[Archivesspace_Users_Group] Updated from v3.3.1 to v3.4.0, LDAP syntax problems...

Thu Aug 3 16:21:35 EDT 2023

Was able to check LDAP login and it looks good now. Thanks for your help!

[Towson University logo]<http://www.towson.edu/>
Eric T. Gadsby
Pronouns: he/him/his
IT Operations Specialist  |  Albert S. Cook Library
—
P: 410-704-3340
egadsby at towson.edu<mailto:egadsby at towson.edu>  |  libraries.towson.edu<http://www.towson.edu/https:/libraries.towson.edu>
 —

Confidentiality Notice: This message may contain information that is confidential, privileged, proprietary, or otherwise legally exempt from disclosure. If you are not the intended recipient, you are notified that you are not authorized to read, print, copy or disseminate this message, any part of it, or any attachments. If this message has been sent to you in error, please notify the sender by replying to this transmission, or by calling Albert S. Cook Library at 410-704-3340 .

From: archivesspace_users_group-bounces at lyralists.lyrasis.org <archivesspace_users_group-bounces at lyralists.lyrasis.org> on behalf of Gadsby, Eric T. <egadsby at towson.edu>
Date: Thursday, August 3, 2023 at 3:46 PM
To: Archivesspace Users Group <archivesspace_users_group at lyralists.lyrasis.org>
Subject: Re: [Archivesspace_Users_Group] Updated from v3.3.1 to v3.4.0, LDAP syntax problems...

[ CAUTION: This email is from outside of TU. Use caution before clicking links or opening attachments. If suspicious, report to phishing at towson.edu. ]
Hi again!

Thanks for the tip, turns out it was a paste error... 100% user error in using Nano with Putty...

I need to double check everything, but the software loaded this time. Thanks!

-Eric

On Aug 3, 2023, at 2:49 PM, Gadsby, Eric T. <egadsby at towson.edu> wrote:

Thanks! I will look at it, I copied the whole block so I am not sure what might be wrong. I’ll let the list know when I know more. Thanks!

<http://www.towson.edu/>
<image002.jpg><http://www.towson.edu/>

Eric T. Gadsby
Pronouns: he/him/his
IT Operations Specialist  |  Albert S. Cook Library
—
P: 410-704-3340
egadsby at towson.edu<mailto:egadsby at towson.edu>  |  libraries.towson.edu<http://www.towson.edu/https:/libraries.towson.edu>
 —

Confidentiality Notice: This message may contain information that is confidential, privileged, proprietary, or otherwise legally exempt from disclosure. If you are not the intended recipient, you are notified that you are not authorized to read, print, copy or disseminate this message, any part of it, or any attachments. If this message has been sent to you in error, please notify the sender by replying to this transmission, or by calling Albert S. Cook Library at 410-704-3340 .

From: archivesspace_users_group-bounces at lyralists.lyrasis.org <archivesspace_users_group-bounces at lyralists.lyrasis.org> on behalf of Brian Hoffman <brian.hoffman at lyrasis.org>
Date: Thursday, August 3, 2023 at 2:41 PM
To: Archivesspace Users Group <archivesspace_users_group at lyralists.lyrasis.org>
Subject: Re: [Archivesspace_Users_Group] Updated from v3.3.1 to v3.4.0, LDAP syntax problems...

[ CAUTION: This email is from outside of TU. Use caution before clicking links or opening attachments. If suspicious, report to phishing at towson.edu. ]
Hi Eric,

I think this might be the result of a copy paste error. The :bind_dn entry begins with a single quote but there appears to be no closing quote and no final comma. Maybe do a visual comparison of that entry with your 3.3.1 config?

Brian

From: archivesspace_users_group-bounces at lyralists.lyrasis.org <archivesspace_users_group-bounces at lyralists.lyrasis.org> on behalf of Gadsby, Eric T. <egadsby at towson.edu>
Date: Thursday, August 3, 2023 at 2:29 PM
To: Archivesspace Users Group <archivesspace_users_group at lyralists.lyrasis.org>
Subject: [Archivesspace_Users_Group] Updated from v3.3.1 to v3.4.0, LDAP syntax problems...
Dear Friends,

I hope everybody is doing well. Today I updated to v3.4.0 from v3.3.1. Everything went well with the exception of our LDAP authentication. Aspace seems to be tripping over our LDAP configuration syntax when starting up and stopping. From the log:

"SyntaxError: /opt/archivesspace/config/config.rb:251: syntax error, unexpected tIDENTIFIER
                                         :bind_password => ‘REDACTED’,"

Given all of the changes to the config file I decided to paste our LDAP info from the old config in what I though was the right place. This is what that part of our config file looks like:

"#AppConfig[:staff_username] = "staff_system"
#
AppConfig[:authentication_sources] = [{

                                         :model => 'LDAPAuth',
                                         :hostname => 'ldap.towson.edu',
                                         :port => 389,
                                         :base_dn => 'dc=towson,dc=edu',
                                         :username_attribute => 'sAMAccountName',
                                         :attribute_map => {:cn => :name},
                                         :bind_dn => 'CN=srv-aspace-ldap\, srv-aspace-ldap s. (Archivespace (Library)),OU=Guests,OU=User Accounts$
                                         :bind_password => 'REDACTED',

}]
## When 'true' restrict authentication attempts to only the source already set for the user
#AppConfig[:authentication_restricted_by_source] = false # default: allow any source"

This LDAP configuration was provided to us by our enterprise identity management group and has worked in previous versions of Aspace. I have redacted the password here but it is only letters and numerals no special characters.

I am a little stuck. When I commented out the LDAP configuration then Aspace starts up but of course that means our staff can't log-in with their enterprise wide accounts. Any help would be appreciated, thanks in advance!

<http://www.towson.edu/>
<image001.jpg><http://www.towson.edu/>

Eric T. Gadsby
Pronouns: he/him/his
IT Operations Specialist  |  Albert S. Cook Library
—
P: 410-704-3340
egadsby at towson.edu<mailto:egadsby at towson.edu>  |  libraries.towson.edu<http://www.towson.edu/https:/libraries.towson.edu>
 —

Confidentiality Notice: This message may contain information that is confidential, privileged, proprietary, or otherwise legally exempt from disclosure. If you are not the intended recipient, you are notified that you are not authorized to read, print, copy or disseminate this message, any part of it, or any attachments. If this message has been sent to you in error, please notify the sender by replying to this transmission, or by calling Albert S. Cook Library at 410-704-3340 .

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lyralists.lyrasis.org/pipermail/archivesspace_users_group/attachments/20230803/f522efef/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 1826 bytes
Desc: image001.jpg
URL: <http://lyralists.lyrasis.org/pipermail/archivesspace_users_group/attachments/20230803/f522efef/attachment.jpg>