SUNScholar/Researcher Authorisation

Back to After Installation Tasks

BACK TO OPERATIONAL GUIDE

Introduction

Digital assets must only be managed by users authorised to do so. DSpace can authenticate using ePerson accounts or using LDAP server accounts. This wiki page describes the method of setting up DSpace to use an institutional LDAP server for user provisioning. After that is done, it is then up to the repository manager to define privileges for individuals on the repository.

See: http://en.wikipedia.org/wiki/Ldap for more info.

PLEASE NOTE:

• For LDAP to work correctly consistently, it is suggested that ALL the user credentials MUST be in ONE LDAP server or replicated using ONE directory tree structure.
• If for example, you have seperate servers for staff and students, then LDAP authentication setup is extremely difficult and very risky to maintain in the long term.

Requirements

Secure LDAP server network connections

*** Ensure you enable secure internet/network connections before doing LDAP connections. ***

Campus LDAP server connection parameters

Ask the campus IT LDAP system administrators to give you the following details of the campus LDAP servers.

• hostnames
• canonical context
• object context
• search context

LDAP Products

If you do not have an LDAP server on campus, then check the links below and consider starting one.

• http://www.openldap.org
• http://en.wikipedia.org/wiki/OpenLDAP
• http://en.wikipedia.org/wiki/List_of_LDAP_software
• https://help.ubuntu.com/16.04/serverguide/openldap-server.html
• https://help.ubuntu.com/14.04/serverguide/openldap-server.html
• https://help.ubuntu.com/12.04/serverguide/openldap-server.html
• http://www.turnkeylinux.org/openldap
• http://freeipa.org/page/Main_Page
• http://phpldapadmin.sourceforge.net/wiki/index.php/Main_Page

Microsoft Active Directory Integration

If you want to sync with an existing Microsoft AD server, then check the links below.

• https://wiki.duraspace.org/display/DSPACE/LDAP+Hierarchical+Authentication+with+Active+Directory
• http://en.wikipedia.org/wiki/Active_Directory
• http://technet.microsoft.com/en-us/library/cc772726(v=ws.10).aspx
• http://www.windowsitpro.com/article/ldap/integrate-active-directory-and-openldap
• http://lsc-project.org/wiki
• https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Directory_Server/8.2/html/Administration_Guide/Windows_Sync.html
• http://directory.fedoraproject.org/wiki/Howto:WindowsSync
• http://www.papercut.com/products/ng/manual/ch-sys-mgmt-user-group-sync.html

Other Authentication Methods

• https://wiki.duraspace.org/display/DSDOC5x/Authentication+Plugins#AuthenticationPlugins-StackableAuthenticationMethod(s)
• https://wiki.duraspace.org/display/DSDOC4x/Authentication+Plugins#AuthenticationPlugins-StackableAuthenticationMethod(s)
• https://wiki.duraspace.org/display/DSDOC3x/Authentication+Plugins#AuthenticationPlugins-StackableAuthenticationMethod(s)

IP Address Access

• https://wiki.duraspace.org/display/DSDOC5x/Authentication+Plugins#AuthenticationPlugins-IPAuthentication
• https://wiki.duraspace.org/display/DSDOC4x/Authentication+Plugins#AuthenticationPlugins-IPAuthentication
• https://wiki.duraspace.org/display/DSDOC3x/Authentication+Plugins#AuthenticationPlugins-IPAuthentication

Shibboleth

• https://wiki.duraspace.org/display/DSDOC5x/Authentication+Plugins#AuthenticationPlugins-ShibbolethAuthentication
• https://wiki.duraspace.org/display/DSDOC4x/Authentication+Plugins#AuthenticationPlugins-ShibbolethAuthentication
• https://wiki.duraspace.org/display/DSDOC3x/Authentication+Plugins#AuthenticationPlugins-ShibbolethAuthentication

X509 Certificate

• https://wiki.duraspace.org/display/DSDOC5x/Authentication+Plugins#AuthenticationPlugins-X.509CertificateAuthentication
• https://wiki.duraspace.org/display/DSDOC4x/Authentication+Plugins#AuthenticationPlugins-X.509CertificateAuthentication
• https://wiki.duraspace.org/display/DSDOC3x/Authentication+Plugins#AuthenticationPlugins-X.509CertificateAuthentication

References

• https://wiki.duraspace.org/display/DSDOC5x/Authentication+Plugins
• https://wiki.duraspace.org/display/DSDOC5x/Managing+User+Accounts

---

• https://wiki.duraspace.org/display/DSDOC4x/Authentication+Plugins
• https://wiki.duraspace.org/display/DSDOC4x/Managing+User+Accounts

---

• https://wiki.duraspace.org/display/DSDOC3x/Authentication+Plugins