topic Re: Alfresco et l'authentification Active Directory in Alfresco Archive

Alfresco et l'authentification Active Directory

magellank2 — Fri, 09 Jul 2010 08:46:03 GMT

Bonjour,J'écris ce post un peu en désespoir de cause….J'ai lu des tonnes de post sur l'authentification AD avec Alfresco.J'ai fait des tonnes de tests pour finalement ne pas aboutir….C'est pourtant une fonctionnalité qui me semble indispensable et je n'ai trouvé aucun "howto" qui traite du sujet en

Re: Alfresco et l'authentification Active Directory

michaelh — Fri, 09 Jul 2010 14:39:04 GMT

Bonjour.

En fait il y a un piège.
C'est à vous de ne dire ce que vous avez fait, comment et ce que vous ne comprenez pas, de manière détaillée.

Sinon à part pointer vers les nombreux messages sur ce sujet, je ne vois pas comment on pourra vous aider.

Re: Alfresco et l'authentification Active Directory

magellank2 — Mon, 12 Jul 2010 12:08:21 GMT

Bonjour Michael et merci pour votre réponse.

Alors voici très précisément ce que j'ai fait (Alfresco 3.3 sur un Windows server 2003) :

1/
J'ai pris tout le contenu du répertoire des sous-systemes d’authentification standards :
C:/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication
Et je l'ai copié dans le répertoire chargé de recevoir les extensions personnalisées :
C:/Alfresco/tomcat/shared/classes/alfresco/extension/subsystems/Authentication

2/
J'ai supprimé les instances d’authentification qui ne seront pas personnalisées : toutes sauf « ldap-ad »

3/
J'ai créé le sous-répertoire devant recevoir l’instance ldap-ad1 personnalisée :
C:/Alfresco/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap-ad/ldap-ad1

4/
J'ai déplacé les fichiers « ldap-ad-authentication.properties » et « ldap-ad-authentication-context.xml »
dans le répertoire :
C:/Alfresco/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1

5/
J'ai déplacé le fichier « common-ldap-context.xml » dans le répertoire :
C:/Alfresco/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap-ad

6/
J'ai edité le fichier des properties générales Alfresco pour déclarer l’instance, son type et sa position
dans l’ordre des authentifications, dans ce cas d’abord authentification LDAP puis authentification
native Alfresco :
Localisation : C:/Alfresco/tomcat/shared/classes
Fichier : alfresco-global.properties
Paramètres ajoutés :
# Chaine authentification
# ldap1 : annuaire ldap du xxxxxxxx - voir fichier de propriete dans repertoire extension subsystem
# alfrescontml : laisse en suivant par defaut authentification alfresco
# http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems
#————-
#ldap.authentication.active=true
authentication.chain=ldap1:ldap,alfrescoNtlm:alfrescoNtlm

7/
Ensuite, j'ai paramétré l'instance LDAP en modifiant le fichier ldap-ad-authentication situé dans le répertoire ldap-ad1 :


# This flag enables use of this LDAP subsystem for authentication. It may be
# that this subsytem should only be used for synchronization, in which case
# this flag should be set to false.
ldap.authentication.active=true

#
# This properties file brings together the common options for LDAP authentication rather than editing the bean definitions
#
ldap.authentication.allowGuestLogin=true

# How to map the user id entered by the user to taht passed through to LDAP
# In Active Directory, this can either be the user principal name (UPN) or DN.
# UPNs are in the form <sAMAccountName>@domain and are held in the userPrincipalName attribute of a user
ldap.authentication.userNameFormat=%s@domain

# The LDAP context factory to use
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory

######################################################################################
# The URL to connect to the LDAP server 
#ldap.authentication.java.naming.provider.url=ldap://domaincontroller.company.com:389
ldap.authentication.java.naming.provider.url=ldap://srv-geb.mondomaine.fr:389

# The authentication mechanism to use
ldap.authentication.java.naming.security.authentication=simple

# Escape commas entered by the user at bind time
# Useful when using simple authentication and the CN is part of the DN and contains commas
ldap.authentication.escapeCommasInBind=false

# Escape commas entered by the user when setting the authenticated user
# Useful when using simple authentication and the CN is part of the DN and contains commas, and the escaped \, is 
# pulled in as part of an LDAP sync
# If this option is set to true it will break the default home folder provider as space names can not contain \
ldap.authentication.escapeCommasInUid=false

# Comma separated list of user names who should be considered administrators by default
ldap.authentication.defaultAdministratorUserNames=Administrator

# This flag enables use of this LDAP subsystem for user and group
# synchronization. It may be that this subsytem should only be used for 
# authentication, in which case this flag should be set to false.
ldap.synchronization.active=true

###########################################################################################
# The default principal to bind with (only used for LDAP sync). This should be a UPN or DN
#ldap.synchronization.java.naming.security.principal=alfresco@domain
ldap.synchronization.java.naming.security.principal=serv_alfresco@mondomaine.fr

###################################################################
# The password for the default principal (only used for LDAP sync)
ldap.synchronization.java.naming.security.credentials=dudule

# If positive, this property indicates that RFC 2696 paged results should be
# used to split query results into batches of the specified size. This
# overcomes any size limits imposed by the LDAP server.
ldap.synchronization.queryBatchSize=1000

# If positive, this property indicates that range retrieval should be used to fetch
# multi-valued attributes (such as member) in batches of the specified size.
# Overcomes any size limits imposed by Active Directory.        
ldap.synchronization.attributeBatchSize=1000

# The query to select all objects that represent the groups to import.
ldap.synchronization.groupQuery=(objectclass\=group)

# The query to select objects that represent the groups to import that have changed since a certain time.
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(modifyTimestamp<\={0})))

# The query to select all objects that represent the users to import.
ldap.synchronization.personQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))

# The query to select objects that represent the users to import that have changed since a certain time.
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp<\={0})))

# The group search base restricts the LDAP group query to a sub section of tree on the LDAP server.
#ldap.synchronization.groupSearchBase=ou\=Security Groups,ou\=Alfresco,dc=domain
ldap.synchronization.groupSearchBase=cn\=Admin,ou\=Alfresco,dc\=mondomaine,dc\=fr

# The user search base restricts the LDAP user query to a sub section of tree on the LDAP server.
#ldap.synchronization.userSearchBase=ou\=User Accounts,ou=\Alfresco,dc=20minutes,dc=fr
ldap.synchronization.userSearchBase=ou\=Utilisateurs,dc\=mondomaine,dc\=fr

# The name of the operational attribute recording the last update time for a group or user.
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp

# The timestamp format. Unfortunately, this varies between directory servers.
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'

# The attribute name on people objects found in LDAP to use as the uid in Alfresco
ldap.synchronization.userIdAttributeName=sAMAccountName

# The attribute on person objects in LDAP to map to the first name property in Alfresco
ldap.synchronization.userFirstNameAttributeName=givenName

# The attribute on person objects in LDAP to map to the last name property in Alfresco
ldap.synchronization.userLastNameAttributeName=sn

# The attribute on person objects in LDAP to map to the email property in Alfresco
ldap.synchronization.userEmailAttributeName=mail

# The attribute on person objects in LDAP to map to the organizational id  property in Alfresco
ldap.synchronization.userOrganizationalIdAttributeName=company

# The default home folder provider to use for people created via LDAP import
ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider

# The attribute on LDAP group objects to map to the authority name property in Alfresco
ldap.synchronization.groupIdAttributeName=cn

# The attribute on LDAP group objects to map to the authority display name property in Alfresco
ldap.synchronization.groupDisplayNameAttributeName=displayName

# The group type in LDAP
ldap.synchronization.groupType=group

# The person type in LDAP
ldap.synchronization.personType=user

# The attribute in LDAP on group objects that defines the DN for its members
ldap.synchronization.groupMemberAttributeName=member

# If true progress estimation is enabled. When enabled, the user query has to be run twice in order to count entries.
ldap.synchronization.enableProgressEstimation=true
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Résultat : Alfresco démarre correctement sans messages d'erreurs (plus vite que d'habitude d'ailleurs).
Mais je ne peux plus me logger (ni avec les comptes alfrescon ni avec les comptes de l'AD !

Une idée ?

Merci d'avance.

Re: Alfresco et l'authentification Active Directory

jeanjot — Mon, 12 Jul 2010 13:13:10 GMT

Bonjour

Pouvez-vous nous envoyer le contenu des log de catalina.out lors du démarrage d'alfresco ?

Re: Alfresco et l'authentification Active Directory

magellank2 — Mon, 12 Jul 2010 14:33:11 GMT

Bonjour,

Voici le log catalina (catalina.2010-07-12.log) :


12 juil. 2010 17:58:54 org.apache.coyote.http11.Http11Protocol init
INFO: Initialisation de Coyote HTTP/1.1 sur http-8080
12 juil. 2010 17:58:54 org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 630 ms
12 juil. 2010 17:58:54 org.apache.catalina.core.StandardService start
INFO: Démarrage du service Catalina
12 juil. 2010 17:58:54 org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/6.0.26
12 juil. 2010 17:58:54 org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Déploiement du descripteur de configuration alfresco.xml
12 juil. 2010 17:58:56 org.apache.catalina.core.StandardContext addApplicationListener
INFO: The listener "org.apache.myfaces.webapp.StartupServletContextListener" is already configured for this context. The duplicate definition has been ignored.
12 juil. 2010 17:59:47 org.apache.catalina.core.StandardContext start
GRAVE: Error listenerStart
12 juil. 2010 17:59:47 org.apache.catalina.core.StandardContext start
GRAVE: Erreur de démarrage du contexte [/alfresco] suite aux erreurs précédentes
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesJdbc
GRAVE: A web application registered the JBDC driver [org.postgresql.Driver] but failed to unregister it when the web application was stopped. To prevent a memory leak, the JDBC Driver has been forcibly unregistered.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesStopTimerThread
GRAVE: A web application appears to have started a TimerThread named [net.sf.ehcache.CacheManager@11bda67] via the java.util.Timer API but has failed to stop it. To prevent a memory leak, the timer (and hence the associated thread) has been forcibly cancelled. 
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesStopTimerThread
GRAVE: A web application appears to have started a TimerThread named [MySQL Statement Cancellation Timer] via the java.util.Timer API but has failed to stop it. To prevent a memory leak, the timer (and hence the associated thread) has been forcibly cancelled. 
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [DefaultScheduler_Worker-1] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [DefaultScheduler_Worker-2] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [DefaultScheduler_Worker-3] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [DefaultScheduler_Worker-4] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [DefaultScheduler_Worker-5] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [DefaultScheduler_Worker-6] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [DefaultScheduler_Worker-7] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [DefaultScheduler_Worker-8] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [DefaultScheduler_Worker-9] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [DefaultScheduler_Worker-10] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [Thread-13] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesStopTimerThread
GRAVE: A web application appears to have started a TimerThread named [Timer-0] via the java.util.Timer API but has failed to stop it. To prevent a memory leak, the timer (and hence the associated thread) has been forcibly cancelled. 
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [Thread-21] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [Thread-22] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [MessageDispatcher] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [indexThread1] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [indexThread2] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [indexThread3] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [indexThread4] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [indexThread5] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [indexThread6] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [indexThread7] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [indexThread8] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [indexThread9] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [indexThread10] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [DefaultScheduler_QuartzSchedulerThread] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
GRAVE: A web application appears to have started a thread named [DiagnosticsHandler,null,null] but has failed to stop it. This is very likely to create a memory leak.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearThreadLocalMap
GRAVE: A web application created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@4da576]) and a value of type [org.alfresco.repo.search.impl.lucene.index.ReferenceCountingReadOnlyIndexReaderFactory.ReferenceCountingReadOnlyIndexReader] (value [org.alfresco.repo.search.impl.lucene.index.ReferenceCountingReadOnlyIndexReaderFactory$ReferenceCountingReadOnlyIndexReader@1355e69]) but failed to remove it when the web application was stopped. To prevent a memory leak, the ThreadLocal has been forcibly removed.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearThreadLocalMap
GRAVE: A web application created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@c9401d]) and a value of type [org.apache.cxf.bus.CXFBusImpl] (value [org.apache.cxf.bus.CXFBusImpl@905c6e]) but failed to remove it when the web application was stopped. To prevent a memory leak, the ThreadLocal has been forcibly removed.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearThreadLocalMap
GRAVE: A web application created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@1a455be]) and a value of type [org.alfresco.util.CachingDateFormat] (value [yyyy-MM-dd]) but failed to remove it when the web application was stopped. To prevent a memory leak, the ThreadLocal has been forcibly removed.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearThreadLocalMap
GRAVE: A web application created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@1f94d96]) and a value of type [com.ibatis.sqlmap.engine.mapping.result.ResultObjectFactoryUtil.FactorySettings] (value [com.ibatis.sqlmap.engine.mapping.result.ResultObjectFactoryUtil$FactorySettings@d0e940]) but failed to remove it when the web application was stopped. To prevent a memory leak, the ThreadLocal has been forcibly removed.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearThreadLocalMap
GRAVE: A web application created a ThreadLocal with key of type [org.alfresco.repo.security.authentication.AuthenticationUtil.ThreadLocalStack] (value [org.alfresco.repo.security.authentication.AuthenticationUtil$ThreadLocalStack@1ca23ad]) and a value of type [java.util.Stack] (value [[]]) but failed to remove it when the web application was stopped. To prevent a memory leak, the ThreadLocal has been forcibly removed.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearThreadLocalMap
GRAVE: A web application created a ThreadLocal with key of type [null] (value [com.sun.xml.bind.v2.ClassFactory$1@1ec33c5]) and a value of type [java.util.WeakHashMap] (value [{class org.alfresco.repo.audit.model._3.DataGenerators=java.lang.ref.WeakReference@137ddc0, class org.alfresco.repo.audit.model._3.Application=java.lang.ref.WeakReference@bf817e, class javax.xml.bind.annotation.W3CDomHandler=java.lang.ref.WeakReference@ce9d88, class org.alfresco.repo.audit.model._3.AuditPath=java.lang.ref.WeakReference@c87e65, class org.alfresco.repo.audit.model._3.PathMap=java.lang.ref.WeakReference@e24fa8, class org.alfresco.repo.audit.model._3.DataExtractor=java.lang.ref.WeakReference@1dba740, class org.alfresco.repo.audit.model._3.GenerateValue=java.lang.ref.WeakReference@1c19940, class java.util.ArrayList=java.lang.ref.WeakReference@1345b80, class org.alfresco.repo.audit.model._3.Audit=java.lang.ref.WeakReference@635f47, class org.alfresco.repo.audit.model._3.RecordValue=java.lang.ref.WeakReference@45478, class org.alfresco.repo.audit.model._3.DataGenerator=java.lang.ref.WeakReference@45b424, class org.alfresco.repo.audit.model._3.DataExtractors=java.lang.ref.WeakReference@35bd2a, class org.alfresco.repo.audit.model._3.PathMappings=java.lang.ref.WeakReference@163468}]) but failed to remove it when the web application was stopped. To prevent a memory leak, the ThreadLocal has been forcibly removed.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearThreadLocalMap
GRAVE: A web application created a ThreadLocal with key of type [org.alfresco.repo.security.authentication.AuthenticationUtil.ThreadLocalStack] (value [org.alfresco.repo.security.authentication.AuthenticationUtil$ThreadLocalStack@1cad25c]) and a value of type [java.util.Stack] (value [[]]) but failed to remove it when the web application was stopped. To prevent a memory leak, the ThreadLocal has been forcibly removed.
12 juil. 2010 17:59:47 org.apache.catalina.loader.WebappClassLoader clearThreadLocalMap
GRAVE: A web application created a ThreadLocal with key of type [null] (value [com.sun.xml.bind.v2.runtime.Coordinator$1@b89e1d]) and a value of type [com.sun.xml.bind.v2.runtime.Coordinator[]] (value [[Lcom.sun.xml.bind.v2.runtime.Coordinator;@94a944]) but failed to remove it when the web application was stopped. To prevent a memory leak, the ThreadLocal has been forcibly removed.
12 juil. 2010 17:59:50 org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Déploiement du descripteur de configuration host-manager.xml
12 juil. 2010 17:59:50 org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Déploiement du descripteur de configuration manager.xml
12 juil. 2010 17:59:50 org.apache.catalina.startup.HostConfig deployWAR
INFO: Déploiement de l'archive share.war de l'application web
12 juil. 2010 17:59:58 org.apache.catalina.startup.HostConfig deployDirectory
INFO: Déploiement du répertoire docs de l'application web
12 juil. 2010 17:59:58 org.apache.catalina.startup.HostConfig deployDirectory
INFO: Déploiement du répertoire examples de l'application web
12 juil. 2010 17:59:59 org.apache.coyote.http11.Http11Protocol start
INFO: Démarrage de Coyote HTTP/1.1 sur http-8080
12 juil. 2010 17:59:59 org.apache.catalina.startup.Catalina start
INFO: Server startup in 64163 ms
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Merci.

Re: Alfresco et l'authentification Active Directory

jeanjot — Tue, 13 Jul 2010 08:50:11 GMT

Bonjour

Avant de mettre en place le LDAP avez-vous contrôlé que votre installation d'Alfresco était opérationnelle.

Car à la lecture des messages du catalina.out au démarrage la base de données n'est pas connecté :

12 juil. 2010 17:59:47 org.apache.catalina.core.StandardContext start
GRAVE: Error listenerStart
12 juil. 2010 17:59:47 org.apache.catalina.core.StandardContext start
GRAVE: Erreur de démarrage du contexte [/alfresco] suite aux erreurs précédentes‍‍‍‍

Il semble que vous utilisez postgresql ? si oui avez-vous mis en place le .jar du jdbc ?

GRAVE: A web application registered the JBDC driver [org.postgresql.Driver] but failed to unregister it when the web application was stopped. To prevent a memory leak, the JDBC Driver has been forcibly unregistered.
‍‍

Quelle base de données utilisez-vous et quelle version ?

Je pense qu'il serait bon d'éclaircir ces différents points.

Re: Alfresco et l'authentification Active Directory

magellank2 — Tue, 13 Jul 2010 09:55:31 GMT

Bonjour,

Effectivement, Alfresco ne fonctionne plus avec toutes ces modifications apportées !
J'ai du faire une modif de trop, mais il fonctionnait correctement avec l'authentification Alfresco. Lorsque j'ai essayé de mettre en oeuvre l'authentification AD, il fonctionnait aussi (mais je ne pouvais plus me logger).
je vais repartir d'une installation propre.

Pour la base de données, j'utilise simplement la base MySQL de la distribution standard (3.3 Enterprise).

Je refais donc une installation propre, essaie de connecter l'AD et reviens donner les résultats…..

Merci à tous.

Re: Alfresco et l'authentification Active Directory

magellank2 — Tue, 13 Jul 2010 16:41:42 GMT

Re-bonjour,

Voila, j'ai refait une installation propre et fonctionnelle.

J'ai reproduit toutes les étapes que j'ai citées en début de post.

Au démarrage, le fichier catalina.2010-07-13.log contient :


13 juil. 2010 18:11:38 org.apache.coyote.http11.Http11Protocol init
INFO: Initialisation de Coyote HTTP/1.1 sur http-8080
13 juil. 2010 18:11:38 org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 648 ms
13 juil. 2010 18:11:38 org.apache.catalina.core.StandardService start
INFO: Démarrage du service Catalina
13 juil. 2010 18:11:38 org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/6.0.26
13 juil. 2010 18:11:38 org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Déploiement du descripteur de configuration alfresco.xml
13 juil. 2010 18:11:39 org.apache.catalina.core.StandardContext addApplicationListener
INFO: The listener "org.apache.myfaces.webapp.StartupServletContextListener" is already configured for this context. The duplicate definition has been ignored.
13 juil. 2010 18:13:23 org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Déploiement du descripteur de configuration host-manager.xml
13 juil. 2010 18:13:23 org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Déploiement du descripteur de configuration manager.xml
13 juil. 2010 18:13:23 org.apache.catalina.startup.HostConfig deployWAR
INFO: Déploiement de l'archive share.war de l'application web
13 juil. 2010 18:13:31 org.apache.catalina.startup.HostConfig deployDirectory
INFO: Déploiement du répertoire docs de l'application web
13 juil. 2010 18:13:31 org.apache.catalina.startup.HostConfig deployDirectory
INFO: Déploiement du répertoire examples de l'application web
13 juil. 2010 18:13:31 org.apache.coyote.http11.Http11Protocol start
INFO: Démarrage de Coyote HTTP/1.1 sur http-8080
13 juil. 2010 18:13:31 org.apache.catalina.startup.Catalina start
INFO: Server startup in 113519 ms
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

En revanche, le fichier alfresco.log produit des erreurs java au démarrage. Et comme par hasard, ça concerne le lien avec l'AD !
Le voici :


18:49:21,356 INFO  [org.alfresco.config.JndiPropertiesFactoryBean] Loading properties file from class path resource [alfresco/repository.properties]
18:49:21,371 INFO  [org.alfresco.config.JndiPropertiesFactoryBean] Loading properties file from class path resource [alfresco/domain/transaction.properties]
18:49:21,371 INFO  [org.alfresco.config.JndiPropertiesFactoryBean] Loading properties file from file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\module\org_alfresco_module_dod5015\alfresco-global.properties]
18:49:21,371 INFO  [org.alfresco.config.JndiPropertiesFactoryBean] Loading properties file from file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\module\test\alfresco-global.properties]
18:49:21,371 INFO  [org.alfresco.config.JndiPropertiesFactoryBean] Loading properties file from file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\module\tests\alfresco-global.properties]
18:49:21,371 INFO  [org.alfresco.config.JndiPropertiesFactoryBean] Loading properties file from URL [file:/C:/Alfresco/tomcat/shared/classes/alfresco-global.properties]
18:49:21,418 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
18:49:30,731 INFO  [org.alfresco.config.JndiPropertiesFactoryBean] Loading properties file from file [C:\Alfresco\tomcat\shared\classes\alfresco\extension\subsystems\Authentication\ldap-ad\ldap-ad1\ldap-ad-authentication.properties]
18:49:45,106 WARN  [org.springframework.beans.GenericTypeAwarePropertyDescriptor] Invalid JavaBean property 'serviceBeans' being accessed! Ambiguous write methods found next to actually used [public void org.apache.cxf.jaxrs.JAXRSServerFactoryBean.setServiceBeans(java.lang.Object[])]: [public void org.apache.cxf.jaxrs.JAXRSServerFactoryBean.setServiceBeans(java.util.List)]
18:49:48,075 INFO  [org.springframework.extensions.webscripts.TemplateProcessorRegistry] Registered template processor Repository Template Processor for extension ftl
18:49:48,075 INFO  [org.springframework.extensions.webscripts.ScriptProcessorRegistry] Registered script processor Repository Script Processor for extension js
18:49:54,044 INFO  [org.alfresco.repo.domain.schema.SchemaBootstrap] Schema managed by database dialect org.hibernate.dialect.MySQLInnoDBDialect.
18:49:55,622 INFO  [org.alfresco.repo.domain.schema.SchemaBootstrap] No changes were made to the schema.
18:49:56,294 DEBUG [org.alfresco.repo.googledocs] preRegister called. Server=com.sun.jmx.mbeanserver.JmxMBeanServer@1301ed8, name=log4j:logger=org.alfresco.repo.googledocs
18:49:56,340 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'sysAdmin' subsystem, ID: [sysAdmin, default]
18:49:56,372 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
18:49:56,497 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'sysAdmin' subsystem, ID: [sysAdmin, default] complete
18:49:58,825 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'thirdparty' subsystem, ID: [thirdparty, default]
18:49:58,840 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
18:49:59,231 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'thirdparty' subsystem, ID: [thirdparty, default] complete
18:49:59,231 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'OOoDirect' subsystem, ID: [OOoDirect, default]
18:49:59,247 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
18:50:00,778 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'OOoDirect' subsystem, ID: [OOoDirect, default] complete
18:50:00,778 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'OOoJodconverter' subsystem, ID: [OOoJodconverter, default]
18:50:00,778 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
18:50:00,840 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'OOoJodconverter' subsystem, ID: [OOoJodconverter, default] complete
18:50:02,341 INFO  [org.alfresco.repo.admin.ConfigurationChecker] The Alfresco root data directory ('dir.root') is: C:\Alfresco\alf_data
18:50:02,403 INFO  [org.alfresco.repo.admin.patch.PatchExecuter] Checking for patches to apply …
18:50:02,966 INFO  [org.alfresco.repo.admin.patch.PatchExecuter] No patches were required.
18:50:03,012 INFO  [org.alfresco.repo.module.ModuleServiceImpl] Found 3 module(s).
18:50:03,153 INFO  [org.alfresco.repo.module.ModuleServiceImpl] Starting module 'org_alfresco_module_dod5015' version 1.0.
18:50:03,606 INFO  [org.alfresco.repo.module.ModuleServiceImpl] Starting module 'org.alfresco.module.vti' version 1.2.
18:50:03,669 INFO  [org.alfresco.repo.module.ModuleServiceImpl] Starting module 'org.alfresco.module.quickr' version 1.0.
18:50:04,122 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'fileServers' subsystem, ID: [fileServers, default]
18:50:04,137 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
18:50:04,700 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'Authentication' subsystem, ID: [Authentication, managed, ldap-ad1]
18:50:04,731 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
18:50:05,075 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'Authentication' subsystem, ID: [Authentication, managed, ldap-ad1] complete
18:50:05,075 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'Authentication' subsystem, ID: [Authentication, managed, alfrescoNtlm]
18:50:05,091 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
18:50:05,356 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'Authentication' subsystem, ID: [Authentication, managed, alfrescoNtlm] complete
18:50:05,419 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'fileServers' subsystem, ID: [fileServers, default] complete
18:50:05,419 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'imap' subsystem, ID: [imap, default]
18:50:05,434 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
18:50:05,512 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'imap' subsystem, ID: [imap, default] complete
18:50:05,512 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'email' subsystem, ID: [email, outbound]
18:50:05,528 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
18:50:05,591 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'email' subsystem, ID: [email, outbound] complete
18:50:05,591 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'email' subsystem, ID: [email, inbound]
18:50:05,825 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
18:50:05,887 WARN  [org.springframework.beans.GenericTypeAwarePropertyDescriptor] Invalid JavaBean property 'blockedSenders' being accessed! Ambiguous write methods found next to actually used [public void org.alfresco.email.server.EmailServer.setBlockedSenders(java.lang.String)]: [public void org.alfresco.email.server.EmailServer.setBlockedSenders(java.util.List)]
18:50:05,919 WARN  [org.springframework.beans.GenericTypeAwarePropertyDescriptor] Invalid JavaBean property 'allowedSenders' being accessed! Ambiguous write methods found next to actually used [public void org.alfresco.email.server.EmailServer.setAllowedSenders(java.util.List)]: [public void org.alfresco.email.server.EmailServer.setAllowedSenders(java.lang.String)]
18:50:05,966 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'email' subsystem, ID: [email, inbound] complete
18:50:05,966 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'googledocs' subsystem, ID: [googledocs, default]
18:50:05,997 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
18:50:06,387 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'googledocs' subsystem, ID: [googledocs, default] complete
18:50:06,466 INFO  [org.alfresco.repo.usage.UserUsageTrackingComponent] Enabled - calculate missing user usages …
18:50:06,512 INFO  [org.alfresco.repo.usage.UserUsageTrackingComponent] Found 0 users to recalculate
18:50:06,512 INFO  [org.alfresco.repo.usage.UserUsageTrackingComponent] … calculated missing usages for 0 users
18:50:06,512 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'Synchronization' subsystem, ID: [Synchronization, default]
18:50:06,528 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
18:50:06,606 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] Synchronizing users and groups with user registry 'ldap-ad1'
18:50:06,606 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] Retrieving all groups from user registry 'ldap-ad1'
18:50:06,716 ERROR [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] Synchronization aborted due to error
org.alfresco.error.AlfrescoRuntimeException: 06130000 User and group import failed
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1041)
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.getGroups(LDAPUserRegistry.java:645)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.syncWithPlugin(ChainingUserRegistrySynchronizer.java:539)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.synchronize(ChainingUserRegistrySynchronizer.java:405)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer$5.doWork(ChainingUserRegistrySynchronizer.java:1373)
   at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:508)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onBootstrap(ChainingUserRegistrySynchronizer.java:1367)
   at org.springframework.extensions.surf.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:56)
   at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:97)
   at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:294)
   at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:858)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:419)
   at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ApplicationContextState.start(ChildApplicationContextFactory.java:624)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.start(AbstractPropertyBackedBean.java:458)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.onApplicationEvent(AbstractPropertyBackedBean.java:386)
   at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:97)
   at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEvent(SafeApplicationEventMulticaster.java:78)
   at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:294)
   at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:858)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:419)
   at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:261)
   at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:192)
   at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:47)
   at org.alfresco.web.app.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:63)
   at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3972)
   at org.apache.catalina.core.StandardContext.start(StandardContext.java:4467)
   at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:791)
   at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:771)
   at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:546)
   at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:637)
   at org.apache.catalina.startup.HostConfig.deployDescriptors(HostConfig.java:563)
   at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498)
   at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1277)
   at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:321)
   at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)
   at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1053)
   at org.apache.catalina.core.StandardHost.start(StandardHost.java:785)
   at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
   at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
   at org.apache.catalina.core.StandardService.start(StandardService.java:519)
   at org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
   at org.apache.catalina.startup.Catalina.start(Catalina.java:581)
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
   at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
   at java.lang.reflect.Method.invoke(Method.java:597)
   at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289)
   at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)
Caused by: javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-031001E4, problem 2001 (NO_OBJECT), data 0, best match of:
   'OU=Alfresco,DC=MonDomaine,DC=fr'
 ]; remaining name 'ou=Admin,ou=Alfresco,dc=MonDomaine,dc=fr'
   at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3066)
   at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2987)
   at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2794)
   at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1826)
   at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1749)
   at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:368)
   at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:338)
   at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:321)
   at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:248)
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1029)
   … 47 more
18:50:06,778 WARN  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] Failed initial synchronize with user registries
org.alfresco.error.AlfrescoRuntimeException: 06130000 User and group import failed
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1041)
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.getGroups(LDAPUserRegistry.java:645)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.syncWithPlugin(ChainingUserRegistrySynchronizer.java:539)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.synchronize(ChainingUserRegistrySynchronizer.java:405)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer$5.doWork(ChainingUserRegistrySynchronizer.java:1373)
   at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:508)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onBootstrap(ChainingUserRegistrySynchronizer.java:1367)
   at org.springframework.extensions.surf.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:56)
   at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:97)
   at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:294)
   at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:858)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:419)
   at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ApplicationContextState.start(ChildApplicationContextFactory.java:624)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.start(AbstractPropertyBackedBean.java:458)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.onApplicationEvent(AbstractPropertyBackedBean.java:386)
   at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:97)
   at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEvent(SafeApplicationEventMulticaster.java:78)
   at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:294)
   at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:858)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:419)
   at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:261)
   at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:192)
   at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:47)
   at org.alfresco.web.app.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:63)
   at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3972)
   at org.apache.catalina.core.StandardContext.start(StandardContext.java:4467)
   at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:791)
   at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:771)
   at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:546)
   at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:637)
   at org.apache.catalina.startup.HostConfig.deployDescriptors(HostConfig.java:563)
   at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498)
   at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1277)
   at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:321)
   at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)
   at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1053)
   at org.apache.catalina.core.StandardHost.start(StandardHost.java:785)
   at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
   at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
   at org.apache.catalina.core.StandardService.start(StandardService.java:519)
   at org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
   at org.apache.catalina.startup.Catalina.start(Catalina.java:581)
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
   at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
   at java.lang.reflect.Method.invoke(Method.java:597)
   at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289)
   at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)
Caused by: javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-031001E4, problem 2001 (NO_OBJECT), data 0, best match of:
   'OU=Alfresco,DC=MonDomaine,DC=fr'
 ]; remaining name 'ou=Admin,ou=Alfresco,dc=MonDomaine,dc=fr'
   at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3066)
   at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2987)
   at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2794)
   at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1826)
   at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1749)
   at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:368)
   at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:338)
   at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:321)
   at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:248)
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1029)
   … 47 more
18:50:06,809 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'Synchronization' subsystem, ID: [Synchronization, default] complete
18:50:06,856 INFO  [org.alfresco.service.descriptor.DescriptorService] Alfresco JVM - v1.6.0_20-b02; maximum heap size 910,250MB
18:50:07,044 INFO  [org.alfresco.service.descriptor.DescriptorService] Alfresco license: Enterprise - v3.3 granted to Trial User limited to 30 days expiring Thu Aug 12 00:00:00 CEST 2010 (30 days remaining)
18:50:07,044 INFO  [org.alfresco.service.descriptor.DescriptorService] Alfresco started (Enterprise): Current version 3.3.0 (64) schema 4010 - Originally installed version 3.3.0 (64) schema 4010
18:50:29,591 INFO  [org.alfresco.module.vti.VtiServer] Vti server started successfully on port: 7070
18:50:49,810 INFO  [org.springframework.extensions.webscripts.DeclarativeRegistry] Registered 415 Web Scripts (+0 failed), 661 URLs
18:50:49,810 INFO  [org.springframework.extensions.webscripts.DeclarativeRegistry] Registered 2 Package Description Documents (+0 failed) 
18:50:49,810 INFO  [org.springframework.extensions.webscripts.DeclarativeRegistry] Registered 1 Schema Description Documents (+0 failed) 
18:50:49,810 INFO  [org.springframework.extensions.webscripts.AbstractRuntimeContainer] Initialised Repository Web Script Container (in 18365.445ms)
18:50:49,810 INFO  [org.springframework.extensions.webscripts.TemplateProcessorRegistry] Registered template processor freemarker for extension ftl
18:50:49,825 INFO  [org.springframework.extensions.webscripts.ScriptProcessorRegistry] Registered script processor javascript for extension js
18:50:50,044 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'wcm_deployment_receiver' subsystem, ID: [wcm_deployment_receiver, default]
18:50:50,075 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
18:50:50,201 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'wcm_deployment_receiver' subsystem, ID: [wcm_deployment_receiver, default] complete
18:50:57,247 INFO  [org.springframework.extensions.webscripts.DeclarativeRegistry] Registered 270 Web Scripts (+0 failed), 278 URLs
18:50:57,247 INFO  [org.springframework.extensions.webscripts.DeclarativeRegistry] Registered 8 Package Description Documents (+0 failed) 
18:50:57,247 INFO  [org.springframework.extensions.webscripts.DeclarativeRegistry] Registered 0 Schema Description Documents (+0 failed) 
18:50:57,435 INFO  [org.springframework.extensions.webscripts.AbstractRuntimeContainer] Initialised Spring Surf Container Web Script Container (in 2367.0127ms)
18:50:57,529 INFO  [org.springframework.extensions.webscripts.TemplateProcessorRegistry] Registered template processor freemarker for extension ftl
18:50:57,638 INFO  [org.springframework.extensions.webscripts.ScriptProcessorRegistry] Registered script processor javascript for extension js
18:50:57,747 INFO  [org.springframework.extensions.webscripts.TemplateProcessorRegistry] Registered template processor freemarker for extension ftl
18:50:57,763 INFO  [org.springframework.extensions.webscripts.ScriptProcessorRegistry] Registered script processor javascript for extension js
18:50:57,872 INFO  [org.springframework.extensions.webscripts.TemplateProcessorRegistry] Registered template processor freemarker for extension ftl
18:50:57,888 INFO  [org.springframework.extensions.webscripts.ScriptProcessorRegistry] Registered script processor javascript for extension js
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Et là ! Je ne sais plus quoi faire !

Merci par avance pour votre aide.

Re: Alfresco et l'authentification Active Directory

telulian — Thu, 15 Jul 2010 13:41:24 GMT

Bonjour,

Avez-vous essayer de remplacer ceci

ldap.synchronization.groupSearchBase=cn\=Admin,ou\=Alfresco,dc\=mondomaine,dc\=fr‍

par

ldap.synchronization.groupSearchBase=dc\=mondomaine,dc\=fr‍

pour voir si la synchronisation fonctionne?

Pour configurer cela, j'ai utilisé le tuto de cet adresse http://www.anotherstrangerme.com/alfresco-3-3g-integration-with-active-directory-and-google-docs/

En espérant que cela vous aide

Re: Alfresco et l'authentification Active Directory

shouill — Wed, 21 Jul 2010 15:13:27 GMT

Il me semble avoir eu ce problème aussi de synchronisation ou de problème de user / group avec mon AD.

Tu trouveras ci-joint mon fichier properties :



[b]ldap.authentication.active=true

ldap.authentication.allowGuestLogin=true[/b]

[b]ldap.authentication.userNameFormat=%s@domaine.fr[/b]

ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory

[b]ldap.authentication.java.naming.provider.url=ldap://serveur.domaine.fr:389 [/b]

ldap.authentication.java.naming.security.authentication=simple

ldap.authentication.escapeCommasInBind=false

ldap.authentication.escapeCommasInUid=false

ldap.authentication.defaultAdministratorUserNames=admin
[b]
ldap.synchronization.active=true[/b]

[b]#Utilisateur avec les droits spécifiques d'accès au contenu de l'AD
ldap.synchronization.java.naming.security.principal=login
ldap.synchronization.java.naming.security.credentials=password[/b]

ldap.synchronization.queryBatchSize=1000
   
ldap.synchronization.attributeBatchSize=1000

ldap.synchronization.groupQuery=(objectclass\=group)

[b]ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(modifyTimestamp<\={0})))[/b]

[b]ldap.synchronization.personQuery=(&(objectclass\=person))[/b]
[b]
ldap.synchronization.personDifferentialQuery=(&(objectclass\=person)(!(modifyTimestamp<\={0})))[/b]

[b]ldap.synchronization.groupSearchBase=ou\=MASOCIETE,ou\="Utilisateurs et Groupes",dc\=domaine,dc\=fr[/b]

[b]ldap.synchronization.userSearchBase=ou\=MASOCIETE,ou\="Utilisateurs et Groupes",dc\=domaine,dc\=fr[/b]

ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp

ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'

ldap.synchronization.userIdAttributeName=sAMAccountName

ldap.synchronization.userFirstNameAttributeName=givenName

ldap.synchronization.userLastNameAttributeName=sn

ldap.synchronization.userEmailAttributeName=mail

ldap.synchronization.userOrganizationalIdAttributeName=company

ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider

ldap.synchronization.groupIdAttributeName=cn

ldap.synchronization.groupDisplayNameAttributeName=displayName

ldap.synchronization.groupType=group

ldap.synchronization.personType=person

ldap.synchronization.groupMemberAttributeName=member

ldap.synchronization.enableProgressEstimation=true
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Je t'ai mis en gras ce que j'ai modifié et ce que tu as à comparer avec ton fichier

En espérant que cela puisse t'aider !

-> Edit : Le gras ne fonctionne pas dans la balise "Code", regarde ce qu'il y a entre les balises "b" du coup !

Re: Alfresco et l'authentification Active Directory

magellank2 — Wed, 28 Jul 2010 11:26:55 GMT

Merci Shouill pour ces informations.

Je vais essayer de m'y remettre (c'est un peu décourageant)….

En espérant que ça fonctionne cette fois-ci….

Re: Alfresco et l'authentification Active Directory

shouill — Fri, 30 Jul 2010 10:22:15 GMT

Oui c'est le moins qu'on puisse dire, j'ai eu un peu de mal aussi à le faire fonctionner !!

Bon courage 😉