topic Re: How do I integrate Alfresco on JBoss with Active Directory? in Alfresco Archive

How do I integrate Alfresco on JBoss with Active Directory?

proxyprodigy — Wed, 30 Apr 2008 14:45:08 GMT

Sorry guys. I've gone thru pretty much all of the threads on this forum with no luck. I've also gone thru the Wiki which doesn't make much sense to me. I have Alfresco running on JBoss on a Linux server. I need a simple site with step-by-step instructions for integrating Active Directory authenticat

Re: How do I integrate Alfresco on JBoss with Active Directory?

curious_george — Wed, 30 Apr 2008 17:37:22 GMT

The wiki isn't perfect, but we've got a workable setup with precisely the kind of environment you have.

What specific errors have you been running into? Let us know.

See this page: http://wiki.alfresco.com/wiki/Configuring_NTLM

I did not change the web.xml (we didn't want NTLM) but I did use the NTLM Passthru Authentication instructions to authentication our Active Directory instead of the Alfresco user database. I hope this helps.

Re: How do I integrate Alfresco on JBoss with Active Directory?

proxyprodigy — Wed, 30 Apr 2008 18:55:22 GMT

Cool. That looks like it will be what I need. Thanks again.

Re: How do I integrate Alfresco on JBoss with Active Directory?

proxyprodigy — Wed, 30 Apr 2008 18:57:03 GMT

As for my errors, the only error I've seen so far is "Authentication Credentials Not Found: A valid SecureContext was not provided in the RequestContext."

Re: How do I integrate Alfresco on JBoss with Active Directory?

curious_george — Wed, 30 Apr 2008 20:38:42 GMT

You can get that error if using NTLM to automatically authenticate against the LDAP, and KeepAlive is turned off. Turn KeepAlive on in Apache httpd. Otherwise you will get that message in IE - It might work in Firefox.

Re: How do I integrate Alfresco on JBoss with Active Directory?

proxyprodigy — Thu, 01 May 2008 19:00:49 GMT

First off, thanks for all you guys' help.

I got my Alfresco authenticating with Active Directory. However, I can only get it to authenticate by typing in the CN value like this:
CN=The Proxy Prodigy,DC=server,DC=com

I have to enter "The Proxy Prodigy" into the login form with the space between the words. I need it to authenticate with the sAMAccountName so that I only have to type in the username such as "ProxyProdigy". I've changed the personQuery to use (objectclass=user), userIdAttributeName to use sAMAccountName, and so on… But, I still have to enter my CN instead of the actual sAMAccountName. Any ideas? Thanks again for your help.

Re: How do I integrate Alfresco on JBoss with Active Directory?

curious_george — Thu, 01 May 2008 21:38:46 GMT

Hmm, did you map the cm:userName atteribute to the sAMAccountName? Also, is your searchBase set correctly? We are also using (objectclass=user) and sAMAccountName for those elements, and we can authenticate with sAMAccountName.

Re: How do I integrate Alfresco on JBoss with Active Directory?

proxyprodigy — Fri, 02 May 2008 11:46:40 GMT

Yep. My searchBase is correct & my cm:userName = sAMAccountName. I'm using Simple instead of DIGEST-MD5. Do you think that could have anything to do with it? I think I read somewhere on this forum that you have to use DIGEST-MD5 for getting the sAMAccountName. But, when I use DIGEST-MD5, I can't authenticate anything. At least with Simple I can authenticate the DN.

Re: How do I integrate Alfresco on JBoss with Active Directory?

curious_george — Mon, 05 May 2008 18:43:24 GMT

Can you post your ldap-authentication-context.xml file? Don't forget to scrub out the sensitive information.

Re: How do I integrate Alfresco on JBoss with Active Directory?

janeerdekens — Thu, 23 Oct 2008 17:01:53 GMT

I'm working in an AD domain example.com and I'm able to log in with the sAMAccountName if I specify the following userNameFormat '%s@example.com' in my chaining-authentication-context.xml.