topic Ldap with Access Manager -Sun Portal in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/ldap-with-access-manager-sun-portal/m-p/160280#M114261 <HTML><HEAD></HEAD><BODY><SPAN>I have problem with importing users from the LDAP&nbsp; Access Manger. I've tryed several ways. I think some parameter is not ok but I can I be sure to bring the right value from access manager? It's not so clear! where I can find the right&nbsp; java.naming.security.principal and how to configure it? I have ldap administrator but I also have simple access administrator. Should I use cn or uid?</SPAN><BR /><SPAN>When I get infomation in my Sun System access Manager I find the following Ldp service configuration</SPAN><BR /><SPAN>Primary LDAP Server:sunportal.ptqs-int.it:389</SPAN><BR /><SPAN>DN to Start User Search:dc=ptqs-int,dc=it</SPAN><BR /><SPAN>DN for Root User Bind:cn=amldapuser,ou=DSAME Users,dc=ptqs-int,dc=it</SPAN><BR /><SPAN>Attribute Used to Retrieve User Profile:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; uid</SPAN><BR /><SPAN>Attributes Used to Search for a User to be Authenticated: uid</SPAN><BR /><SPAN>Return User DN to Authenticate:&nbsp;&nbsp; flagged</SPAN><BR /><SPAN>LDAP Server Check Interval: 15</SPAN><BR /><SPAN>Authentication Level: 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </SPAN><BR /><BR /><BR /><SPAN>Here is my ldap-authentication-context.xml:</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />&lt;?xml version='1.0' encoding='UTF-8'?&gt;<BR />&lt;!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' '<A href="http://www.springframework.org/dtd/spring-beans.dtd" rel="nofollow noopener noreferrer">http://www.springframework.org/dtd/spring-beans.dtd</A>'&gt;<BR />&lt;beans&gt;<BR /><BR /><BR />&nbsp;&nbsp;&nbsp; &lt;bean id="ldapInitialDirContextFactory" class="org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextFactoryImpl"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;property name="initialDirContextEnvironment"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;map&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– The LDAP provider –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;entry key="java.naming.factory.initial"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;value&gt;com.sun.jndi.ldap.LdapCtxFactory&lt;/value&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/entry&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;entry key="java.naming.provider.url"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;value&gt;ldap://sunportal.ptqs-int.it:389&lt;/value&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/entry&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;entry key="java.naming.security.authentication"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;value&gt;DIGEST-MD5&lt;/value&gt;&nbsp; <BR />&nbsp;&nbsp;&nbsp;&lt;/entry&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;entry key="java.naming.security.principal"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;value&gt;cn=amldapuser,ou=DSAME Users&lt;/value&gt;&nbsp; <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!–&nbsp; &lt;value&gt;cn=amadmin,dc=ptqs-int,dc=it&lt;/value&gt;&nbsp;&nbsp; –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/entry&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;entry key="java.naming.security.credentials"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;value&gt;ptqsadmin&lt;/value&gt; <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/entry&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/map&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/property&gt;<BR />&nbsp;&nbsp; &lt;/bean&gt;<BR />&lt;/beans&gt;<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><BR /><SPAN>Here is what it gives me -only INFO:</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE><BR />6-ago-2008 9.10.34 org.apache.catalina.startup.HostConfig deployWAR<BR />INFO: Deploying web application archive alfresco.war<BR />09:11:35,224 INFO&nbsp; [alfresco.mbeans.VirtServerRegistry] Creating VirtServerRegis<BR />try MBean<BR />09:11:36,240 WARN&nbsp; [remoting.rmi.RmiRegistryFactoryBean] Could not detect RMI re<BR />gistry - creating new one<BR />09:11:36,458 INFO&nbsp; [alfresco.mbeans.VirtServerRegistry] Created JMX serverConnec<BR />tor<BR />09:11:36,568 DEBUG [security.authentication.ldap] preRegister called. Server=com<BR />.sun.jmx.mbeanserver.JmxMBeanServer@fe861, name=log4j:logger=org.alfresco.repo.s<BR />ecurity.authentication.ldap<BR />09:11:49,124 INFO&nbsp; [authentication.ldap.LDAPInitialDirContextFactoryImpl] [b]LDAP s<BR />erver does not fall back to anonymous bind for a string uid and password at ldap<BR />://sunportal.ptqs-int.it:389<BR />09:11:49,217 INFO&nbsp; [authentication.ldap.LDAPInitialDirContextFactoryImpl] LDAP s<BR />erver does not fall back to anonymous bind for a simple dn and password at ldap:<BR />//sunportal.ptqs-int.it:389<BR />09:11:49,280 INFO&nbsp; [authentication.ldap.LDAPInitialDirContextFactoryImpl] LDAP s<BR />erver does not fall back to anonymous bind for known principal and invalid crede<BR />ntials at ldap://sunportal.ptqs-int.it:389 [/b]<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><SPAN>thank anyone can help me! Elisabetta</SPAN></BODY></HTML> Wed, 06 Aug 2008 07:47:25 GMT elisabetta 2008-08-06T07:47:25Z Ldap with Access Manager -Sun Portal https://connect.hyland.com/t5/alfresco-archive/ldap-with-access-manager-sun-portal/m-p/160280#M114261 I have problem with importing users from the LDAP&nbsp; Access Manger. I've tryed several ways. I think some parameter is not ok but I can I be sure to bring the right value from access manager? It's not so clear! where I can find the right&nbsp; java.naming.security.principal and how to configure it? I have Wed, 06 Aug 2008 07:47:25 GMT https://connect.hyland.com/t5/alfresco-archive/ldap-with-access-manager-sun-portal/m-p/160280#M114261 elisabetta 2008-08-06T07:47:25Z Re: Ldap with Access Manager -Sun Portal https://connect.hyland.com/t5/alfresco-archive/ldap-with-access-manager-sun-portal/m-p/160281#M114262 <HTML><HEAD></HEAD><BODY><SPAN>this is my ldif from Softerra:</SPAN><BR /><BR /><SPAN>dn: cn=amldapuser,ou=DSAME Users,dc=ptqs-int,dc=it</SPAN><BR /><SPAN>objectClass: inetuser</SPAN><BR /><SPAN>objectClass: organizationalperson</SPAN><BR /><SPAN>objectClass: person</SPAN><BR /><SPAN>objectClass: top</SPAN><BR /><SPAN>cn: amldapuser</SPAN><BR /><SPAN>sn: amldapuser</SPAN><BR /><SPAN>userPassword: {SSHA}QyDHeNY+xrKjTHIaS8ofvD5/lBOuYRNLc3mkMQ==</SPAN><BR /><BR /><BR /><SPAN>maybe problem is SSHA ?</SPAN></BODY></HTML> Thu, 07 Aug 2008 10:33:15 GMT https://connect.hyland.com/t5/alfresco-archive/ldap-with-access-manager-sun-portal/m-p/160281#M114262 elisabetta 2008-08-07T10:33:15Z