesg = $db->compare( $userldapentry,
attr=>'userpassword', value => $password );
if ($cmpmesg->code != 6) {
warn "LDAP Auth rejected : invalid password for user
'$userid'. " . description($cmpmesg);
return 0;
}
"
with
"
my $user_ldapname = $userldapentry->dn();
my $user_db = Net::LDAP->new( [$prefhost] );
$res = $user_db->bind( $user_ldapname, password => $password );
if ( $res->code ) {
$debug and warn "Bind as user failed". description( $res );
return 0;
"
on line 103 of /usr/share/koha3/lib/C4/Auth_with_ldap.pm
After looking at the rest of the thread, I discovered that this bug was reported in the past and a patch was created in Oct 2008:
<a href="http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=2726">http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=2726</a>
According to this record, "This is controlled by the option auth_by_bind, which, if set, causes
this code to try binding instead of comparing." <a
href="http://bugs.koha.org/cgi-bin/bugzilla3/attachment.cgi?id=494">http://bugs.koha.org/cgi-bin/bugzilla3/attachment.cgi?id=494</a>
Unfortunately, it is not clear to me by looking at this record where this option is set. Is this a patch that is bundled with Koha 3.0.1?
Or has it not been folded into the base code yet? Is there an easy way to tell whether or not bugs like this have been resolved?
I'm all set for now, but if I could configure this in /etc/koha3koha-conf.xml in the future, that'd be good to know.
</pre>
<div class="moz-signature"><span
style="font-size: 12px; font-family: Arial;">
<p>Cheers,</p>
<p>Christopher Curry<br>
Assistant Technical Librarian / Assistant IT Officer</p>
<p>American Philosophical Society<br>
105 South Fifth Street<br>
Philadelphia, PA 19106-3386<br>
Tel. (215) 599-4299</p>
<p><a href="mailto:ccurry@amphilsoc.org">ccurry@amphilsoc.org</a></p>
<p><strong>For technical support, please use <a
href="mailto:helpdesk@amphilsoc.org"><span style="">helpdesk@amphilsoc.org</span></a></strong><br>
Main Library number: (215)440-3400<br>
APS website: <a href="http://www.amphilsoc.org">http://www.amphilsoc.org</a>
</p>
</span>
</div>
<br>
<br>
Christopher Curry wrote:
<blockquote cite="mid:4A144649.6080607@amphilsoc.org" type="cite">
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
<title></title>
Joe,<br>
<br>
Thanks for the quick reply.<br>
<br>
That's good to know, but something is still not working right because I
haven't been able to log in with any of my AD user accounts (whether or
not I have an existing borrower in the Koha database with the same
username). I get this error in the logs:<br>
<br>
opac-user.pl: LDAP Auth rejected : invalid password for user
'[USERNAME]'. LDAP error #16: LDAP_NO_SUCH_ATTRIBUTE, referer:
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://avocado/cgi-bin/koha/opac-user.pl">http://avocado/cgi-bin/koha/opac-user.pl</a><br>
opac-user.pl: # The request referenced an attribute that does not
exist, referer: <a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://avocado/cgi-bin/koha/opac-user.pl">http://avocado/cgi-bin/koha/opac-user.pl</a><br>
<div class="moz-signature"><span
style="font-size: 12px; font-family: Arial;">
<p>Cheers,</p>
<p>Christopher Curry<br>
Assistant Technical Librarian / Assistant IT Officer</p>
<p>American Philosophical Society<br>
105 South Fifth Street<br>
Philadelphia, PA 19106-3386<br>
Tel. (215) 599-4299</p>
<p><a moz-do-not-send="true" href="mailto:ccurry@amphilsoc.org">ccurry@amphilsoc.org</a></p>
<p><strong>For technical support, please use <a
moz-do-not-send="true" href="mailto:helpdesk@amphilsoc.org"><span
style="">helpdesk@amphilsoc.org</span></a></strong><br>
Main Library number: (215)440-3400<br>
APS website: <a moz-do-not-send="true" href="http://www.amphilsoc.org">http://www.amphilsoc.org</a>
</p>
</span>
</div>
<br>
<br>
Joe Atzberger wrote:
<blockquote
cite="mid:235bf14f0905200850ld17d071xcc946b7de5f260e3@mail.gmail.com"
type="cite">Christopher --<br>
<br>
You seem to be expecting Koha to extract the entire LDAP directory at
once. It doesn't. Instead, it updates the user account when they go
to login. So you should try to login as one of the users that isn't
yet in your Koha DB, or that has outdated info. If you want the mass
upload, you should export from LDAP to CSV and use the normal patron
import tool.<br>
<br>
Having some kind of batch LDAP update mode is desirable, but nobody has
sponsored or worked on such functionality.<br>
<br>
-- <br>
Joe Atzberger<br>
LibLime - Open Source Library Solutions<br>
<br>
<br>
<div class="gmail_quote">2009/5/20 Christopher Curry <span
dir="ltr"><<a moz-do-not-send="true"
href="mailto:ccurry@amphilsoc.org">ccurry@amphilsoc.org</a>></span><br>
<blockquote class="gmail_quote"
style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div bgcolor="#ffffff" text="#000000">Hello all,<br>
<br>
I'm trying to set configure Koha to access my Active Directory LDAP
server. I don't get errors when I browse to the catalog, so it seems
that the configuration is being accepted, but my borrowers database has
not been updated. I tried restarting the server (which should cover
restarting apache, as well -- right?). I used the following
documentation: <a moz-do-not-send="true"
href="http://wiki.koha.org/doku.php?id=en:development:ldap"
target="_blank">http://wiki.koha.org/doku.php?id=en:development:ldap</a>.<br>
<br>
My configuration is copied below; the ALL-CAPS areas are of course
replaced with the relevant data.<br>
<br>
Any thoughts?<br>
<br>
I've pasted this into /etc/koha3/koha-conf.xml inside <config>,
inside of <yazgfs>:<br>
<br>
<useldapserver>1</useldapserver><br>
<br>
<!-- LDAP SERVER (optional) --><br>
<ldapserver id="LDAP_IPADDRESS" listenref="LDAP_IPADDRESS"><br>
<hostname>LDAP_IPADDRESS</hostname><br>
<base>CN=USERS_FOLDER_NAME,DC=DOMAIN,DC=TOP_LEVEL_DOMAIN</base><br>
<user>CN=USERNAME,CN=USERS_FOLDER_NAME,DC=DOMAIN,DC=TOP_LEVEL_DOMAIN</user><br>
<pass>PASSWORD</pass><br>
<replicate>1</replicate><br>
<update>1</update><br>
<mapping><br>
<firstname is="givenName"></firstname><br>
<surname is="sn"></surname><br>
<address is="">ADDRESS</address><br>
<city is="">CITY</city><br>
<zipcode is="">19106</zipcode><br>
<branchcode is="">BRANCHCODE</branchcode><br>
<userid is="sAMAccountName"></userid><br>
<password is="userPassword"></password><br>
<categorycode is="">S</categorycode><br>
<email
is=""><a moz-do-not-send="true"
href="mailto:manuscripts@amphilsoc.org" target="_blank">manuscripts@amphilsoc.org</a></email><br>
<phone is="">215-440-3400</phone><br>
</mapping><br>
</ldapserver><br>
<br>
<div><span style="font-size: 12px; font-family: Arial;">
<p>Cheers,</p>
<p>Christopher Curry<br>
Assistant Technical Librarian / Assistant IT Officer</p>
<p>American Philosophical Society<br>
105 South Fifth Street<br>
Philadelphia, PA 19106-3386<br>
Tel. (215) 599-4299</p>
<p><a moz-do-not-send="true" href="mailto:ccurry@amphilsoc.org"
target="_blank">ccurry@amphilsoc.org</a></p>
<p><b>For technical support, please use <a moz-do-not-send="true"
href="mailto:helpdesk@amphilsoc.org" target="_blank"><span>helpdesk@amphilsoc.org</span></a></b><br>
Main Library number: (215)440-3400<br>
APS website: <a moz-do-not-send="true" href="http://www.amphilsoc.org"
target="_blank">http://www.amphilsoc.org</a> </p>
</span> </div>
</div>
<br>
_______________________________________________<br>
Koha mailing list<br>
<a moz-do-not-send="true" href="mailto:Koha@lists.katipo.co.nz">Koha@lists.katipo.co.nz</a><br>
<a moz-do-not-send="true"
href="http://lists.katipo.co.nz/mailman/listinfo/koha" target="_blank">http://lists.katipo.co.nz/mailman/listinfo/koha</a><br>
<br>
</blockquote>
</div>
<br>
</blockquote>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
Koha mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Koha@lists.katipo.co.nz">Koha@lists.katipo.co.nz</a>
<a class="moz-txt-link-freetext" href="http://lists.katipo.co.nz/mailman/listinfo/koha">http://lists.katipo.co.nz/mailman/listinfo/koha</a>
</pre>
</blockquote>
</body>
</html>