Re: [VuFind-Tech] Auth problems, surname different in LDAP and Voyager

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 454-5900

Hello Luke,

That would work for a single library that does all of their
authentication against a single LDAP server and never against the ILS.

We are a consortia on a shared Aleph installation. What I'm looking at
is connecting to many different LDAP servers and/or Aleph for
authentication purposes. That's why I had to add a
CatalogConnection::catalogLogin method. There are times that you need to
create an authenticated connection to your ILS. There are times when you
need to authenticate the patron against your ILS. These are 2 different
functions. They are similar, but slightly different.

Of course the third instance is just a connection to the ILS, this is
where you talk to the Restful API. No authentication needed, it was
taken care of elsewhere and earlier.

I can handle the many different types of LDAP servers with Apache
virtual hosts, each having their own config file. I did have to patch
sys/auth/ConfigurationReader.php to look at the new config file defined
in the Apache ENV variable as well as sys/ConfigArray.php.

al

On Mon, 2013-02-25 at 10:49 +0000, Osullivan L. wrote:
> Hi Folks,
> 
> We use the Voyager Restful API at Swansea. I believe is is almost a
> "port" from the Aleph services and, as a result, has a few quirks.
> With that said, it does allow us to place and cancel holds and renew
> items. Our LDAP entries don't match either but we have simply removed
> the need for a catalogue "login" by removing the password lookup in
> Voyager.php.
> 
> Cheers,
> 
> Luke
> 
> 
> 
> On 02/21/2013 03:18 PM, Demian Katz wrote:
> 
> > Voyager does have a Restful API, but I'm not sure how equivalent it is to the Aleph one; so far, it's proved fairly problematic to work with in other areas, so I haven't been too eager to move away from the Oracle-based code that I'm at least reasonably confident will work correctly.  However, it's certainly another avenue worth investigating, and it might well be easier to hook a REST call into the LDAP authentication than an Oracle lookup.
> > 
> > - Demian
> > 
> > > -----Original Message-----
> > > From: Alan Rykhus [mailto:ala...@mn...]
> > > Sent: Thursday, February 21, 2013 10:08 AM
> > > To: vuf...@li...
> > > Subject: Re: [VuFind-Tech] Auth problems, surname different in LDAP and
> > > Voyager
> > > 
> > > Hello,
> > > 
> > > Doesn't Voyager have the Restful API just like Aleph?
> > > 
> > > I recently did the work to allow libraries to authenticate using LDAP or
> > > Aleph to authenticate. If they use LDAP I authenticate against the
> > > library's LDAP server. It returns an ID that is in the Aleph patron
> > > database. I can then get the Aleph information I need without
> > > authenticating. The Aleph Restful API allows me to do anything I want
> > > for the patron without ever logging them on to Aleph.
> > > 
> > > So my custom authentication module first connects to and authenticates
> > > against the LDAP server, then it connects to Aleph making sure the
> > > patron exists there and gets any additional needed patron data using the
> > > ID that was returned from LDAP.
> > > 
> > > (This is why I have issues with the CatalogConnection::catalogLogin
> > > function, I never do have any credentials that allow me to login to
> > > Aleph, and with the Restful API I do not need to)
> > > 
> > > al
> > > 
> > > On Thu, 2013-02-21 at 13:51 +0000, Demian Katz wrote:
> > > > At Villanova, we don’t try to populate cat_username from LDAP; we use
> > > > LDAP for authentication, but if the user tries to access Voyager
> > > > functionality, they get prompted to enter barcode and last name
> > > > separately.  If this is the behavior you desire, you should be able to
> > > > achieve it simply by commenting out the cat_username / cat_password
> > > > LDAP settings in your configuration.
> > > > 
> > > > 
> > > > 
> > > > And actually, since you are talking about names, is it actually the
> > > > cat_password field that is causing you trouble?  Shouldn’t
> > > > cat_username be a barcode?
> > > > 
> > > > 
> > > > 
> > > > Assuming that you have a barcode from LDAP, you might be able to add
> > > > some custom code to do an Oracle lookup of the user’s last name in the
> > > > Voyager database based on the barcode, and then use that data to
> > > > populate cat_username/cat_password.  That might get a little messy,
> > > > but I can make some suggestions if you need help.
> > > > 
> > > > 
> > > > 
> > > > - Demian
> > > > 
> > > > 
> > > > 
> > > > From: Stewart Brownrigg [mailto:S.J...@ke...]
> > > > Sent: Thursday, February 21, 2013 7:59 AM
> > > > To: vuf...@li...
> > > > Subject: [VuFind-Tech] Auth problems, surname different in LDAP and
> > > > Voyager
> > > > 
> > > > 
> > > > 
> > > > 
> > > > Hi,
> > > > 
> > > > 
> > > > 
> > > > We are experiencing difficulties authenticating users where their name
> > > > in LDAP is represented differently in Voyager.   Our Voyager data
> > > > comes direct from the data systems, but LDAP names are normalised
> > > > quite heavily (e.g. losing diacritics, double barrelled names being
> > > > truncated).
> > > > 
> > > > 
> > > > 
> > > > Is there any way to get the database to pull cat_username from the
> > > > Voyager record, instead of LDAP?
> > > > 
> > > > 
> > > > 
> > > > Many thanks,
> > > > 
> > > > Stewart
> > > > 
> > > > --
> > > > 
> > > > Stewart J Brownrigg
> > > > 
> > > > Learning & Research Development, Information Services, University of
> > > > Kent, Canterbury, Kent, CT2 7NF, UK
> > > > 
> > > > +44(0)1227 823621
> > > > 
> > > > 
> > > > 
> > > > 
> > > > ----------------------------------------------------------------------------
> > > --
> > > > Everyone hates slow websites. So do we.
> > > > Make your web apps faster with AppDynamics
> > > > Download AppDynamics Lite for free today:
> > > > http://p.sf.net/sfu/appdyn_d2d_feb
> > > > _______________________________________________
> > > > Vufind-tech mailing list
> > > > Vuf...@li...
> > > > https://lists.sourceforge.net/lists/listinfo/vufind-tech
> > > --
> > > Alan Rykhus
> > > PALS, A Program of the Minnesota State Colleges and Universities
> > > (507)389-1975
> > > ala...@mn...
> > > "Be pleasant until ten o'clock in the morning and the rest of the day
> > > will take care of itself." ~ Elbert Hubbard
> > > 
> > > 
> > > ------------------------------------------------------------------------------
> > > Everyone hates slow websites. So do we.
> > > Make your web apps faster with AppDynamics
> > > Download AppDynamics Lite for free today:
> > > http://p.sf.net/sfu/appdyn_d2d_feb
> > > _______________________________________________
> > > Vufind-tech mailing list
> > > Vuf...@li...
> > > https://lists.sourceforge.net/lists/listinfo/vufind-tech
> > ------------------------------------------------------------------------------
> > Everyone hates slow websites. So do we.
> > Make your web apps faster with AppDynamics
> > Download AppDynamics Lite for free today:
> > http://p.sf.net/sfu/appdyn_d2d_feb
> > _______________________________________________
> > Vufind-tech mailing list
> > Vuf...@li...
> > https://lists.sourceforge.net/lists/listinfo/vufind-tech
> 
> -- 
> Luke O'Sullivan
> Systems Developer
> Web Team
> Swansea University, Singleton Park, Swansea SA2 8PP, UK
> l.o...@sw...
> 01792 602772
> @l_os_cymru

-- 
Alan Rykhus
PALS, A Program of the Minnesota State Colleges and Universities 
(507)389-1975
ala...@mn...
"Be pleasant until ten o'clock in the morning and the rest of the day
will take care of itself." ~ Elbert Hubbard