EPrints Technical Mailing List Archive

See the EPrints wiki for instructions on how to join this mailing list and related information.

Message: #09845

< Previous (by date) | Next (by date) > | < Previous (in thread) | Next (in thread) > | Messages - Most Recent First | Threads - Most Recent First

RE: [EP-tech] LDAP/LDAPS

CAUTION: This e-mail originated outside the University of Southampton.

Hi James,
Is the 'ldap_hostname' different between your two servers?

I think the 'ldaps' prefix should result in the Net::LDAP module using the correct (secure) port – a bit like http vs https (port 80 vs. 443).

 

You can also set it explicitly:
your.ldap.host:389 (default, not secure)
your.ldap.host:636 (secure = ldaps)


More details here: https://metacpan.org/dist/perl-ldap/view/lib/Net/LDAP.pod#new-(-HOST,-OPTIONS-)

 

Cheers,
John

 

From: eprints-tech-request@ecs.soton.ac.uk <eprints-tech-request@ecs.soton.ac.uk> On Behalf Of James Kerwin
Sent: Monday, October 14, 2024 10:59 AM
To: eprints-tech@ecs.soton.ac.uk
Subject: [EP-tech] LDAP/LDAPS

 

CAUTION: External Message. Use caution opening links and attachments.

CAUTION: This e-mail originated outside the University of Southampton.

CAUTION: This e-mail originated outside the University of Southampton.

Hello,

 

Can anybody advise me on the LDAP script for user login?

 

This one:

 

 

Our IT Services department has contacted me to say one of our test servers is using LDAP when it should be using LDAPS. According to them this depends on which port we use for LDAP. The script in question doesn't mention the port (a test username lookup script above it on the wiki does). I can't determine how the script selects a port and it isn't in the LDAP config file.

 

This problem does not exist on the equivalent live server. The only major difference between Live and Test is that Live uses https and Test uses http. IT Services seem convinced that this is not the cause/solution and I don't really have a clue myself.

 

Anyway, my question is, how does the ldap script determine which port to use?

 

Thanks,

James