Re: [EXTERNAL] [EZPROXY-L] LDAP Group Syntax Examples

"Burch, David" <[email protected]> Fri, 10 Jan 2020 21:29:09 +0000
Newsgroups gmane.education.ezproxy
Message-ID <[email protected]>
--_000_a9250a2d89304d41abf037c95027bde0enmuedu_
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=utf-8

Hi Tyler,

I am rather new to this, but ours looks very close to yours with the followi=
ng differences:

-          Our BindUser line includes the domain and a directive you are not=
 using. Example: BindUser ad\BanLDAPBIND

-          Our URL line has ldaps:// instead of ldap.

David Burch
Library Systems Administrator
Golden Library
Eastern New Mexico University

From: EZproxy List <[email protected]> On Behalf Of Mobley, Tyler
Sent: Friday, January 10, 2020 1:27 PM
To: [email protected]
Subject: [EXTERNAL] [EZPROXY-L] LDAP Group Syntax Examples

ENMU-External

Hi All,

Does anyone have a more recent reference for assigning EZProxy users to Grou=
ps via LDAP groups? I'm following an example from a 2009 thread on here, but=
 nothing seems to work. I keep getting sent to loginup.htm. What I'm current=
ly trying is below. Anyone have an modern examples?

::LDAP
BindUser user
BindPassword -Obscure pass
DisableReferralChasing
URL ldap://IP/dc=3Dcougars,dc=3Dint?sAMAccountName?sub?(objectClass=3Dperson=
)
IfMember FacultyAndStaff-all,OU=3DGroupsAuto_OU,DC=3DCOUGARS,DC=3DINT; Group=
 +General
IfUnauthenticated; Stop
/LDAP

Thanks!

Tyler Mobley
Digital Services Coordinator
Director, Lowcountry Digital Library
College of Charleston Libraries


________________________________

To unsubscribe from the EZPROXY-L list, click the following link:
http://listserv.oclclists.org/scripts/wa.exe?SUBED1=3DEZPROXY-L&A=3D1<https:=
//linkprotect.cudasvc.com/url?a=3Dhttp%3a%2f%2flistserv.oclclists.org%2fscri=
pts%2fwa.exe%3fSUBED1%3dEZPROXY-L%26A%3d1&c=3DE,1,7zWmEDxXS-5SXeJB2Q25DCJbkg=
-64YU23UFRDc3pDJW_v7sIJeowG4o4PKEh9P-S-avZe_WRkxGbdF1clT0rUpcGnf-UoI7QHnjBhT=
DQv3pdisq6xmtskbqyTw,,&typo=3D1>

________________________________




Confidentiality Notice:

This e-mail, including all attachments, is for the sole use of the intended =
recipient(s) and may contain confidential and privileged information as defi=
ned under FERPA. Any unauthorized review, use, disclosure or distribution is=
 prohibited unless specifically provided under the New Mexico Inspection of =
Public Records Act. If you are not the intended recipient, please contact th=
e sender and destroy all copies of this message


********************************************************************
If you wish to stop receiving messages from EZPROXY-L or otherwise amend you=
r preferences,
you can do so <a href=3D"https://www.oclc.org/forms/internet-subscription.en=
.html">here</a>.
Or email [email protected] including the relevant text below in the bod=
y of the email:
=E2=80=A2 To unsubscribe: "unsubscribe EZPROXY-L"
=E2=80=A2 To receive EZPROXY-L in digest form: "set EZPROXY-L digest"
=E2=80=A2 To set your options to no mail: "set EZPROXY-L nomail"
=E2=80=A2 To receive these messages in the future "set EZPROXY-L mail"
To contact the list owners directly please send your message to EZPROXY-L-re=
[email protected].
If you unsubscribe from EZPROXY-L, you will no longer be able to participate=
 in any of its features, including the public forum.
To unsubscribe from all OCLC marketing email communications
(including all OCLC listervs, OCLC Connect emails, OCLC event notifications,=
 product/service/cooperative updates and newsletters),
please email us at [email protected].
--_000_a9250a2d89304d41abf037c95027bde0enmuedu_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#0563C1;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:#954F72;
	text-decoration:underline;}
p
	{mso-style-priority:99;
	mso-margin-top-alt:auto;
	margin-right:0in;
	mso-margin-bottom-alt:auto;
	margin-left:0in;
	font-size:12.0pt;
	font-family:"Times New Roman",serif;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
	{mso-style-name:msonormal;
	mso-margin-top-alt:auto;
	margin-right:0in;
	mso-margin-bottom-alt:auto;
	margin-left:0in;
	font-size:12.0pt;
	font-family:"Times New Roman",serif;}
span.EmailStyle18
	{mso-style-type:personal;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
span.EmailStyle20
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:1518231439;
	mso-list-type:hybrid;
	mso-list-template-ids:1182939802 -1256964138 67698691 67698693 67698689 67=
698691 67698693 67698689 67698691 67698693;}
@list l0:level1
	{mso-level-start-at:0;
	mso-level-number-format:bullet;
	mso-level-text:-;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Calibri",sans-serif;
	mso-fareast-font-family:Calibri;}
@list l0:level2
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level3
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l0:level4
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level5
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level6
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l0:level7
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level8
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level9
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l1
	{mso-list-id:1976254591;
	mso-list-type:hybrid;
	mso-list-template-ids:951849476 716625026 67698691 67698693 67698689 67698=
691 67698693 67698689 67698691 67698693;}
@list l1:level1
	{mso-level-start-at:0;
	mso-level-number-format:bullet;
	mso-level-text:-;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Calibri",sans-serif;
	mso-fareast-font-family:Calibri;}
@list l1:level2
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l1:level3
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l1:level4
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l1:level5
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l1:level6
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l1:level7
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l1:level8
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l1:level9
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Hi Tyler,<o:p></o:p></=
span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p>&nbsp;</o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">I am rather new to thi=
s, but ours looks very close to yours with the following differences:<o:p><=
/o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l1 level=
1 lfo2"><![if !supportLists]><span style=3D"color:#1F497D"><span style=3D"m=
so-list:Ignore">-<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:#1F497D">Our BindUser l=
ine includes the domain and a directive you are not using. Example: BindUse=
r ad\BanLDAPBIND<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l1 level=
1 lfo2"><![if !supportLists]><span style=3D"color:#1F497D"><span style=3D"m=
so-list:Ignore">-<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:#1F497D">Our URL line h=
as ldaps:// instead of ldap.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p>&nbsp;</o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">David Burch<o:p></o:p>=
</span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Library Systems Admini=
strator<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Golden Library<o:p></o=
:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">Eastern New Mexico Uni=
versity<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p>&nbsp;</o:p></spa=
n></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b>From:</b> EZproxy List &lt;[email protected]=
G&gt; <b>On Behalf Of
</b>Mobley, Tyler<br>
<b>Sent:</b> Friday, January 10, 2020 1:27 PM<br>
<b>To:</b> [email protected]<br>
<b>Subject:</b> [EXTERNAL] [EZPROXY-L] LDAP Group Syntax Examples<o:p></o:p=
></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div style=3D"border:solid darkkhaki 1.0pt;padding:2.0pt 2.0pt 2.0pt 2.0pt"=
>
<p class=3D"MsoNormal" align=3D"center" style=3D"text-align:center;line-hei=
ght:12.0pt;background:khaki">
<b><span style=3D"font-size:10.0pt;color:red">ENMU-External</span></b><span=
 style=3D"font-size:10.0pt;color:black">
<o:p></o:p></span></p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt;font-family:&quot;Ti=
mes New Roman&quot;,serif"><o:p>&nbsp;</o:p></span></p>
<div>
<p class=3D"MsoNormal">Hi All,<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Does anyone have a more recent reference for assigni=
ng EZProxy users to Groups via LDAP groups? I&#8217;m following an example =
from a 2009 thread on here, but nothing seems to work. I keep getting sent =
to loginup.htm. What I&#8217;m currently trying
 is below. Anyone have an modern examples? <o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">::LDAP<o:p></o:p></p>
<p class=3D"MsoNormal">BindUser user<o:p></o:p></p>
<p class=3D"MsoNormal">BindPassword -Obscure pass<o:p></o:p></p>
<p class=3D"MsoNormal">DisableReferralChasing<o:p></o:p></p>
<p class=3D"MsoNormal">URL ldap://IP/dc=3Dcougars,dc=3Dint?sAMAccountName?s=
ub?(objectClass=3Dperson)<o:p></o:p></p>
<p class=3D"MsoNormal">IfMember FacultyAndStaff-all,OU=3DGroupsAuto_OU,DC=
=3DCOUGARS,DC=3DINT; Group &#43;General<o:p></o:p></p>
<p class=3D"MsoNormal">IfUnauthenticated; Stop<o:p></o:p></p>
<p class=3D"MsoNormal">/LDAP<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Thanks!<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Tyler Mobley<o:p></o:p></p>
<p class=3D"MsoNormal">Digital Services Coordinator<o:p></o:p></p>
<p class=3D"MsoNormal">Director, Lowcountry Digital Library<o:p></o:p></p>
<p class=3D"MsoNormal">College of Charleston Libraries<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt;font-family:&quot;Ti=
mes New Roman&quot;,serif"><o:p>&nbsp;</o:p></span></p>
<div class=3D"MsoNormal" align=3D"center" style=3D"text-align:center"><span=
 style=3D"font-size:12.0pt;font-family:&quot;Times New Roman&quot;,serif">
<hr size=3D"2" width=3D"100%" align=3D"center">
</span></div>
<p align=3D"center" style=3D"text-align:center">To unsubscribe from the EZP=
ROXY-L list, click the following link:<br>
<a href=3D"https://linkprotect.cudasvc.com/url?a=3Dhttp%3a%2f%2flistserv.oc=
lclists.org%2fscripts%2fwa.exe%3fSUBED1%3dEZPROXY-L%26A%3d1&amp;c=3DE,1,7zW=
mEDxXS-5SXeJB2Q25DCJbkg-64YU23UFRDc3pDJW_v7sIJeowG4o4PKEh9P-S-avZe_WRkxGbdF=
1clT0rUpcGnf-UoI7QHnjBhTDQv3pdisq6xmtskbqyTw,,&amp;typo=3D1" target=3D"_bla=
nk">http://listserv.oclclists.org/scripts/wa.exe?SUBED1=3DEZPROXY-L&amp;A=
=3D1</a>
<o:p></o:p></p>
</div>
</div>
<br>
<hr>
<font face=3D"Arial" color=3D"Gray" size=3D"1"><br>
<br>
<br>
<br>
Confidentiality Notice:<br>
<br>
This e-mail, including all attachments, is for the sole use of the intended=
 recipient(s) and may contain confidential and privileged information as de=
fined under FERPA. Any unauthorized review, use, disclosure or distribution=
 is prohibited unless specifically
 provided under the New Mexico Inspection of Public Records Act. If you are=
 not the intended recipient, please contact the sender and destroy all copi=
es of this message<br>
</font>
</body>
</html>
<br>
<hr>
<p align=3D"center">To unsubscribe from the EZPROXY-L list, click the following link:<br>
<a href=3D"http://listserv.oclclists.org/scripts/wa.exe?SUBED1=3DEZPROXY-L&A=3D1" target=3D"_blank">http://listserv.oclclists.org/scripts/wa.exe?SUBED1=3DEZPROXY-L&A=3D1</a>
</p>

--_000_a9250a2d89304d41abf037c95027bde0enmuedu_--