[GeoNetwork-users] Issue of LDAP authentication - Active Directory

Melanie_Fournier · January 17, 2019, 9:51am

Hi all,

I managed to connect my GeoNetwork to our Active Directory. I changed some
parameters in the config-security.properties file. I managed to get our
groups visible in the GeoNetwork user interface. Unfortunately my users are
not visible and I tried to connect with one user and it failed.

I found a couple of threads in the archives of the mailing list, but I am
not sure how to solve this. Do I have also to make changes in the
config-security-ldap.xml file?

Any ideas?

Thanks,

Melanie

Jose_Garcia1 · January 31, 2019, 7:10am

Hi Melanie

You can enable in the Settings UI (
http://SERVER/geonetwork/srv/eng/admin.console#/settings, in the Catalog
server section the *Log Level* to DEV, that enables DEBUG mode in Spring
Security that should help to diagnose the problem.

Regards,
Jose García

On Thu, Jan 17, 2019 at 11:17 AM Melanie Fournier <melanie@anonymised.com>
wrote:

Hi all,

I managed to connect my GeoNetwork to our Active Directory. I changed some
parameters in the config-security.properties file. I managed to get our
groups visible in the GeoNetwork user interface. Unfortunately my users are
not visible and I tried to connect with one user and it failed.

I found a couple of threads in the archives of the mailing list, but I am
not sure how to solve this. Do I have also to make changes in the
config-security-ldap.xml file?

Any ideas?

Thanks,

Melanie

_______________________________________________
GeoNetwork-users mailing list
GeoNetwork-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-users
GeoNetwork OpenSource is maintained at
http://sourceforge.net/projects/geonetwork

--

*Vriendelijke groeten / Kind regards,Jose García
<http://www.geocat.net/>Veenderweg 136721 WD BennekomThe NetherlandsT: +31
(0)318 416664 <+31318416664> <https://www.facebook.com/geocatbv>
<https://twitter.com/geocat_bv>
<https://plus.google.com/u/1/+GeocatNetbv/posts>Please consider the
environment before printing this email.*

Melanie_Fournier · January 31, 2019, 8:08am

Hi Jose,

We manage to get the users. But I was wondering if it’s normal that the users do not show up in the GeoNetwork, only when they used the platform at least once and become registered users.

Thanks,

Mélanie

De : Jose Garcia <jose.garcia@anonymised.com>
Envoyé : jeudi, 31 janvier 2019 08:11
À : Melanie Fournier <melanie@anonymised.com>
Cc : Devel geonetwork-devel@lists.sourceforge.net <geonetwork-devel@anonymised.comourceforge.net>; geonetwork-users@lists.sourceforge.net
Objet : Re: [GeoNetwork-users] Issue of LDAP authentication - Active Directory

Hi Melanie

You can enable in the Settings UI (http://SERVER/geonetwork/srv/eng/admin.console#/settings, in the Catalog server section the Log Level to DEV, that enables DEBUG mode in Spring Security that should help to diagnose the problem.

Regards,

Jose García

On Thu, Jan 17, 2019 at 11:17 AM Melanie Fournier <melanie@anonymised.com <mailto:melanie@anonymised.com> > wrote:

Hi all,

I managed to connect my GeoNetwork to our Active Directory. I changed some
parameters in the config-security.properties file. I managed to get our
groups visible in the GeoNetwork user interface. Unfortunately my users are
not visible and I tried to connect with one user and it failed.

I found a couple of threads in the archives of the mailing list, but I am
not sure how to solve this. Do I have also to make changes in the
config-security-ldap.xml file?

Any ideas?

Thanks,

Melanie

_______________________________________________
GeoNetwork-users mailing list
GeoNetwork-users@lists.sourceforge.net <mailto:GeoNetwork-users@anonymised.comeforge.net>
https://lists.sourceforge.net/lists/listinfo/geonetwork-users
GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork

--

Vriendelijke groeten / Kind regards,

Jose García

<http://www.geocat.net/>
Veenderweg 13
6721 WD Bennekom
The Netherlands
T: <tel:+31318416664> +31 (0)318 416664

<https://www.facebook.com/geocatbv> <https://twitter.com/geocat_bv> <https://plus.google.com/u/1/+GeocatNetbv/posts>

Please consider the environment before printing this email.

Jose_Garcia1 · January 31, 2019, 3:02pm

Hi Melanie

I think the users are created in the database table once they login in the
system. But there's some configuration to synch the users/groups/etc.
periodically, that should create the users in the GeoNetwork database even
if they haven't login in the application.

See this configuration:
https://github.com/geonetwork/core-geonetwork/blob/master/web/src/main/webapp/WEB-INF/config-security/config-security.properties#L86-L97

About the Registered User profile, seem also possible to retrieve the
groups/profiles from LDAP if that information is available in LDAP:
https://github.com/geonetwork/core-geonetwork/blob/master/web/src/main/webapp/WEB-INF/config-security/config-security.properties#L65-L69

Regards,
Jose García

On Thu, Jan 31, 2019 at 9:08 AM Melanie Fournier <melanie@anonymised.com>
wrote:

Hi Jose,

We manage to get the users. But I was wondering if it’s normal that the
users do not show up in the GeoNetwork, only when they used the platform at
least once and become registered users.

Thanks,

Mélanie

*De :* Jose Garcia <jose.garcia@anonymised.com>
*Envoyé :* jeudi, 31 janvier 2019 08:11
*À :* Melanie Fournier <melanie@anonymised.com>
*Cc :* Devel geonetwork-devel@lists.sourceforge.net <
geonetwork-devel@lists.sourceforge.net>;
geonetwork-users@lists.sourceforge.net
*Objet :* Re: [GeoNetwork-users] Issue of LDAP authentication - Active
Directory

Hi Melanie

You can enable in the Settings UI (
http://SERVER/geonetwork/srv/eng/admin.console#/settings, in the Catalog
server section the *Log Level* to DEV, that enables DEBUG mode in Spring
Security that should help to diagnose the problem.

Regards,

Jose García

On Thu, Jan 17, 2019 at 11:17 AM Melanie Fournier <melanie@anonymised.com>
wrote:

Hi all,

I managed to connect my GeoNetwork to our Active Directory. I changed some
parameters in the config-security.properties file. I managed to get our
groups visible in the GeoNetwork user interface. Unfortunately my users are
not visible and I tried to connect with one user and it failed.

I found a couple of threads in the archives of the mailing list, but I am
not sure how to solve this. Do I have also to make changes in the
config-security-ldap.xml file?

Any ideas?

Thanks,

Melanie

_______________________________________________
GeoNetwork-users mailing list
GeoNetwork-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-users
GeoNetwork OpenSource is maintained at
http://sourceforge.net/projects/geonetwork

--

Vriendelijke groeten / Kind regards,

Jose García

<http://www.geocat.net/>
Veenderweg 13
6721 WD Bennekom
The Netherlands
T: +31 (0)318 416664 <+31318416664>

<https://www.facebook.com/geocatbv> <https://twitter.com/geocat_bv>
<https://plus.google.com/u/1/+GeocatNetbv/posts>

Please consider the environment before printing this email.

--

*Vriendelijke groeten / Kind regards,Jose García
<http://www.geocat.net/>Veenderweg 136721 WD BennekomThe NetherlandsT: +31
(0)318 416664 <+31318416664> <https://www.facebook.com/geocatbv>
<https://twitter.com/geocat_bv>
<https://plus.google.com/u/1/+GeocatNetbv/posts>Please consider the
environment before printing this email.*