topic Cannot get LDAP Synch to work with AD in Alfresco Archive

Cannot get LDAP Synch to work with AD

mliedtke — Thu, 28 Feb 2008 19:14:21 GMT

Hi,I'm in the process of setting up a 2.1 instance and want to synch our users from Active Directory, but just can't seem to get it to work. I've copied over the files:ldap-synchronisation.propertiesldap-authentication.propertiesldap-synchronisation-context.xmlHere are how I have the properties set

Re: Cannot get LDAP Synch to work with AD

mliedtke — Thu, 28 Feb 2008 22:42:39 GMT

Got it working…sort of.
I changed ldap.authentication.java.naming.security.authentication=SIMPLE

and it worked, i guess DIGEST-MD5 requires revers encryption which isn't set up on our AD, and I don't have control over that.

Re: Cannot get LDAP Synch to work with AD

duxtinto — Thu, 03 Apr 2008 10:16:30 GMT

I already got it working using Digest-MD5 instead of Simple as authentication method.

you were almost right, but you can't use a DN as your username.

I used this in my ldap-authentication.properties file:

ldap.authentication.userNameFormat=%s

…..

# The authentication mechanism to use
ldap.authentication.java.naming.security.authentication=DIGEST-MD5

# The default principal to use (only used for LDAP sync)
ldap.authentication.java.naming.security.principal=user name (only the name. e.g myuser)
‍‍‍‍‍‍‍‍‍‍

and it worked.

Re: Cannot get LDAP Synch to work with AD

mliedtke — Thu, 03 Apr 2008 13:39:37 GMT

Hey, thanks for the reply. I actually decided to CAS for our sign on so users can open Alfresco directly from Liferay without having to re-authenticate.