problema para vincular alfresco 3.3 comunity con AD

stevevr — Wed, 01 Dec 2010 17:44:00 GMT

Buenas Soy nuevo en la implementacion de alfresco, y estoy teniendo algunos problemas a la hora de vincularlo con el active directory de mi empresa, por lo que me gustaría contar con la ayuda de alguno de ustedes. Adjunto un log de lo que me indica la consola:11:21:32,801 Userystem ERROR [security

Re: problema para vincular alfresco 3.3 comunity con AD

mikel_asla1 — Tue, 14 Dec 2010 11:44:28 GMT

Muy buenas!
Para delegar la autenticación en un AD, debes de montar un subsystem de tipo ldap-ad o passthru, además de adaptar el authentication.chain
A primera vista tienes

Caused by: javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D

Lo que hace presuponer que alguna de las propiedades del subsystema esta fallando, ¿Nos puedes comentar un poco como lo has hecho?

Saludos

Re: problema para vincular alfresco 3.3 comunity con AD

stevevr — Tue, 14 Dec 2010 14:05:00 GMT

Gracias por la respuesta mikel, te comento, he estado siguiendo un tutorial en el que explicaban como editar los subsistemas, he intentado configurar el passthru y el ldap-ad poniendo los valores que asumo corresponden segun mi AD, de igual manera intente habilitar los CIF, el error del java naming ya lo pude corregir, sin embargo la sincronización sigue obteniendo 0 entradas, te adjunto el nuevo log:

14/12/2010 07:57:13 AM org.apache.coyote.http11.Http11Protocol init
INFO: Inicializando Coyote HTTP/1.1 en puerto http-8080
14/12/2010 07:57:13 AM org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 621 ms
14/12/2010 07:57:13 AM org.apache.catalina.core.StandardService start
INFO: Arrancando servicio Catalina
14/12/2010 07:57:13 AM org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/6.0.26
14/12/2010 07:57:13 AM org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Desplieque del descriptor de configuraci¾n alfresco.xml
14/12/2010 07:57:33 AM org.apache.catalina.core.StandardContext addApplicationLi
stener
INFO: El escuchador "org.apache.myfaces.webapp.StartupServletContextListener" ya
 estß configurado para este contexto. La definici¾n duplicada ha sido ignorada.
07:57:44,494  INFO  [alfresco.config.JndiPropertiesFactoryBean] Loading properti
es file from class path resource [alfresco/repository.properties]
07:57:44,573  INFO  [alfresco.config.JndiPropertiesFactoryBean] Loading properti
es file from class path resource [alfresco/domain/transaction.properties]
07:57:44,588  INFO  [alfresco.config.JndiPropertiesFactoryBean] Loading properti
es file from file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\
module\org_alfresco_module_dod5015\alfresco-global.properties]
07:57:44,588  INFO  [alfresco.config.JndiPropertiesFactoryBean] Loading properti
es file from file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\
module\test\alfresco-global.properties]
07:57:44,604  INFO  [alfresco.config.JndiPropertiesFactoryBean] Loading properti
es file from file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\
module\tests\alfresco-global.properties]
07:57:44,604  INFO  [alfresco.config.JndiPropertiesFactoryBean] Loading properti
es file from URL [file:/C:/Alfresco/tomcat/shared/classes/alfresco-global.proper
ties]
07:57:44,744  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading
properties file from class path resource [alfresco/alfresco-shared.properties]
07:58:08,729  WARN  [springframework.beans.GenericTypeAwarePropertyDescriptor] I
nvalid JavaBean property 'serviceBeans' being accessed! Ambiguous write methods
found next to actually used [public void org.apache.cxf.jaxrs.JAXRSServerFactory
Bean.setServiceBeans(java.lang.Object[])]: [public void org.apache.cxf.jaxrs.JAX
RSServerFactoryBean.setServiceBeans(java.util.List)]
07:58:10,666  INFO  [extensions.webscripts.TemplateProcessorRegistry] Registered
 template processor Repository Template Processor for extension ftl
07:58:10,666  INFO  [extensions.webscripts.ScriptProcessorRegistry] Registered s
cript processor Repository Script Processor for extension js
07:58:16,744  INFO  [domain.schema.SchemaBootstrap] Schema managed by database d
ialect org.hibernate.dialect.MySQLInnoDBDialect.
07:58:21,276  INFO  [domain.schema.SchemaBootstrap] No changes were made to the
schema.
07:58:23,785  INFO  [management.subsystems.ChildApplicationContextFactory] Start
ing 'sysAdmin' subsystem, ID: [sysAdmin, default]
07:58:23,831  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading
properties file from class path resource [alfresco/alfresco-shared.properties]
07:58:23,944  INFO  [management.subsystems.ChildApplicationContextFactory] Start
up of 'sysAdmin' subsystem, ID: [sysAdmin, default] complete
07:58:27,734  INFO  [management.subsystems.ChildApplicationContextFactory] Start
ing 'thirdparty' subsystem, ID: [thirdparty, default]
07:58:27,780  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading
properties file from class path resource [alfresco/alfresco-shared.properties]
07:58:29,119  INFO  [management.subsystems.ChildApplicationContextFactory] Start
up of 'thirdparty' subsystem, ID: [thirdparty, default] complete
07:58:29,119  INFO  [management.subsystems.ChildApplicationContextFactory] Start
ing 'OOoDirect' subsystem, ID: [OOoDirect, default]
07:58:29,164  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading
properties file from class path resource [alfresco/alfresco-shared.properties]
07:58:31,066  WARN  [alfresco.util.OpenOfficeConnectionTester] An initial OpenOf
fice connection could not be established.
07:58:31,066  INFO  [management.subsystems.ChildApplicationContextFactory] Start
up of 'OOoDirect' subsystem, ID: [OOoDirect, default] complete
07:58:33,456  INFO  [repo.admin.ConfigurationChecker] The Alfresco root data dir
ectory ('dir.root') is: C:\Alfresco\alf_data
07:58:33,578  INFO  [admin.patch.PatchExecuter] Checking for patches to apply ..
.
07:58:35,110  INFO  [admin.patch.PatchExecuter] No patches were required.
07:58:35,171 User:System INFO  [repo.module.ModuleServiceImpl] Found 3 module(s)
.
07:58:35,335 User:System INFO  [repo.module.ModuleServiceImpl] Starting module '
org_alfresco_module_dod5015' version 1.0.
07:58:36,009 User:System INFO  [repo.module.ModuleServiceImpl] Starting module '
org.alfresco.module.vti' version 1.2.
07:58:36,090 User:System INFO  [repo.module.ModuleServiceImpl] Starting module '
org.alfresco.module.quickr' version 1.0.
07:58:36,274  INFO  [management.subsystems.ChildApplicationContextFactory] Start
ing 'fileServers' subsystem, ID: [fileServers, default]
07:58:36,356  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading
properties file from class path resource [alfresco/alfresco-shared.properties]
07:58:37,336  INFO  [management.subsystems.ChildApplicationContextFactory] Start
ing 'Authentication' subsystem, ID: [Authentication, managed, passthru]
07:58:37,398  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading
properties file from class path resource [alfresco/alfresco-shared.properties]
07:58:38,439  INFO  [management.subsystems.ChildApplicationContextFactory] Start
up of 'Authentication' subsystem, ID: [Authentication, managed, passthru] comple
te
07:58:38,439  INFO  [management.subsystems.ChildApplicationContextFactory] Start
ing 'Authentication' subsystem, ID: [Authentication, managed, ldap-ad]
07:58:38,501  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading
properties file from class path resource [alfresco/alfresco-shared.properties]
07:58:38,664  INFO  [management.subsystems.ChildApplicationContextFactory] Start
up of 'Authentication' subsystem, ID: [Authentication, managed, ldap-ad] complet
e
07:58:38,889  INFO  [management.subsystems.ChildApplicationContextFactory] Start
up of 'fileServers' subsystem, ID: [fileServers, default] complete
07:58:38,889  INFO  [management.subsystems.ChildApplicationContextFactory] Start
ing 'imap' subsystem, ID: [imap, default]
07:58:38,909  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading
properties file from class path resource [alfresco/alfresco-shared.properties]
07:58:38,970  INFO  [management.subsystems.ChildApplicationContextFactory] Start
up of 'imap' subsystem, ID: [imap, default] complete
07:58:38,970  INFO  [management.subsystems.ChildApplicationContextFactory] Start
ing 'email' subsystem, ID: [email, outbound]
07:58:38,991  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading
properties file from class path resource [alfresco/alfresco-shared.properties]
07:58:39,093  INFO  [management.subsystems.ChildApplicationContextFactory] Start
up of 'email' subsystem, ID: [email, outbound] complete
07:58:39,093  INFO  [management.subsystems.ChildApplicationContextFactory] Start
ing 'email' subsystem, ID: [email, inbound]
07:58:39,134  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading
properties file from class path resource [alfresco/alfresco-shared.properties]
07:58:39,195  WARN  [springframework.beans.GenericTypeAwarePropertyDescriptor] I
nvalid JavaBean property 'blockedSenders' being accessed! Ambiguous write method
s found next to actually used [public void org.alfresco.email.server.EmailServer
.setBlockedSenders(java.lang.String)]: [public void org.alfresco.email.server.Em
ailServer.setBlockedSenders(java.util.List)]
07:58:39,195  WARN  [springframework.beans.GenericTypeAwarePropertyDescriptor] I
nvalid JavaBean property 'allowedSenders' being accessed! Ambiguous write method
s found next to actually used [public void org.alfresco.email.server.EmailServer
.setAllowedSenders(java.util.List)]: [public void org.alfresco.email.server.Emai
lServer.setAllowedSenders(java.lang.String)]
07:58:39,256  INFO  [management.subsystems.ChildApplicationContextFactory] Start
up of 'email' subsystem, ID: [email, inbound] complete
07:58:39,256  INFO  [management.subsystems.ChildApplicationContextFactory] Start
ing 'googledocs' subsystem, ID: [googledocs, default]
07:58:39,359  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading
properties file from class path resource [alfresco/alfresco-shared.properties]
07:58:39,726  INFO  [management.subsystems.ChildApplicationContextFactory] Start
up of 'googledocs' subsystem, ID: [googledocs, default] complete
07:58:39,726  INFO  [repo.usage.UserUsageTrackingComponent] Enabled - calculate
missing user usages …
07:58:39,787  INFO  [repo.usage.UserUsageTrackingComponent] Found 0 users to rec
alculate
07:58:39,787  INFO  [repo.usage.UserUsageTrackingComponent] … calculated missi
ng usages for 0 users
07:58:39,787  INFO  [management.subsystems.ChildApplicationContextFactory] Start
ing 'Synchronization' subsystem, ID: [Synchronization, default]
07:58:39,828  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading
properties file from class path resource [alfresco/alfresco-shared.properties]
07:58:39,890 User:System INFO  [security.sync.ChainingUserRegistrySynchronizer]
Synchronizing users and groups with user registry 'ldap-ad'
07:58:39,910 User:System INFO  [security.sync.ChainingUserRegistrySynchronizer]
Retrieving all groups from user registry 'ldap-ad'
07:58:39,992 User:System INFO  [security.sync.ChainingUserRegistrySynchronizer]
ldap-ad Group Analysis: Commencing batch of 0 entries
07:58:39,992 User:System INFO  [security.sync.ChainingUserRegistrySynchronizer]
ldap-ad Group Analysis: Completed batch of 0 entries
07:58:39,992 User:System INFO  [security.sync.ChainingUserRegistrySynchronizer]
Retrieving all users from user registry 'ldap-ad'
07:58:40,033 User:System INFO  [security.sync.ChainingUserRegistrySynchronizer]
ldap-ad User Creation and Association: Commencing batch of 0 entries
07:58:40,094 User:System INFO  [security.sync.ChainingUserRegistrySynchronizer]
ldap-ad User Creation and Association: Completed batch of 0 entries
07:58:40,094 User:System INFO  [security.sync.ChainingUserRegistrySynchronizer]
Finished synchronizing users and groups with user registry 'ldap-ad'
07:58:40,094 User:System INFO  [security.sync.ChainingUserRegistrySynchronizer]
0 user(s) and 0 group(s) processed
07:58:40,114  INFO  [management.subsystems.ChildApplicationContextFactory] Start
up of 'Synchronization' subsystem, ID: [Synchronization, default] complete
07:58:40,196  INFO  [service.descriptor.DescriptorService] Alfresco JVM - v1.6.0
_16-b01; maximum heap size 998.438MB
07:58:40,196  INFO  [service.descriptor.DescriptorService] Alfresco started (Com
munity): Current version 3.3.0 (g 2860) schema 4100 - Originally installed versi
on 3.3.0 (g 2860) schema 4100
07:58:53,871  INFO  [module.vti.VtiServer] Vti server started successfully on po
rt: 7070
07:59:16,999 User:System INFO  [extensions.webscripts.DeclarativeRegistry] Regis
tered 407 Web Scripts (+0 failed), 653 URLs
07:59:16,999 User:System INFO  [extensions.webscripts.DeclarativeRegistry] Regis
tered 2 Package Description Documents (+0 failed)
07:59:17,013 User:System INFO  [extensions.webscripts.DeclarativeRegistry] Regis
tered 1 Schema Description Documents (+0 failed)
07:59:17,013 User:System INFO  [extensions.webscripts.AbstractRuntimeContainer]
Initialised Repository Web Script Container (in 21630.305ms)
07:59:17,013  INFO  [extensions.webscripts.TemplateProcessorRegistry] Registered
 template processor freemarker for extension ftl
07:59:17,013  INFO  [extensions.webscripts.ScriptProcessorRegistry] Registered s
cript processor javascript for extension js
07:59:17,080  INFO  [management.subsystems.ChildApplicationContextFactory] Start
ing 'wcm_deployment_receiver' subsystem, ID: [wcm_deployment_receiver, default]
07:59:17,133  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading
properties file from class path resource [alfresco/alfresco-shared.properties]
07:59:17,348  INFO  [management.subsystems.ChildApplicationContextFactory] Start
up of 'wcm_deployment_receiver' subsystem, ID: [wcm_deployment_receiver, default
] complete
14/12/2010 07:59:18 AM org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Desplieque del descriptor de configuraci¾n host-manager.xml
14/12/2010 07:59:18 AM org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Desplieque del descriptor de configuraci¾n manager.xml
14/12/2010 07:59:19 AM org.apache.catalina.startup.HostConfig deployWAR
INFO: Despliegue del archivo share.war de la aplicaci¾n web
07:59:26,270  INFO  [extensions.webscripts.DeclarativeRegistry] Registered 268 W
eb Scripts (+0 failed), 276 URLs
07:59:26,270  INFO  [extensions.webscripts.DeclarativeRegistry] Registered 8 Pac
kage Description Documents (+0 failed)
07:59:26,270  INFO  [extensions.webscripts.DeclarativeRegistry] Registered 0 Sch
ema Description Documents (+0 failed)
07:59:26,523  INFO  [extensions.webscripts.AbstractRuntimeContainer] Initialised
 Spring Surf Container Web Script Container (in 3262.8193ms)
07:59:26,608  INFO  [extensions.webscripts.TemplateProcessorRegistry] Registered
 template processor freemarker for extension ftl
07:59:27,138  INFO  [extensions.webscripts.ScriptProcessorRegistry] Registered s
cript processor javascript for extension js
07:59:27,235  INFO  [extensions.webscripts.TemplateProcessorRegistry] Registered
 template processor freemarker for extension ftl
07:59:27,235  INFO  [extensions.webscripts.ScriptProcessorRegistry] Registered s
cript processor javascript for extension js
07:59:27,356  INFO  [extensions.webscripts.TemplateProcessorRegistry] Registered
 template processor freemarker for extension ftl
07:59:27,368  INFO  [extensions.webscripts.ScriptProcessorRegistry] Registered s
cript processor javascript for extension js
14/12/2010 07:59:28 AM org.apache.catalina.startup.HostConfig deployDirectory
INFO: Despliegue del directorio docs de la aplicaci¾n web
14/12/2010 07:59:28 AM org.apache.catalina.startup.HostConfig deployDirectory
INFO: Despliegue del directorio examples de la aplicaci¾n web
14/12/2010 07:59:29 AM org.apache.coyote.http11.Http11Protocol start
INFO: Arrancando Coyote HTTP/1.1 en puerto http-8080
14/12/2010 07:59:29 AM org.apache.catalina.startup.Catalina start
INFO: Server startup in 131566 ms‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

de igual manera te comento los ficheros que he editado, serian: el web-client-config.xml, el file-servers.properties, web.xml, passthru-authentication-context.xml, alfresco-global.properties, webscript-framework-config-custom.xml, passthru-authentication-context.properties, ldap-ad-authentication.properties.

Ta agredezco la ayuda.

Re: problema para vincular alfresco 3.3 comunity con AD

mikel_asla1 — Wed, 05 Jan 2011 09:08:20 GMT

Muy buenas,
He estado liado ultimamente, seguramente ya lo has descubierto pero, por si acaso, retomemos.
Cuando el la sincronización se obtienen 0 resultados el problema suele estar en la query que realiza Alfresco para encontrar los usuarios que "se trae". Bien, pues haciendo pruebas con el ldapsearch, a veces descubres cosas curiosas, como que Alfresco no debe de usar ldapsearch :lol:
En estructuras simples es posible que poniendo un asterisco salgamos del paso, pero lo mejor es mirar con un ldapbrowser los objectclass que tienemos disponibles para usuarios/grupos y probar hasta dar con el adecuado.

Estas son las propiedades
ldap.synchronization.personQuery
ldap.synchronization.groupQuery

Para verlo bien, pon esto en <TOMCAT_HOME/webapps/WEB-INF/classes/alfresco/log4j.properties

log4j.logger.org.alfresco.repo.security.sync=debug
log4j.logger.org.alfresco.repo.security.authentication.ldap=debug

Así podrás ver que se sincroniza y cuándo. También observa que se crean xml con los resultados en temp.
Ya nos cuentas como va.

Re: problema para vincular alfresco 3.3 comunity con AD

stevevr — Tue, 25 Jan 2011 19:08:47 GMT

Mikel, en primer lugar quiero agradecerte mucho por la ayuda brindada, ha sido un éxito, y en realidad tenias razón, por estarme poniendo a seguir varios tutoriales, cambie muchas veces los valores de las consultas, pero ya estan corregidos y si bien no me realizo la migración por grupos como lo pretendía, al menos lo realizo por usuarios.
el unico problema que tengo ahora es que pareciera el el CIF no me esta trabajando y no puedo ponerlo como unidad de red agradeceria mucho si por casualidad supieras como corregir eso, pero por el momento ya la parte de la sincronizacion se puede decir que esta cubierta.
Mil gracias por toda la atencion.

topic Re: problema para vincular alfresco 3.3 comunity con AD in Alfresco Archive

problema para vincular alfresco 3.3 comunity con AD

Re: problema para vincular alfresco 3.3 comunity con AD

Re: problema para vincular alfresco 3.3 comunity con AD

Re: problema para vincular alfresco 3.3 comunity con AD

Re: problema para vincular alfresco 3.3 comunity con AD