topic Configurazione LDAP in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/configurazione-ldap/m-p/23856#M11584 <HTML><HEAD></HEAD><BODY><SPAN>Buongiorno sono un nuovo iscritto al forum in Italiano di Alfresco.</SPAN><BR /><SPAN>Ho un probelma devo configurare ldap per alfresco per cui ho modificato il seguenti file xml:</SPAN><BR /><UL><STRONG>ldap-authentication-context.xml</STRONG><BR />commentato il segunete codice per abilitare solo ldap<BR />&lt;!– DAO that rejects changes - LDAP is read only at the moment. It does allow users to be deleted with out warnings from the UI. –&gt;<BR />&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp; &lt;!– &lt;bean name="authenticationDao" class="org.alfresco.repo.security.authentication.DefaultMutableAuthenticationDao" &gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;property name="allowDeleteUser"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;value&gt;true&lt;/value&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp; &lt;/bean&gt;&nbsp;&nbsp;&nbsp; –&gt;<BR /><STRONG>ldap-authentication.properties</STRONG><BR /> Editato le voci in grassetto<BR />ldap.authentication.userNameFormat=<STRONG>CN=%s,DC=provincia,DC=sassari,DC=loc</STRONG><BR /><BR /># The LDAP context factory to use<BR />ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory<BR /><BR /># The URL to connect to the LDAP server <BR />ldap.authentication.java.naming.provider.url=<STRONG>ldap://172.16.0.170:389</STRONG><BR /><BR /># The authentication mechanism to use<BR />ldap.authentication.java.naming.security.authentication=SIMPLE<BR /><BR /># The default principal to use (only used for LDAP sync)<BR />ldap.authentication.java.naming.security.principal=<STRONG>user@mioDomino</STRONG><BR /><BR /># The password for the default principal (only used for LDAP sync)<BR />ldap.authentication.java.naming.security.credentials=<STRONG>passMioDominio</STRONG><BR /><BR /># Escape commas entered by the user at bind time<BR /># Useful when using simple authentication and the CN is part of the DN and contains commas<BR />ldap.authentication.escapeCommasInBind=false<BR /><BR />altro file<BR /><STRONG>ldap-synchronisation.properties</STRONG><BR /># The query to find the people to import<BR />ldap.synchronisation.personQuery=(objectclass=inetOrgPerson)<BR /><BR /># The search base of the query to find people to import<BR />ldap.synchronisation.personSearchBase=<STRONG>DC=provincia,DC=sassari,DC=loc</STRONG><BR /><BR /># The attribute name on people objects found in LDAP to use as the uid in Alfresco<BR />ldap.synchronisation.userIdAttributeName=uid<BR /><BR /># The attribute on person objects in LDAP to map to the first name property in Alfresco<BR />ldap.synchronisation.userFirstNameAttributeName=givenName<BR /><BR /># The attribute on person objects in LDAP to map to the last name property in Alfresco<BR />ldap.synchronisation.userLastNameAttributeName=sn<BR /><BR /># The attribute on person objects in LDAP to map to the email property in Alfresco<BR />ldap.synchronisation.userEmailAttributeName=mail<BR /><BR /># The attribute on person objects in LDAP to map to the organizational id&nbsp; property in Alfresco<BR />ldap.synchronisation.userOrganizationalIdAttributeName=o<BR /><BR /># The default home folder provider to use for people created via LDAP import<BR />ldap.synchronisation.defaultHomeFolderProvider=personalHomeFolderProvider<BR /><BR /># The query to find group objects<BR />ldap.synchronisation.groupQuery=(objectclass=groupOfNames)<BR /><BR /># The search base to use to find group objects<BR />ldap.synchronisation.groupSearchBase=<STRONG>DC=provincia,DC=sassari,DC=loc</STRONG><BR /><BR /># The attribute on LDAP group objects to map to the gid property in Alfrecso<BR />ldap.synchronisation.groupIdAttributeName=CN<BR /><BR /><BR />infine editato il file <STRONG>file-servers-custom.xml</STRONG><BR />aggiungendo il seguente codice<BR />&lt;config evaluator="string-compare" condition="CIFS Server"&nbsp; <BR />&nbsp;&nbsp;&nbsp; replace="true"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;serverEnable enabled="false"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;host name="172.16.0.2" domain="provincia"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;comment&gt;Alfresco CIFS Server&lt;/comment&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– Set to the broadcast mask for the subnet –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;broadcast&gt;255.255.252.0&lt;/broadcast&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– Use Java socket based NetBIOS over TCP/IP and <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; native SMB<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; on linux –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;tcpipSMB platforms="linux,solaris,macosx"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;netBIOSSMB platforms="linux,solaris,macosx"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– Can be mapped to non-privileged ports, <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; then use firewall <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; rules to forward requests from the standard ports –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!–&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;tcpipSMB port="1445" platforms="linux,solaris,macosx"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;netBIOSSMB sessionPort="1139" namePort="1137"<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; datagramPort="1138" platforms="linux,solaris,macosx"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; –&gt;<BR /> <BR />&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;hostAnnounce interval="5"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– Use Win32 NetBIOS interface on Windows –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Win32NetBIOS/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Win32Announce interval="5"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– CIFS authentication –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;authenticator type=" passthru "&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;LocalDomain/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/authenticator&gt;<BR /> <BR />&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!–<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;WINS&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;primary&gt;1.2.3.4&lt;/primary&gt;<BR /><BR />&lt;secondary&gt;5.6.7.8&lt;/secondary&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/WINS&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;sessionDebug flags="Negotiate,Socket"/&gt;<BR />&nbsp;&nbsp; &lt;/config&gt;<BR /> <BR />&nbsp;&nbsp; <BR />&nbsp; &lt;config evaluator="string-compare" condition="FTP Server" <BR />&nbsp;&nbsp; replace="true"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;serverEnable enabled="false"/&gt;&nbsp; <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– Run on a non-privileged port –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!–<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;port&gt;1121&lt;/port&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– FTP authentication –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;authenticator type="alfresco"/&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!–&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;debug<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; flags="File,Search,Error,Directory,Info,DataPort"/&gt; –&gt;<BR />&nbsp;&nbsp; &lt;/config&gt;<BR /> <BR />&nbsp;&nbsp; <BR />&lt;config evaluator="string-compare" condition="Filesystem Security"&nbsp; <BR /> replace="true"&gt;<BR />&nbsp;&nbsp;&nbsp; &lt;authenticator type=" passthru "&gt; <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– the name of your ldap server&nbsp; – &gt;&nbsp;&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Server&gt; 172.16.0.170&lt;/Server&gt; <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/authenticator&gt;<BR />&nbsp;&nbsp; &lt;/config&gt;<BR /><BR />Per Concludere ho fatto diverse prove, arrivo alla pagina di login ma non accedo ad Alfresco.<BR />Sembrerebbe un problema di sincronizzazione.</UL></BODY></HTML> Mon, 24 Aug 2009 06:43:20 GMT d_brugo 2009-08-24T06:43:20Z Configurazione LDAP https://connect.hyland.com/t5/alfresco-archive/configurazione-ldap/m-p/23856#M11584 Buongiorno sono un nuovo iscritto al forum in Italiano di Alfresco.Ho un probelma devo configurare ldap per alfresco per cui ho modificato il seguenti file xml:ldap-authentication-context.xmlcommentato il segunete codice per abilitare solo ldap&lt;!– DAO that rejects changes - LDAP is read only at t Mon, 24 Aug 2009 06:43:20 GMT https://connect.hyland.com/t5/alfresco-archive/configurazione-ldap/m-p/23856#M11584 d_brugo 2009-08-24T06:43:20Z Re: Configurazione LDAP https://connect.hyland.com/t5/alfresco-archive/configurazione-ldap/m-p/23857#M11585 <HTML><HEAD></HEAD><BODY><SPAN>Una prova che puoi fare subito è quella di cambiare questa property per lo userId:</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />ldap.synchronisation.userIdAttributeName=cn<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE></BODY></HTML> Mon, 14 Sep 2009 10:03:39 GMT https://connect.hyland.com/t5/alfresco-archive/configurazione-ldap/m-p/23857#M11585 openpj 2009-09-14T10:03:39Z