Multiple LDAP domains

zkirby — Tue, 26 Aug 2008 17:36:15 GMT

I work for a company that has more than 1 LDAP domain. Currently, users on separate domains are directed to separate intranet domain names (for example, intranet.foo.com and intranet.bar.com). I'm curious to know how Alfresco would handle this (or if it could at all). Does Alfresco handle the aut

Re: Multiple LDAP domains

jbarmash — Thu, 28 Aug 2008 06:36:47 GMT

I work for a company that has more than 1 LDAP domain. Currently, users on separate domains are directed to separate intranet domain names (for example, intranet.foo.com and intranet.bar.com). I'm curious to know how Alfresco would handle this (or if it could at all). Does Alfresco handle the authentication process, or does it just grant authorization to previously authenticated users?

When properly configured to authenticate against LDAP, Alfresco defers the authentication to LDAP. For several domains, you could chain several LDAP authentication domains together, and it will try each in sequence until either it finds a domain that can authenticate, or it goes through all of them and thenfails.

More detail at:
http://wiki.alfresco.com/wiki/Enterprise_Security_and_Authentication_Configuration

For chaining example, In the extension directory, take a look at:

chaining-authentication-context.xml.sample

topic Multiple LDAP domains in Alfresco Archive

Multiple LDAP domains

Re: Multiple LDAP domains