Project

General

Profile

Bug #3104

provide accessor for organization lists for clients to build login widgets

Added by Matt Jones almost 12 years ago. Updated over 10 years ago.

Status:
New
Priority:
Normal
Category:
metacat
Target version:
Start date:
01/25/2008
Due date:
% Done:

0%

Estimated time:
Bugzilla-Id:
3104

Description

Logins for metacat have a username that is unique combined with an organization name that together are used to build a distinguished name (DN) for login. Metacat clients generally use a dropdown list for users to choose their organization, and then generate the DN to be sent to metacat. These client-based lists of organizations have propagated across all of our metacat client skins, morpho, ldapweb utilities, and other places, so it is very hard to keep them updated.

We need an access method in metacat (getOrganizationList) that will return a list of organizations to clients that want to build the dropdown list dynamically. Metacat should get the list by querying the LDAP server for the list of organizations so that additions of new organizations to LDAP will be automatically accessible to all clients.


Related issues

Blocked by Morpho - Bug #3121: Morpho dropdown choice for affilicated organization is different on mac, windows, and ubuntuResolved02/01/2008

Blocked by Metacat - Bug #3224: Perl code should rely on cannonical organization list provided by MetacatNew04/15/2008

Blocked by Metacat - Bug #3920: ldapweb should use the correct location for 'organization' propertiesNew03/26/2009

History

#1 Updated by ben leinfelder almost 12 years ago

benMac: check out metacat's "public class AuthLdap implements AuthInterface"
in "package edu.ucsb.nceas.metacat"
it does ldap look up - even has an existing method for getting a list of the groups

#2 Updated by ben leinfelder almost 12 years ago

One more thing to think about: does it make sense to provide an EcoGrid interface for getting these organizations? It seems quite LDAP-specific. But I don't think we want Kepler to directly interface with a Metacat instance.
I'd probably add it as an operation to the existing AuthenticationService.
If we want to do that, I'll add another bug to the SEEK project for that.

#3 Updated by Shaun Walbridge over 11 years ago

A couple of the organizations have slight customizations beyond just orgname + DN. The ones I've found in ldapweb.cfg are:

UCNRS ldapSearchBase: ou=people,o=ucnrs.org
MSU, UCNRS filter: <blank>
UCNRS dn: ou=People,o=ucnrs.org

#4 Updated by Redmine Admin over 6 years ago

Original Bugzilla ID was 3104

Also available in: Atom PDF