topic LDAP authentification / synchro (3.4) in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/ldap-authentification-synchro-3-4/m-p/150138#M105031 <HTML><HEAD></HEAD><BODY><SPAN>Bonjour à tous,</SPAN><BR /><BR /><SPAN>Encore un problème de configuration de LDAP me direz-vous… J'ai pourtant suivi la configuration du wiki (</SPAN><A href="http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#LDAP" rel="nofollow noopener noreferrer">http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#LDAP</A><SPAN>) et consulté d'autres liens Alfresco; mais voila ça ne fonctionne pas. Et je n'arrive pas à savoir si même il arrive à s'authentifier (cf log).</SPAN><BR /><BR /><SPAN>Extrait de mon LDAP</SPAN><BR /><PRE class="language-none line-numbers"><CODE>dn: dc=monDomaine,dc=fr<BR />objectClass: dcObject<BR />objectClass: organization<BR />dc: monDomaine<BR />o: monDomaine<BR /><BR />dn: ou=personnes,dc=monDomaine,dc=fr<BR />ou: personnes<BR />objectClass: organizationalUnit<BR />objectClass: top<BR /><BR />dn: uid=login,dc=monDomaine,dc=fr<BR />uid: login<BR />userPassword: {MD5}monMotDePasseCrypté<BR />objectClass: account<BR />objectClass: simpleSecurityObject<BR />objectClass: top<BR />structuralObjectClass: account<BR /><BR />dn: uid=toto,ou=personnes,dc=monDomaine,dc=fr<BR />objectClass: Personnes<BR />uid: toto<BR />sn: NomDeFamille<BR />givenName: Prénom<BR />userPassword: {MD5}sonMotDePasseCrypté<BR />cn: Prénom NomDeFamille<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><SPAN>Config de mon ldap-authentication.properties</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />ldap.authentication.active=true<BR />ldap.authentication.userNameFormat=uid\=%s,ou\=personnes,dc\=monDomaine,dc\=fr<BR />ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory<BR />ldap.authentication.java.naming.provider.url=ldap://ldap.IPSERVER:389<BR />ldap.authentication.java.naming.security.authentication=DIGEST-MD5<BR />ldap.authentication.escapeCommasInBind=false<BR />ldap.authentication.escapeCommasInUid=false<BR />ldap.authentication.defaultAdministratorUserNames=<BR />ldap.synchronization.active=true<BR /><BR /># The authentication mechanism to use for synchronization<BR />ldap.synchronization.java.naming.security.authentication=DIGEST-MD5<BR /><BR /># The default principal to use (only used for LDAP sync)<BR />ldap.synchronization.java.naming.security.principal=uid\=monLogin<BR /><BR /># The password for the default principal (only used for LDAP sync)<BR />ldap.synchronization.java.naming.security.credentials=monMotDePasseEnCLAIR<BR /><BR /># The query to select all objects that represent the users to import.<BR />ldap.synchronization.personQuery=(objectclass\=Personnes)<BR /><BR /># The user search base restricts the LDAP user query to a sub section of tree on the LDAP server.<BR />ldap.synchronization.userSearchBase=ou\=personnes,dc\=monDomaine,dc\=fr<BR /><BR /># The timestamp format. Unfortunately, this varies between directory servers.<BR />ldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'<BR /><BR /># The attribute name on people objects found in LDAP to use as the uid in Alfresco<BR />ldap.synchronization.userIdAttributeName=uid<BR /><BR /># The attribute on person objects in LDAP to map to the first name property in Alfresco<BR />ldap.synchronization.userFirstNameAttributeName=givenName<BR /><BR /># The attribute on person objects in LDAP to map to the last name property in Alfresco<BR />ldap.synchronization.userLastNameAttributeName=sn<BR /><BR /># The attribute on person objects in LDAP to map to the email property in Alfresco<BR />ldap.synchronization.userEmailAttributeName=mail<BR /><BR /># The attribute on person objects in LDAP to map to the organizational id&nbsp; property in Alfresco<BR />ldap.synchronization.userOrganizationalIdAttributeName=o<BR /><BR /># The default home folder provider to use for people created via LDAP import<BR />ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider<BR /><BR /># The attribute on LDAP group objects to map to the authority name property in Alfresco<BR />ldap.synchronization.groupIdAttributeName=cn<BR /><BR /># The attribute on LDAP group objects to map to the authority display name property in Alfresco<BR />ldap.synchronization.groupDisplayNameAttributeName=description<BR /><BR /># The group type in LDAP<BR />ldap.synchronization.groupType=groupOfNames<BR /><BR /># The person type in LDAP<BR />ldap.synchronization.personType=inetOrgPerson<BR /><BR /># The attribute in LDAP on group objects that defines the DN for its members<BR />ldap.synchronization.groupMemberAttributeName=member<BR /><BR /># If true progress estimation is enabled. When enabled, the user query has to be run twice in order to count entries.<BR />ldap.synchronization.enableProgressEstimation=true<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><SPAN>Enfin, le log associé.</SPAN><BR /><PRE class="language-none line-numbers"><CODE>14:22:58,207&nbsp; INFO&nbsp; [alfresco.config.JndiPropertiesFactoryBean] Loading properties file from file [C:\Alfresco\tomcat\shared\classes\alfresco\extension\subsystems\Authentication\ldap\ldap1\ldap-authentication.properties]<BR />14:23:24,286&nbsp; WARN&nbsp; [springframework.beans.GenericTypeAwarePropertyDescriptor] Invalid JavaBean property 'serviceBeans' being accessed! Ambiguous write methods found next to actually used [public void org.apache.cxf.jaxrs.JAXRSServerFactoryBean.setServiceBeans(java.lang.Object[])]: [public void org.apache.cxf.jaxrs.JAXRSServerFactoryBean.setServiceBeans(java.util.List)]<BR />14:23:28,458&nbsp; INFO&nbsp; [extensions.webscripts.TemplateProcessorRegistry] Registered template processor Repository Template Processor for extension ftl<BR />&nbsp;&nbsp; …blabla…<BR />14:23:54,443&nbsp; INFO&nbsp; [alfresco.config.FixedPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/module/<A href="http://org.alfresco.module.vti/context/vti.properties" rel="nofollow noopener noreferrer">org.alfresco.module.vti/context/vti.properties</A>]<BR />14:23:54,443&nbsp; INFO&nbsp; [alfresco.config.FixedPropertyPlaceholderConfigurer] Loading properties file from URL [file:/C:/Alfresco/tomcat/shared/classes/alfresco/extension/custom-vti.properties]<BR />14:23:54,599 User:System INFO&nbsp; [security.sync.ChainingUserRegistrySynchronizer] Synchronizing users and groups with user registry 'ldap1'<BR />14:23:54,615 User:System INFO&nbsp; [security.sync.ChainingUserRegistrySynchronizer] Retrieving all groups from user registry 'ldap1'<BR />14:23:54,678 User:System ERROR [security.sync.ChainingUserRegistrySynchronizer] Synchronization aborted due to error<BR />org.alfresco.error.AlfrescoRuntimeException: 03210000 User and group import failed<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1141)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.getGroups(LDAPUserRegistry.java:667)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.syncWithPlugin(ChainingUserRegistrySynchronizer.java:618)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.synchronize(ChainingUserRegistrySynchronizer.java:434)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer$6.doWork(ChainingUserRegistrySynchronizer.java:1529)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:508)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onBootstrap(ChainingUserRegistrySynchronizer.java:1523)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.extensions.surf.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:56)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:97)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:294)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ….<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <BR />Caused by: javax.naming.directory.InvalidSearchFilterException: Missing 'equals'; remaining name 'ou=Groups,dc=monDomaine,dc=fr'<BR />&nbsp;&nbsp;&nbsp;at com.sun.jndi.ldap.Filter.encodeSimpleFilter(Filter.java:305)<BR />&nbsp;&nbsp;&nbsp;at com.sun.jndi.ldap.Filter.encodeFilter(Filter.java:151)<BR />&nbsp;&nbsp;&nbsp;at com.sun.jndi.ldap.Filter.encodeFilterString(Filter.java:55)<BR />&nbsp;&nbsp;&nbsp;at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:520)<BR />&nbsp;&nbsp;&nbsp;at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1962)<BR />&nbsp;&nbsp;&nbsp;at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1824)<BR />&nbsp;&nbsp;&nbsp;at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1749)<BR />&nbsp;&nbsp;&nbsp;at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:368)<BR />&nbsp;&nbsp;&nbsp;at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:338)<BR />&nbsp;&nbsp;&nbsp;at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:321)<BR />&nbsp;&nbsp;&nbsp;at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:248)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1129)<BR />&nbsp;&nbsp;&nbsp;… 47 more<BR />14:23:54,740 User:System WARN&nbsp; [security.sync.ChainingUserRegistrySynchronizer] Failed initial synchronize with user registries<BR />org.alfresco.error.AlfrescoRuntimeException: 03210000 User and group import failed<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1141)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.getGroups(LDAPUserRegistry.java:667)<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><SPAN>Des points qui sont flous et qui pourraient peut-être être la source!</SPAN><BR /><SPAN>1. Dans le fichier properties, j'utilise une authentification 'DIGEST-MD5'. Je pense que cela correspond, puisque dans le LDAP le mot de passe est crypté et préfixé de {MD5}. Mais n'est ce pas un raccourcis que de penser ça?</SPAN><BR /><BR /><SPAN>2. Mes OU sont des 'personnes'. J'utilise donc : " ldap.synchronization.personQuery=(objectclass\=Personnes) " a plusieurs reprises. Cela est-il vraiment cohérent?</SPAN><BR /><BR /><SPAN>3. Voyez vous d'autres éléments qui pourraient m'aider?</SPAN><BR /><BR /><SPAN>4. Merci d'avoir lu jusqu'ici et pour vos futures réponses!!</SPAN><BR /><BR /><SPAN>Config : WinXP, Alfresco 3.4d, openLDAP 2.4.</SPAN></BODY></HTML> Thu, 21 Apr 2011 13:22:26 GMT j0han 2011-04-21T13:22:26Z LDAP authentification / synchro (3.4) https://connect.hyland.com/t5/alfresco-archive/ldap-authentification-synchro-3-4/m-p/150138#M105031 Bonjour à tous,Encore un problème de configuration de LDAP me direz-vous… J'ai pourtant suivi la configuration du wiki (http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#LDAP) et consulté d'autres liens Alfresco; mais voila ça ne fonctionne pas. Et je n'arrive pas à savoir si même il Thu, 21 Apr 2011 13:22:26 GMT https://connect.hyland.com/t5/alfresco-archive/ldap-authentification-synchro-3-4/m-p/150138#M105031 j0han 2011-04-21T13:22:26Z Re: LDAP authentification / synchro (3.4) https://connect.hyland.com/t5/alfresco-archive/ldap-authentification-synchro-3-4/m-p/150139#M105032 <HTML><HEAD></HEAD><BODY><SPAN>Quelques "progressions"…</SPAN><BR /><SPAN>Sachant que je me connecte en 'Simple' avec un LDAP Browser, j'ai remis 'simple' pour les modes d'authentification.</SPAN><BR /><BR /><SPAN>Que signifie concrètement ce warning du log ?</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE>WARN&nbsp; [springframework.beans.GenericTypeAwarePropertyDescriptor] Invalid JavaBean property 'serviceBeans' being accessed! Ambiguous write methods found next to actually used [public void org.apache.cxf.jaxrs.JAXRSServerFactoryBean.setServiceBeans(java.lang.Object[])]: [public void org.apache.cxf.jaxrs.JAXRSServerFactoryBean.setServiceBeans(java.util.List)]<BR />14:23:28,458&nbsp; INFO&nbsp; [extensions.webscripts.TemplateProcessorRegistry] Registered template processor Repository Template Processor for extension ftl<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>Auriez-vous une piste sur tout ça?</SPAN><BR /><SPAN>D'avance, merci !</SPAN></BODY></HTML> Fri, 22 Apr 2011 12:17:10 GMT https://connect.hyland.com/t5/alfresco-archive/ldap-authentification-synchro-3-4/m-p/150139#M105032 j0han 2011-04-22T12:17:10Z