Question

在与LDAP和SpagoBI 4.1.0集成时遇到角色设置问题，我可以登录但无法通过LDAP设置用户角色。

我的LDAP xml设置如下

<?xml version="1.0" encoding="ISO-8859-1"?>

<!--  SERVER -->
<HOST>********</HOST>
<PORT>389</PORT>    
<ADMIN_USER>********</ADMIN_USER>
<ADMIN_PSW>******</ADMIN_PSW> <!-- password in clear text -->
<BASE_DN>DC=***,DC=com</BASE_DN> <!-- base domain, if any -->

<!-- USERS -->
<USER_SEARCH_PATH>ou=People</USER_SEARCH_PATH> <!-- SpagoBI will look for users under this node -->
<USER_OBJECT_CLASS>applUser</USER_OBJECT_CLASS> <!-- class for users' objects -->
<USER_ID_ATTRIBUTE_NAME>uid</USER_ID_ATTRIBUTE_NAME> <!-- name of the attribute containing the user identifier -->
 <!-- name of the attribute(*) containing the user name -->
<USER_NAME_ATTRIBUTE_NAME>cn</USER_NAME_ATTRIBUTE_NAME>
<!-- (*) SPAGOBI attribute, not LDAP attribute!!! It must match the "name" attribute of one USER_ATTRIBUTE tag below -->
<USER_MEMBEROF_ATTRIBUTE_NAME>memberOf</USER_MEMBEROF_ATTRIBUTE_NAME> <!-- this attribute has to contain the list of groups the user belongs to -->

<!-- list of the users' attributes to be loaded when querying the LDAP -->
<USER_ATTRIBUTE name="uid">uid</USER_ATTRIBUTE> <!-- LDAP attribute to be considered as SpagoBI attribute -->
<USER_ATTRIBUTE name="cn">cn</USER_ATTRIBUTE> 
<USER_ATTRIBUTE name="memberOf">memberOf</USER_ATTRIBUTE>

<!-- GROUPS -->
<GROUP_SEARCH_PATH>ou=Groups</GROUP_SEARCH_PATH> <!-- SpagoBI will look for groups under this node -->
<GROUP_OBJECT_CLASS>groupOfNames</GROUP_OBJECT_CLASS> <!-- class for groups' objects -->
<GROUP_ID_ATTRIBUTE_NAME>cn</GROUP_ID_ATTRIBUTE_NAME> <!-- the attribute containing the name of the group -->
<GROUP_MEMBERS_ATTRIBUTE_NAME>member</GROUP_MEMBERS_ATTRIBUTE_NAME>

<GROUP_ATTRIBUTE name="cn">cn</GROUP_ATTRIBUTE>
<GROUP_ATTRIBUTE name="member">member</GROUP_ATTRIBUTE>
<ACCESS_GROUP_NAME>icilszx</ACCESS_GROUP_NAME> <!-- Access group name: if specified, users must belong to this group in order to enter SpagoBI -->
  <!-- this attribute has to contain the list of users belonging to this group, in case the ACCESS_GROUP_NAME is specified -->

欣赏某人可以给我一些想法。

Answer 1

<GROUP_SEARCH_PATH>ou=Groups</GROUP_SEARCH_PATH>  这一行ou = ou的名字因为我不确定你的名字是否为

<GROUP_OBJECT_CLASS>groupOfNames</GROUP_OBJECT_CLASS>  这一行我使用groupOfUniqueNames

<GROUP_MEMBERS_ATTRIBUTE_NAME>member</GROUP_MEMBERS_ATTRIBUTE_NAME>

此行您需要输入ou name，因为您希望此组中的用户可以访问或空白以进行测试

集成SpagoBI和LDAP时无法设置用户角色

1 个答案: