topic Open Ldap y Alfresco 4.2.c in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/open-ldap-y-alfresco-4-2-c/m-p/179576#M132706 <HTML><HEAD></HEAD><BODY><SPAN>Saludos amigos, he instalado Alfresco 4.2.c he intentado configurarlo para tener acceso desde mis usuarios en servidor OpenLdap pero ningún resultado positivo, he leido por internet los cambios y agregados a los archivos alfresco-global.properties y ldap-authentication.properties</SPAN><BR /><BR /><SPAN>Les muestro como tengo mi archivo alfresco-global.properties sin cambios para que por favor me ayuden concretamente que debo hacer en el y muchas gracias por toda la ayuda que puedan prestarme amigos.</SPAN><BR /><BR /><SPAN>###############################</SPAN><BR /><SPAN>## Common Alfresco Properties #</SPAN><BR /><SPAN>###############################</SPAN><BR /><BR /><SPAN>#</SPAN><BR /><SPAN># Sample custom content and index data location</SPAN><BR /><SPAN>#</SPAN><BR /><SPAN>#dir.root=/srv/alfresco/alf_data</SPAN><BR /><SPAN>#dir.keystore=${dir.root}/keystore</SPAN><BR /><BR /><SPAN>#</SPAN><BR /><SPAN># Sample database connection properties</SPAN><BR /><SPAN>#</SPAN><BR /><SPAN>#db.username=alfresco</SPAN><BR /><SPAN>#db.password=alfresco</SPAN><BR /><BR /><SPAN>#</SPAN><BR /><SPAN># External locations</SPAN><BR /><SPAN>#————-</SPAN><BR /><SPAN>#ooo.exe=soffice</SPAN><BR /><SPAN>#ooo.enabled=false</SPAN><BR /><SPAN>#jodconverter.officeHome=./OpenOffice.org</SPAN><BR /><SPAN>#jodconverter.portNumbers=8101</SPAN><BR /><SPAN>#jodconverter.enabled=true</SPAN><BR /><SPAN>#img.root=./ImageMagick</SPAN><BR /><SPAN>#swf.exe=./bin/pdf2swf</SPAN><BR /><BR /><SPAN>#</SPAN><BR /><SPAN># Property to control whether schema updates are performed automatically.</SPAN><BR /><SPAN># Updates must be enabled during upgrades as, apart from the static upgrade scripts,</SPAN><BR /><SPAN># there are also auto-generated update scripts that will need to be executed.&nbsp; After</SPAN><BR /><SPAN># upgrading to a new version, this can be disabled.</SPAN><BR /><SPAN>#</SPAN><BR /><SPAN>#db.schema.update=true</SPAN><BR /><BR /><SPAN>#</SPAN><BR /><SPAN># MySQL connection</SPAN><BR /><SPAN>#</SPAN><BR /><SPAN>#db.driver=org.gjt.mm.mysql.Driver</SPAN><BR /><SPAN>#db.url=jdbc:mysql://localhost/alfresco?useUnicode=yes&amp;characterEncoding=UTF-8</SPAN><BR /><BR /><SPAN>#</SPAN><BR /><SPAN># Oracle connection</SPAN><BR /><SPAN>#</SPAN><BR /><SPAN>#db.driver=oracle.jdbc.OracleDriver</SPAN><BR /><SPAN>#db.url=jdbc<img id="smileysurprised" class="emoticon emoticon-smileysurprised" src="https://connect.hyland.com/i/smilies/16x16_smiley-surprised.png" alt="Smiley Surprised" title="Smiley Surprised" />racle:thin:@localhost:1521:alfresco</SPAN><BR /><BR /><SPAN>#</SPAN><BR /><SPAN># SQLServer connection</SPAN><BR /><SPAN># Requires jTDS driver version 1.2.5 and SNAPSHOT isolation mode</SPAN><BR /><SPAN># Enable TCP protocol on fixed port 1433</SPAN><BR /><SPAN># Prepare the database with:</SPAN><BR /><SPAN># ALTER DATABASE alfresco SET ALLOW_SNAPSHOT_ISOLATION ON;</SPAN><BR /><SPAN>#</SPAN><BR /><SPAN>#db.driver=net.sourceforge.jtds.jdbc.Driver</SPAN><BR /><SPAN>#db.url=jdbc:jtds:sqlserver://localhost:1433/alfresco</SPAN><BR /><SPAN>#db.txn.isolation=4096</SPAN><BR /><BR /><SPAN>#</SPAN><BR /><SPAN># PostgreSQL connection (requires postgresql-8.2-504.jdbc3.jar or equivalent)</SPAN><BR /><SPAN>#</SPAN><BR /><SPAN>#db.driver=org.postgresql.Driver</SPAN><BR /><SPAN>#db.url=jdbc<img id="smileytongue" class="emoticon emoticon-smileytongue" src="https://connect.hyland.com/i/smilies/16x16_smiley-tongue.png" alt="Smiley Tongue" title="Smiley Tongue" />ostgresql://localhost:5432/alfresco</SPAN><BR /><SPAN>#</SPAN><BR /><SPAN># DB2 connection</SPAN><BR /><SPAN>#</SPAN><BR /><SPAN>#db.driver=com.ibm.db2.jcc.DB2Driver</SPAN><BR /><SPAN>#db.url=jdbc:db2://localhost:50000/alfresco:retrieveMessagesFromServerOnGetMessage=true;</SPAN><BR /><BR /><SPAN>#</SPAN><BR /><SPAN># Index Recovery Mode</SPAN><BR /><SPAN>#————-</SPAN><BR /><SPAN>#index.recovery.mode=AUTO</SPAN><BR /><BR /><SPAN>#</SPAN><BR /><SPAN># Outbound Email Configuration</SPAN><BR /><SPAN>#————-</SPAN><BR /><SPAN>#mail.host=</SPAN><BR /><SPAN>#mail.port=25</SPAN><BR /><SPAN>#mail.username=anonymous</SPAN><BR /><SPAN>#mail.password=</SPAN><BR /><SPAN>#mail.encoding=UTF-8</SPAN><BR /><SPAN><A class="jive-link-email-small" href="mailto:#mail.from.default=alfresco@alfresco.org" rel="nofollow noopener noreferrer">#mail.from.default=alfresco@alfresco.org</A></SPAN><BR /><SPAN>#mail.smtp.auth=false</SPAN><BR /><BR /><SPAN>#</SPAN><BR /><SPAN># Alfresco Email Service and Email Server</SPAN><BR /><SPAN>#————-</SPAN><BR /><BR /><SPAN># Enable/Disable the inbound email service.&nbsp; The service could be used by processes other than</SPAN><BR /><SPAN># the Email Server (e.g. direct RMI access) so this flag is independent of the Email Service.</SPAN><BR /><SPAN>#————-</SPAN><BR /><SPAN>#email.inbound.enabled=true</SPAN><BR /><BR /><SPAN># Email Server properties</SPAN><BR /><SPAN>#————-</SPAN><BR /><SPAN>#email.server.enabled=true</SPAN><BR /><SPAN>#email.server.port=25</SPAN><BR /><SPAN>#email.server.domain=alfresco.com</SPAN><BR /><SPAN>#email.inbound.unknownUser=anonymous</SPAN><BR /><BR /><SPAN># A comma separated list of email REGEX patterns of allowed senders.</SPAN><BR /><SPAN># If there are any values in the list then all sender email addresses</SPAN><BR /><SPAN># must match. For example:</SPAN><BR /><SPAN>#&nbsp;&nbsp; .*\@alfresco\.com, .*\@alfresco\.org</SPAN><BR /><SPAN># Allow anyone:</SPAN><BR /><SPAN>#————-</SPAN><BR /><SPAN>#email.server.allowed.senders=.*</SPAN><BR /><BR /><SPAN>#</SPAN><BR /><SPAN># The default authentication chain</SPAN><BR /><SPAN># To configure external authentication subsystems see:</SPAN><BR /><SPAN># </SPAN><A href="http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems" rel="nofollow noopener noreferrer">http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems</A><BR /><SPAN>#————-</SPAN><BR /><SPAN>authentication.chain=alfrescoNtlm1:alfrescoNtlm,ldap:ldap</SPAN><BR /><BR /><SPAN>#</SPAN><BR /><SPAN># URL Generation Parameters (The ${localname} token is replaced by the local server name)</SPAN><BR /><SPAN>#————-</SPAN><BR /><SPAN>#alfresco.context=alfresco</SPAN><BR /><SPAN>#alfresco.host=${localname}</SPAN><BR /><SPAN>#alfresco.port=8080</SPAN><BR /><SPAN>#alfresco.protocol=http</SPAN><BR /><SPAN>#</SPAN><BR /><SPAN>#share.context=share</SPAN><BR /><SPAN>#share.host=${localname}</SPAN><BR /><SPAN>#share.port=8080</SPAN><BR /><SPAN>#share.protocol=http</SPAN><BR /><BR /><SPAN>#imap.server.enabled=true</SPAN><BR /><SPAN>#imap.server.port=143</SPAN><BR /><SPAN>#imap.server.host=localhost</SPAN><BR /><BR /><SPAN># Default value of alfresco.rmi.services.host is 0.0.0.0 which means 'listen on all adapters'.</SPAN><BR /><SPAN># This allows connections to JMX both remotely and locally.</SPAN><BR /><SPAN>#</SPAN><BR /><SPAN>alfresco.rmi.services.host=0.0.0.0</SPAN><BR /><BR /><SPAN>#</SPAN><BR /><SPAN># RMI service ports for the individual services.</SPAN><BR /><SPAN># These seven services are available remotely.</SPAN><BR /><SPAN>#</SPAN><BR /><SPAN># Assign individual ports for each service for best performance</SPAN><BR /><SPAN># or run several services on the same port. You can even run everything on 50500 if needed.</SPAN><BR /><SPAN>#</SPAN><BR /><SPAN># Select 0 to use a random unused port.</SPAN><BR /><SPAN>#</SPAN><BR /><SPAN>#avm.rmi.service.port=50501</SPAN><BR /><SPAN>#avmsync.rmi.service.port=50502</SPAN><BR /><SPAN>#attribute.rmi.service.port=50503</SPAN><BR /><SPAN>#authentication.rmi.service.port=50504</SPAN><BR /><SPAN>#repo.rmi.service.port=50505</SPAN><BR /><SPAN>#action.rmi.service.port=50506</SPAN><BR /><SPAN>#wcm-deployment-receiver.rmi.service.port=50507</SPAN><BR /><SPAN>#monitor.rmi.service.port=50508</SPAN><BR /><BR /><SPAN>&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;</SPAN><BR /><SPAN>ESTE ES MI ARCHIVO ldap-authentication.properties</SPAN><BR /><BR /><SPAN># This flag enables use of this LDAP subsystem for authentication. It may be</SPAN><BR /><SPAN># that this subsytem should only be used for synchronization, in which case</SPAN><BR /><SPAN># this flag should be set to false.</SPAN><BR /><SPAN>ldap.authentication.active=true</SPAN><BR /><BR /><SPAN>#</SPAN><BR /><SPAN># This properties file brings together the common options for LDAP authentication rather than editing the bean definit$</SPAN><BR /><SPAN>#</SPAN><BR /><SPAN>ldap.authentication.allowGuestLogin=true</SPAN><BR /><SPAN># How to map the user id entered by the user to that passed through to LDAP</SPAN><BR /><SPAN># - simple</SPAN><BR /><SPAN>#&nbsp;&nbsp;&nbsp; - this must be a DN and would be something like</SPAN><BR /><SPAN>#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; uid=%s,ou=People,dc=company,dc=com</SPAN><BR /><SPAN># - digest</SPAN><BR /><SPAN>#&nbsp;&nbsp;&nbsp; - usually pass through what is entered</SPAN><BR /><SPAN>#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; %s</SPAN><BR /><SPAN># If not set, an LDAP query involving ldap.synchronization.personQuery and ldap.synchronization.userIdAttributeName wi$</SPAN><BR /><SPAN># be performed to resolve the DN dynamically. This allows directories to be structured and doesn't require the user ID$</SPAN><BR /><SPAN># appear in the DN.</SPAN><BR /><SPAN>ldap.authentication.userNameFormat=</SPAN><BR /><BR /><BR /><SPAN># The LDAP context factory to use</SPAN><BR /><SPAN>ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory</SPAN><BR /><BR /><SPAN># The URL to connect to the LDAP server</SPAN><BR /><SPAN>ldap.authentication.java.naming.provider.url=ldap://openldap.domain.com:389</SPAN><BR /><BR /><BR /><SPAN># The authentication mechanism to use for password validation</SPAN><BR /><SPAN>ldap.authentication.java.naming.security.authentication=simple</SPAN><BR /><BR /><SPAN># Escape commas entered by the user at bind time</SPAN><BR /><SPAN># Useful when using simple authentication and the CN is part of the DN and contains commas</SPAN><BR /><SPAN>ldap.authentication.escapeCommasInBind=false</SPAN><BR /><BR /><SPAN># Escape commas entered by the user when setting the authenticated user</SPAN><BR /><SPAN># Useful when using simple authentication and the CN is part of the DN and contains commas, and the escaped \, is</SPAN><BR /><SPAN># pulled in as part of an LDAP sync</SPAN><BR /><SPAN># If this option is set to true it will break the default home folder provider as space names can not contain \</SPAN><BR /><SPAN>ldap.authentication.escapeCommasInUid=false</SPAN><BR /><SPAN># Comma separated list of user names who should be considered administrators by default</SPAN><BR /><SPAN>ldap.authentication.defaultAdministratorUserNames=administrador</SPAN><BR /><BR /><SPAN># This flag enables use of this LDAP subsystem for user and group</SPAN><BR /><SPAN># synchronization. It may be that this subsytem should only be used for</SPAN><BR /><SPAN># authentication, in which case this flag should be set to false.</SPAN><BR /><SPAN>ldap.synchronization.active=false</SPAN><BR /><BR /><BR /><SPAN># The authentication mechanism to use for synchronization</SPAN><BR /><SPAN>ldap.synchronization.java.naming.security.authentication=simple</SPAN><BR /><BR /><SPAN># The default principal to use (only used for LDAP sync)</SPAN><BR /><SPAN>ldap.synchronization.java.naming.security.principal=cn\=Manager,dc\=company,dc\=com</SPAN><BR /><SPAN># The password for the default principal (only used for LDAP sync)</SPAN><BR /><SPAN>ldap.synchronization.java.naming.security.credentials=secret</SPAN><BR /><SPAN># If positive, this property indicates that RFC 2696 paged results should be</SPAN><BR /><SPAN># used to split query results into batches of the specified size. This</SPAN><BR /><SPAN># overcomes any size limits imposed by the LDAP server.</SPAN><BR /><SPAN>ldap.synchronization.queryBatchSize=0</SPAN><BR /><BR /><SPAN># If positive, this property indicates that range retrieval should be used to fetch</SPAN><BR /><SPAN># multi-valued attributes (such as member) in batches of the specified size.</SPAN><BR /><SPAN># Overcomes any size limits imposed by Active Directory.</SPAN><BR /><SPAN>ldap.synchronization.attributeBatchSize=0</SPAN><BR /><BR /><SPAN># The query to select all objects that represent the groups to import.</SPAN><BR /><SPAN>ldap.synchronization.groupQuery=(objectclass\=groupOfNames)</SPAN><BR /><BR /><SPAN># The query to select objects that represent the groups to import that have changed since a certain time.</SPAN><BR /><SPAN>ldap.synchronization.groupDifferentialQuery=(&amp;(objectclass\=groupOfNames)(!(modifyTimestamp&lt;\={0})))</SPAN><BR /><BR /><SPAN># The query to select all objects that represent the users to import.</SPAN><BR /><SPAN>ldap.synchronization.personQuery=(objectclass\=inetOrgPerson)</SPAN><BR /><BR /><SPAN># The query to select objects that represent the users to import that have changed since a certain time.</SPAN><BR /><SPAN>ldap.synchronization.personDifferentialQuery=(&amp;(objectclass\=inetOrgPerson)(!(modifyTimestamp&lt;\={0})))</SPAN><BR /><BR /><SPAN># The group search base restricts the LDAP group query to a sub section of tree on the LDAP server.</SPAN><BR /><SPAN>ldap.synchronization.groupSearchBase=ou\=Groups,dc\=company,dc\=com</SPAN><BR /><BR /><BR /><SPAN># The user search base restricts the LDAP user query to a sub section of tree on the LDAP server.</SPAN><BR /><SPAN>ldap.synchronization.userSearchBase=ou\=People,dc\=company,dc\=com</SPAN><BR /><SPAN># The name of the operational attribute recording the last update time for a group or user.</SPAN><BR /><SPAN>ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp</SPAN><BR /><BR /><SPAN># The timestamp format. Unfortunately, this varies between directory servers.</SPAN><BR /><SPAN>ldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'</SPAN><BR /><SPAN># The attribute name on people objects found in LDAP to use as the uid in Alfresco</SPAN><BR /><SPAN>ldap.synchronization.userIdAttributeName=uid</SPAN><BR /><BR /><SPAN># The attribute on person objects in LDAP to map to the first name property in Alfresco</SPAN><BR /><SPAN>ldap.synchronization.userFirstNameAttributeName=givenName</SPAN><BR /><SPAN># The attribute on person objects in LDAP to map to the last name property in Alfresco</SPAN><BR /><SPAN>ldap.synchronization.userLastNameAttributeName=sn</SPAN><BR /><BR /><SPAN># The attribute on person objects in LDAP to map to the email property in Alfresco</SPAN><BR /><SPAN>ldap.synchronization.userEmailAttributeName=mail</SPAN><BR /><BR /><SPAN># The attribute on person objects in LDAP to map to the organizational id&nbsp; property in Alfresco</SPAN><BR /><SPAN>ldap.synchronization.userEmailAttributeName=mail</SPAN><BR /><BR /><SPAN># The attribute on person objects in LDAP to map to the organizational id&nbsp; property in Alfresco</SPAN><BR /><SPAN>ldap.synchronization.userOrganizationalIdAttributeName=o</SPAN><BR /><BR /><SPAN># The default home folder provider to use for people created via LDAP import</SPAN><BR /><SPAN>ldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProvider</SPAN><BR /><BR /><SPAN># The attribute on LDAP group objects to map to the authority name property in Alfresco</SPAN><BR /><SPAN>ldap.synchronization.groupIdAttributeName=cn</SPAN><BR /><BR /><SPAN># The attribute on LDAP group objects to map to the authority display name property in Alfresco</SPAN><BR /><SPAN>ldap.synchronization.groupDisplayNameAttributeName=description</SPAN><BR /><BR /><SPAN># The group type in LDAP</SPAN><BR /><SPAN>ldap.synchronization.groupType=groupOfNames</SPAN><BR /><BR /><SPAN># The person type in LDAP</SPAN><BR /><SPAN>ldap.synchronization.personType=inetOrgPerson</SPAN><BR /><BR /><SPAN># The attribute in LDAP on group objects that defines the DN for its members</SPAN><BR /><SPAN>ldap.synchronization.groupMemberAttributeName=member</SPAN><BR /><BR /><SPAN># If true progress estimation is enabled. When enabled, the user query has to be run twice in order to count entries.</SPAN><BR /><BR /><SPAN>ldap.synchronization.enableProgressEstimation=true</SPAN><BR /><BR /><SPAN># Requests timeout, in miliseconds, use 0 for none (default)</SPAN><BR /><SPAN>ldap.authentication.java.naming.read.timeout=0</SPAN><BR /></BODY></HTML> Sat, 22 Mar 2014 17:40:54 GMT jvillafranca83 2014-03-22T17:40:54Z Open Ldap y Alfresco 4.2.c https://connect.hyland.com/t5/alfresco-archive/open-ldap-y-alfresco-4-2-c/m-p/179576#M132706 Saludos amigos, he instalado Alfresco 4.2.c he intentado configurarlo para tener acceso desde mis usuarios en servidor OpenLdap pero ningún resultado positivo, he leido por internet los cambios y agregados a los archivos alfresco-global.properties y ldap-authentication.propertiesLes muestro como ten Sat, 22 Mar 2014 17:40:54 GMT https://connect.hyland.com/t5/alfresco-archive/open-ldap-y-alfresco-4-2-c/m-p/179576#M132706 jvillafranca83 2014-03-22T17:40:54Z Re: Open Ldap y Alfresco 4.2.c https://connect.hyland.com/t5/alfresco-archive/open-ldap-y-alfresco-4-2-c/m-p/179577#M132707 <HTML><HEAD></HEAD><BODY><SPAN>Buenas.</SPAN><BR /><BR /><SPAN>¿Puedes revisar que nos hayas puesto correctamente el alfresco-global.properties? Está todo comentado (con almohadillas por delante). A ver si le echamos un vistazo y te comentamos.</SPAN><BR /><BR /><SPAN>Un saludo.</SPAN></BODY></HTML> Sat, 22 Mar 2014 18:08:07 GMT https://connect.hyland.com/t5/alfresco-archive/open-ldap-y-alfresco-4-2-c/m-p/179577#M132707 cristinamr 2014-03-22T18:08:07Z