[ckan-dev] ckan ldap configuration

[Divilly, David]

Hey Christian

I recently had to do the same on RHEL 6 , here's the extension I used: https://github.com/NaturalHistoryMuseum/ckanext-ldap/archive/master.zip
Unzip and copy the archive to : /path/to/ckan/default/src/ckan
Change directory into the folder:
Run the following:
sudo /path/to/ckan/default/bin/activate
sudo /path/to/ckan/default/bin/python setup.py develop

Then in you development.ini file add the following:

ckan.plugins = ... ldap

# Ldap plugin config items

ldap.uri = ldaps://ldaps.<your_mycompany>.com:<port_number>
ldap.auth.dn = uid=***,ou=***,o=****   - You should be able to query you LDAP schema for these values
ldap.auth.password = <ldap_pass>
ldap.base_dn = o=<your_company>
ldap.search.filter = uid={login}
ldap.username = uid
ldap.email = mail
ldap.ckan_fallback = True

The above may or may not work for you as I don't know your company's infrastructure, but this should be enough to get you started.

Regards,

David Divilly

From: ckan-dev [mailto:ckan-dev-bounces at lists.okfn.org] On Behalf Of Gerace, Christian [ITSUS]
Sent: Thursday, January 29, 2015 12:35 PM
To: ckan-dev at lists.okfn.org
Subject: [ckan-dev] ckan ldap configuration

Hey Community,

I recently set up a CKAN instance, v2.2.1, on an AWS server (running on RHEL 6) at my workplace, and am currently attempting to configure the instance to my LDAP. Has anyone successfully done this on a server running RHEL? If so, can you please provide guidance on how you went about doing this, and what extension you used.

Searching around I've found two extensions, but I've been unsuccessful with my attempt to configure either. Neither really provide much instructions except for the required packages and the variables that must be set in the config file. Ultimately, I'm not sure if my error is due to me not configuring the extensions right, or just incorrect ldap credentials. That is why I'm hoping someone could provide a little insight.

Thanks in advance,

Christian Gerace
Associate Analyst - Enterprise Architect
Johnson & Johnson | cgerace at its.jnj.com<mailto:cgerace at its.jnj.com>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.okfn.org/pipermail/ckan-dev/attachments/20150129/2c912c76/attachment-0003.html>