Difference between revisions of "SUNScholar/Researcher Authorisation"
Jump to navigation
Jump to search
m (→PLEASE NOTE:) |
m |
||
| (11 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
<center> | <center> | ||
| − | '''[[SUNScholar/ | + | '''[[SUNScholar/Install DSpace/S11|Back to After Installation Tasks]]''' |
| + | |||
| + | '''[[SUNScholar/Operational_Guide|BACK TO OPERATIONAL GUIDE]]''' | ||
</center> | </center> | ||
==Introduction== | ==Introduction== | ||
| − | Digital assets must only be managed by users authorised to do so. | + | Digital assets must only be managed by users authorised to do so. DSpace can authenticate using ePerson accounts or using LDAP server accounts. This wiki page describes the method of setting up DSpace to use an institutional LDAP server for user provisioning. After that is done, it is then up to the [[SUNScholar/Operational_Guide|repository manager to define privileges]] for individuals on the repository. |
| − | |||
| − | DSpace can authenticate using ePerson accounts or using LDAP server accounts. | ||
| − | |||
| − | This wiki page describes the method of setting up DSpace to use an institutional LDAP server for user provisioning. | ||
| − | |||
| − | After that is done, it is then up to the [[SUNScholar/Operational_Guide|repository manager to define privileges]] for individuals on the repository. | ||
See: http://en.wikipedia.org/wiki/Ldap for more info. | See: http://en.wikipedia.org/wiki/Ldap for more info. | ||
| Line 33: | Line 29: | ||
==Procedure== | ==Procedure== | ||
===[[SUNScholar/Researcher Authorisation/Step 1|Step 1 - Local server LDAP configuration]]=== | ===[[SUNScholar/Researcher Authorisation/Step 1|Step 1 - Local server LDAP configuration]]=== | ||
| − | |||
===[[SUNScholar/Researcher Authorisation/Step 2|Step 2 - DSpace configuration]]=== | ===[[SUNScholar/Researcher Authorisation/Step 2|Step 2 - DSpace configuration]]=== | ||
===[[SUNScholar/Researcher Authorisation/Step 3|Step 3 - Update XMLUI messages]]=== | ===[[SUNScholar/Researcher Authorisation/Step 3|Step 3 - Update XMLUI messages]]=== | ||
| − | |||
===[[SUNScholar/Researcher Authorisation/Step 4|Step 4 - Configure XMLUI logins]]=== | ===[[SUNScholar/Researcher Authorisation/Step 4|Step 4 - Configure XMLUI logins]]=== | ||
| − | |||
| − | |||
==LDAP Products== | ==LDAP Products== | ||
| Line 46: | Line 38: | ||
*http://en.wikipedia.org/wiki/OpenLDAP | *http://en.wikipedia.org/wiki/OpenLDAP | ||
*http://en.wikipedia.org/wiki/List_of_LDAP_software | *http://en.wikipedia.org/wiki/List_of_LDAP_software | ||
| + | *https://help.ubuntu.com/16.04/serverguide/openldap-server.html | ||
*https://help.ubuntu.com/14.04/serverguide/openldap-server.html | *https://help.ubuntu.com/14.04/serverguide/openldap-server.html | ||
*https://help.ubuntu.com/12.04/serverguide/openldap-server.html | *https://help.ubuntu.com/12.04/serverguide/openldap-server.html | ||
| Line 79: | Line 72: | ||
*https://wiki.duraspace.org/display/DSDOC4x/Authentication+Plugins#AuthenticationPlugins-X.509CertificateAuthentication | *https://wiki.duraspace.org/display/DSDOC4x/Authentication+Plugins#AuthenticationPlugins-X.509CertificateAuthentication | ||
*https://wiki.duraspace.org/display/DSDOC3x/Authentication+Plugins#AuthenticationPlugins-X.509CertificateAuthentication | *https://wiki.duraspace.org/display/DSDOC3x/Authentication+Plugins#AuthenticationPlugins-X.509CertificateAuthentication | ||
| + | |||
| + | ==YouTube Video== | ||
| + | <html5media width="560" height="315">https://www.youtube.com/watch?v=2aV4aqN_baQ</html5media> | ||
==References== | ==References== | ||
| Line 88: | Line 84: | ||
---- | ---- | ||
*https://wiki.duraspace.org/display/DSDOC3x/Authentication+Plugins | *https://wiki.duraspace.org/display/DSDOC3x/Authentication+Plugins | ||
| + | [[Category:System Administration]] | ||
| + | [[Category:Operations]] | ||
| + | [[Category:Installation]] | ||
| + | __NOTOC__ | ||
Latest revision as of 00:03, 10 June 2016
Back to After Installation Tasks
BACK TO OPERATIONAL GUIDE
Introduction
Digital assets must only be managed by users authorised to do so. DSpace can authenticate using ePerson accounts or using LDAP server accounts. This wiki page describes the method of setting up DSpace to use an institutional LDAP server for user provisioning. After that is done, it is then up to the repository manager to define privileges for individuals on the repository.
See: http://en.wikipedia.org/wiki/Ldap for more info.
PLEASE NOTE:
- For LDAP to work correctly consistently, it is suggested that ALL the user credentials MUST be in ONE LDAP server or replicated using ONE directory tree structure.
- If for example, you have seperate servers for staff and students, then LDAP authentication setup is extremely difficult and very risky to maintain in the long term.
Requirements
Secure LDAP server network connections
*** Ensure you enable secure internet/network connections before doing LDAP connections. ***
Step 1. Server Firewall
Step 2. Secure Connections
Campus LDAP server connection parameters
Ask the campus IT LDAP system administrators to give you the following details of the campus LDAP servers.
- hostnames
- canonical context
- object context
- search context
Procedure
Step 1 - Local server LDAP configuration
Step 2 - DSpace configuration
Step 3 - Update XMLUI messages
Step 4 - Configure XMLUI logins
LDAP Products
If you do not have an LDAP server on campus, then check the links below and consider starting one.
- http://www.openldap.org
- http://en.wikipedia.org/wiki/OpenLDAP
- http://en.wikipedia.org/wiki/List_of_LDAP_software
- https://help.ubuntu.com/16.04/serverguide/openldap-server.html
- https://help.ubuntu.com/14.04/serverguide/openldap-server.html
- https://help.ubuntu.com/12.04/serverguide/openldap-server.html
- http://www.turnkeylinux.org/openldap
- http://freeipa.org/page/Main_Page
- http://phpldapadmin.sourceforge.net/wiki/index.php/Main_Page
Microsoft Active Directory Integration
If you want to sync with an existing Microsoft AD server, then check the links below.
- https://wiki.duraspace.org/display/DSPACE/LDAP+Hierarchical+Authentication+with+Active+Directory
- http://en.wikipedia.org/wiki/Active_Directory
- http://technet.microsoft.com/en-us/library/cc772726(v=ws.10).aspx
- http://www.windowsitpro.com/article/ldap/integrate-active-directory-and-openldap
- http://lsc-project.org/wiki
- https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Directory_Server/8.2/html/Administration_Guide/Windows_Sync.html
- http://directory.fedoraproject.org/wiki/Howto:WindowsSync
- http://www.papercut.com/products/ng/manual/ch-sys-mgmt-user-group-sync.html
Other Authentication Methods
- https://wiki.duraspace.org/display/DSDOC5x/Authentication+Plugins#AuthenticationPlugins-StackableAuthenticationMethod(s)
- https://wiki.duraspace.org/display/DSDOC4x/Authentication+Plugins#AuthenticationPlugins-StackableAuthenticationMethod(s)
- https://wiki.duraspace.org/display/DSDOC3x/Authentication+Plugins#AuthenticationPlugins-StackableAuthenticationMethod(s)
IP Address Access
- https://wiki.duraspace.org/display/DSDOC5x/Authentication+Plugins#AuthenticationPlugins-IPAuthentication
- https://wiki.duraspace.org/display/DSDOC4x/Authentication+Plugins#AuthenticationPlugins-IPAuthentication
- https://wiki.duraspace.org/display/DSDOC3x/Authentication+Plugins#AuthenticationPlugins-IPAuthentication
Shibboleth
- https://wiki.duraspace.org/display/DSDOC5x/Authentication+Plugins#AuthenticationPlugins-ShibbolethAuthentication
- https://wiki.duraspace.org/display/DSDOC4x/Authentication+Plugins#AuthenticationPlugins-ShibbolethAuthentication
- https://wiki.duraspace.org/display/DSDOC3x/Authentication+Plugins#AuthenticationPlugins-ShibbolethAuthentication
X509 Certificate
- https://wiki.duraspace.org/display/DSDOC5x/Authentication+Plugins#AuthenticationPlugins-X.509CertificateAuthentication
- https://wiki.duraspace.org/display/DSDOC4x/Authentication+Plugins#AuthenticationPlugins-X.509CertificateAuthentication
- https://wiki.duraspace.org/display/DSDOC3x/Authentication+Plugins#AuthenticationPlugins-X.509CertificateAuthentication
YouTube Video
References
- https://wiki.duraspace.org/display/DSDOC5x/Authentication+Plugins
- https://wiki.duraspace.org/display/DSDOC5x/Managing+User+Accounts
- https://wiki.duraspace.org/display/DSDOC4x/Authentication+Plugins
- https://wiki.duraspace.org/display/DSDOC4x/Managing+User+Accounts
