Re: LDAP Group Syntax Examples
Laszlo Gercsov <[email protected]> Mon, 13 Jan 2020 00:15:05 +0000
| Newsgroups | gmane.education.ezproxy |
|---|---|
| Message-ID | <SY3PR01MB170520AAEB607AA5BA75DB51D6350@SY3PR01MB1705.ausprd01.prod.outlook.com> |
--_000_SY3PR01MB170520AAEB607AA5BA75DB51D6350SY3PR01MB1705ausp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi Tyler. You can use the "test ldap" page in the ezproxy administration to see what = your group memberships look like. We have an LDAP group for library staff which looks like this :- memberOf: CN=3DLIB-GRP-EZPROXY-LIBRARY,OU=3DManaged,OU=3DLIB-Groups,OU=3DLI= B,OU=3DMQ-BusUnit-Res,DC=3Dmqauth,DC=3Duni,DC=3Dmq,DC=3Dedu,DC=3Dau Our user.txt file checks for that LDAP group and adds an ezproxy group "LIB= " like this ... URL ldaps://ADSDCPRD2011A.mqauth.uni.mq.edu.au:636/DC=3Dmqauth,DC=3Duni,DC= =3Dmq,DC=3Dedu,DC=3Dau?sAMAccountName?sub?(objectClass=3Dperson) IfUnauthenticated; Stop IfMember CN=3DLIB-GRP-EZPROXY-LIBRARY,OU=3DManaged,OU=3DLIB-Groups,OU=3DLIB= ,OU=3DMQ-BusUnit-Res,DC=3Dmqauth,DC=3Duni,DC=3Dmq,DC=3Dedu,DC=3Dau; Group += LIB Deny logup.htm /LDAP Deny loginbu.htm Best, Laszlo. Laszlo Gercsov Senior Systems Analyst Library Systems Library | Level 4 16 Macquarie Drive Macquarie University, NSW 2109, Australia T: +61 2 9850 6533 | F: +61 2 9850 7568 M: + 61 402 175 101 | mq.edu.au/library<http://mq.edu.au/> [Macquarie University]<http://mq.edu.au/> CRICOS Provider Number 00002J. Think before you print. Please consider the environment before printing this email. This message is intended for the addressee named and may contain confidential information. If you are not the intended recipient, please delete it and notify the sender. Views expressed in this message are those of the individual sender, and are not necessarily the views of Macquarie University ________________________________ From: EZproxy List <[email protected]> on behalf of Mobley, Tyler <mo= [email protected]> Sent: Saturday, 11 January 2020 7:27 AM To: [email protected] <[email protected]> Subject: [EZPROXY-L] LDAP Group Syntax Examples Hi All, Does anyone have a more recent reference for assigning EZProxy users to Gro= ups via LDAP groups? I=92m following an example from a 2009 thread on here,= but nothing seems to work. I keep getting sent to loginup.htm. What I=92m = currently trying is below. Anyone have an modern examples? ::LDAP BindUser user BindPassword -Obscure pass DisableReferralChasing URL ldap://IP/dc=3Dcougars,dc=3Dint?sAMAccountName?sub?(objectClass=3Dperso= n) IfMember FacultyAndStaff-all,OU=3DGroupsAuto_OU,DC=3DCOUGARS,DC=3DINT; Grou= p +General IfUnauthenticated; Stop /LDAP Thanks! Tyler Mobley Digital Services Coordinator Director, Lowcountry Digital Library College of Charleston Libraries ________________________________ To unsubscribe from the EZPROXY-L list, click the following link: http://listserv.oclclists.org/scripts/wa.exe?SUBED1=3DEZPROXY-L&A=3D1<https= ://protect-au.mimecast.com/s/lcQhCzvkmpfOpg3rfX9R2r?domain=3Dlistserv.oclcl= ists.org> ******************************************************************** If you wish to stop receiving messages from EZPROXY-L or otherwise amend your preferences, you can do so <a href=3D"https://www.oclc.org/forms/internet-subscription.en.html">here</a>. Or email [email protected] including the relevant text below in the body of the email: =95 To unsubscribe: "unsubscribe EZPROXY-L" =95 To receive EZPROXY-L in digest form: "set EZPROXY-L digest" =95 To set your options to no mail: "set EZPROXY-L nomail" =95 To receive these messages in the future "set EZPROXY-L mail" To contact the list owners directly please send your message to [email protected]. If you unsubscribe from EZPROXY-L, you will no longer be able to participate in any of its features, including the public forum. To unsubscribe from all OCLC marketing email communications (including all OCLC listervs, OCLC Connect emails, OCLC event notifications, product/service/cooperative updates and newsletters), please email us at [email protected]. --_000_SY3PR01MB170520AAEB607AA5BA75DB51D6350SY3PR01MB1705ausp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1= 252"> <style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo= ttom:0;} </style> </head> <body dir=3D"ltr"> <div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size= : 12pt; color: rgb(0, 111, 201);"> <span>Hi Tyler.<br> </span> <div><br> </div> <div>You can use the "test ldap" page in the ezproxy administrati= on to see what your group memberships look like.<br> </div> <div>We have an LDAP group for library staff which looks like this :-<br> </div> <div>memberOf: CN=3DLIB-GRP-EZPROXY-LIBRARY,OU=3DManaged,OU=3DLIB-Groups,OU= =3DLIB,OU=3DMQ-BusUnit-Res,DC=3Dmqauth,DC=3Duni,DC=3Dmq,DC=3Dedu,DC=3Dau<br= > </div> <div><br> </div> <div>Our user.txt file checks for that LDAP group and adds an ezproxy group= "LIB" like this<br> </div> <div>...<br> </div> <div>URL ldaps://ADSDCPRD2011A.mqauth.uni.mq.edu.au:636/DC=3Dmqauth,DC=3Dun= i,DC=3Dmq,DC=3Dedu,DC=3Dau?sAMAccountName?sub?(objectClass=3Dperson)<br> </div> <div>IfUnauthenticated; Stop<br> </div> <div>IfMember CN=3DLIB-GRP-EZPROXY-LIBRARY,OU=3DManaged,OU=3DLIB-Groups,OU= =3DLIB,OU=3DMQ-BusUnit-Res,DC=3Dmqauth,DC=3Duni,DC=3Dmq,DC=3Dedu,DC=3Dau; G= roup +LIB<br> </div> <div>Deny logup.htm<br> </div> <div>/LDAP<br> </div> <div>Deny loginbu.htm<br> </div> <div><br> </div> <div>Best,<br> </div> <div><br> </div> <span>Laszlo.</span><br> </div> <div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size= : 12pt; color: rgb(0, 111, 201);"> <br> </div> <div id=3D"Signature"> <div id=3D"divtagdefaultwrapper" dir=3D"ltr" style=3D"font-size:12pt; color= :#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,san= s-serif"> <p style=3D"margin-top: 0px; margin-bottom: 0px;"><span></span></p> <div class=3D"gmail_signature"> <div dir=3D"ltr"> <div> <div dir=3D"ltr"> <div><b><font face=3D"arial, helvetica, sans-serif" color=3D"#000000"><span= style=3D"font-size:12px; line-height:15px">Laszlo Gercsov</span></font></b= ><br> <div dir=3D"ltr"> <div style=3D"font-family:arial,helvetica,sans-serif; font-size:small"> <p style=3D"margin-top: 0px; margin-bottom: 0px;font-size:14px; line-height= :17.3333339691162px; color:rgb(0,0,0); padding:0px; margin-bottom:5px; font= -family:'Myriad Pro',Myriad,Corbel,'DejaVu Sans Condensed','Liberation Sans= ','Nimbus Sans L',Tahoma,'Helvetica Neue',Helvetica,Arial,sans-serif"> <span style=3D"font-family:arial,helvetica,sans-serif; font-size:12px; line= -height:15px">Senior Systems Analyst Library Systems<br> </span></p> <p style=3D"margin-top: 0px; margin-bottom: 0px;font-size:14px; line-height= :17.3333339691162px; color:rgb(0,0,0); padding:0px; margin-bottom:5px; font= -family:'Myriad Pro',Myriad,Corbel,'DejaVu Sans Condensed','Liberation Sans= ','Nimbus Sans L',Tahoma,'Helvetica Neue',Helvetica,Arial,sans-serif"> <span style=3D"font-family:arial,helvetica,sans-serif; font-size:12px; line= -height:15px"><b>Library<span style=3D"color:rgb(221,25,17)"> |  = ;</span></b>Level 4<br> 16 Macquarie Drive<br> Macquarie University, NSW 2109, Australia</span></p> <p style=3D"margin-top: 0px; margin-bottom: 0px;font-size:14px; line-height= :15px; color:rgb(0,0,0); padding:0px; margin-bottom:5px; font-family:'Myria= d Pro',Myriad,Corbel,'DejaVu Sans Condensed','Liberation Sans','Nimbus Sans= L',Tahoma,'Helvetica Neue',Helvetica,Arial,sans-serif"> <span style=3D"font-family:arial,helvetica,sans-serif; font-size:12px"><b>T= :</b> +61 2 9850 6533 </span><span style=3D"font-family:arial,helvetica,sans-serif; font-size:12p= x"><b><span style=3D"color:rgb(221,25,17)">| </span></b></span><b style=3D"font-family:arial,helvetica,sans-serif; font-= size:12px">F:</b><span style=3D"font-family:arial,helvetica,sans-serif; fon= t-size:12px"> +61 2 9850 7568</span></p> <p style=3D"margin-top: 0px; margin-bottom: 0px;font-size:14px; line-height= :15px; color:rgb(0,0,0); padding:0px; margin-bottom:5px; font-family:'Myria= d Pro',Myriad,Corbel,'DejaVu Sans Condensed','Liberation Sans','Nimbus Sans= L',Tahoma,'Helvetica Neue',Helvetica,Arial,sans-serif"> <b style=3D"font-family:arial,helvetica,sans-serif; font-size:12px">M:</b><= span style=3D"font-family:arial,helvetica,sans-serif; font-size:12px"> = ;+ 61 402 175 101</span><span style=3D"font-family:arial,helvetica,sans= -serif; font-size:12px"><b><span style=3D"color:rgb(221,25,17)"> | </span></b></span><span style=3D"font-family:arial,helvetica,sans-= serif; font-size:12px"><a title=3D"Macquarie University" href=3D"http://mq.= edu.au/" target=3D"_blank" style=3D"text-decoration:none; color:rgb(159,20,= 26); outline:none"><span style=3D"color:rgb(0,0,0)">mq.edu.au/library</span= ></a></span><span style=3D"font-family:arial,helvetica,sans-serif; font-siz= e:12px"><b><span style=3D"color:rgb(221,25,17)"> </span></b><span style=3D"outline:none"></span></span></p> <p style=3D"margin-top: 0px; margin-bottom: 0px;font-size:14px; line-height= :17.3333339691162px; color:rgb(0,0,0); padding:0px; margin-bottom:10px; fon= t-family:'Myriad Pro',Myriad,Corbel,'DejaVu Sans Condensed','Liberation San= s','Nimbus Sans L',Tahoma,'Helvetica Neue',Helvetica,Arial,sans-serif"> <a href=3D"http://mq.edu.au/" target=3D"_blank" style=3D"color:rgb(159,20,2= 6); outline:none"><img alt=3D"Macquarie University" style=3D"border:none" s= rc=3D"https://ci6.googleusercontent.com/proxy/UVVg0_l7q-i7irpOLwvcglxW_4pF7= s8k00vMBrOj1c6rCuZnuYTXD6g3gPbDPjNxtyFVU6YYcP4bQtJtUxbPxu-TBoeMAnVqdPe6Jgjl= FCv1dMfxEw=3Ds0-d-e1-ft#http://mq.edu.au/mq_templates/global/images/macquar= ieUni_sm.png"></a><br> </p> <p style=3D"margin-top: 0px; margin-bottom: 0px;font-size:14px; line-height= :17.3333339691162px; color:rgb(0,0,0); padding:0px; margin-bottom:10px; fon= t-family:'Myriad Pro',Myriad,Corbel,'DejaVu Sans Condensed','Liberation San= s','Nimbus Sans L',Tahoma,'Helvetica Neue',Helvetica,Arial,sans-serif"> <span style=3D"font-family:arial,helvetica,sans-serif; font-size:9px; color= :rgb(119,119,119); line-height:12px">CRICOS Provider Number 00002J. Think b= efore you print. <br> Please consider the environment before printing this email.<span></span><sp= an></span></span></p> <p style=3D"margin-top: 0px; margin-bottom: 0px;font-size:14px; line-height= :17.3333339691162px; color:rgb(0,0,0); padding:0px; margin-bottom:0px; font= -family:'Myriad Pro',Myriad,Corbel,'DejaVu Sans Condensed','Liberation Sans= ','Nimbus Sans L',Tahoma,'Helvetica Neue',Helvetica,Arial,sans-serif"> <span style=3D"font-family:arial,helvetica,sans-serif; font-size:9px; color= :rgb(119,119,119); line-height:12px">This message is intended for the addre= ssee named and may <br> contain confidential information. If you are not the intended <br> recipient, please delete it and notify the sender. Views expressed <br= > in this message are those of the individual sender, and are not <br> necessarily the views of Macquarie University</span></p> </div> </div> </div> </div> </div> </div> </div> <p style=3D"margin-top: 0px; margin-bottom: 0px;"></p> </div> <div> <div id=3D"appendonsend"></div> <div style=3D"font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12p= t; color:rgb(0,111,201)"> <br> </div> <hr tabindex=3D"-1" style=3D"display:inline-block; width:98%"> <div id=3D"divRplyFwdMsg" dir=3D"ltr"><font style=3D"font-size:11pt" face= =3D"Calibri, sans-serif" color=3D"#000000"><b>From:</b> EZproxy List <EZ= [email protected]> on behalf of Mobley, Tyler <[email protected]&g= t;<br> <b>Sent:</b> Saturday, 11 January 2020 7:27 AM<br> <b>To:</b> [email protected] <[email protected]><br> <b>Subject:</b> [EZPROXY-L] LDAP Group Syntax Examples</font> <div> </div> </div> <div lang=3D"EN-US"> <div class=3D"x_WordSection1"> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> Hi All,</p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> </p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> Does anyone have a more recent reference for assigning EZProxy users to Gro= ups via LDAP groups? I=92m following an example from a 2009 thread on here,= but nothing seems to work. I keep getting sent to loginup.htm. What I=92m = currently trying is below. Anyone have an modern examples? </p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> </p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> ::LDAP</p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> BindUser user</p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> BindPassword -Obscure pass</p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> DisableReferralChasing</p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> URL ldap://IP/dc=3Dcougars,dc=3Dint?sAMAccountName?sub?(objectClass=3Dperso= n)</p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> IfMember FacultyAndStaff-all,OU=3DGroupsAuto_OU,DC=3DCOUGARS,DC=3DINT; Grou= p +General</p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> IfUnauthenticated; Stop</p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> /LDAP</p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> </p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> Thanks!</p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> </p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> Tyler Mobley</p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> Digital Services Coordinator</p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> Director, Lowcountry Digital Library</p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> College of Charleston Libraries</p> <p class=3D"x_MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt= ; font-family: "Calibri", sans-serif;"> </p> </div> <br> <hr> <p align=3D"center">To unsubscribe from the EZPROXY-L list, click the follo= wing link:<br> <a href=3D"https://protect-au.mimecast.com/s/lcQhCzvkmpfOpg3rfX9R2r?domain= =3Dlistserv.oclclists.org" target=3D"_blank">http://listserv.oclclists.org/= scripts/wa.exe?SUBED1=3DEZPROXY-L&A=3D1</a> </p> </div> </div> </div> </body> </html> <br> <hr> <p align=3D"center">To unsubscribe from the EZPROXY-L list, click the following link:<br> <a href=3D"http://listserv.oclclists.org/scripts/wa.exe?SUBED1=3DEZPROXY-L&A=3D1" target=3D"_blank">http://listserv.oclclists.org/scripts/wa.exe?SUBED1=3DEZPROXY-L&A=3D1</a> </p> --_000_SY3PR01MB170520AAEB607AA5BA75DB51D6350SY3PR01MB1705ausp_--