topic Re: If not localhost, Ldap authentification is impossible. in Alfresco Archive

If not localhost, Ldap authentification is impossible.

potitius — Wed, 05 Aug 2015 11:49:10 GMT

Hello Community, I already finished my project with activiti and I am facing the last steps with the integration of my project within the server. My Ldap configuration works fine while I am on localhost and connect succefully into LDAP but it's not the case when I copy/paste the activit-exlorer fold

Re: If not localhost, Ldap authentification is impossible.

vasile_dirla — Wed, 05 Aug 2015 12:44:10 GMT

I guess you already tested but I want to be sure.
did you test if your LDAP is accessible from the machine where the tomcat is installed. (try to connect with some other tool)
(maybe it's a firewall activate, as I know there are some restrictions by default in some linux distributions)

Re: If not localhost, Ldap authentification is impossible.

potitius — Wed, 05 Aug 2015 13:19:46 GMT

Hey,
Thank you for your response.

LDAP is accessible, I tested with telnet.

I am wondering if Activiti verify if LDAP has a certificate or not in order to authorize authentification ?
This is the only parameter that differ from my LDAP config and the company's LDAP config.

Re: If not localhost, Ldap authentification is impossible.

potitius — Wed, 05 Aug 2015 13:49:45 GMT

Hey all,

I just solved the problem.

If someone else meet the same issue then you just have to add this in your LDAP config, the default value was simple and it didn't work :
<code>
<property name="securityAuthentication" value="none" />
</code>

Re: If not localhost, Ldap authentification is impossible.

vasile_dirla — Wed, 05 Aug 2015 13:52:11 GMT

have a look into this class:
LdapConfiguration.java

here you'll see how it is done, and what exactly you should configure in order to make it work.

I suggest yo to connect to the real LDAP server from your development machine and then with a debugger you could see what's happening.

btw: do you have any relevant information into the log file ?

Re: If not localhost, Ldap authentification is impossible.

vasile_dirla — Wed, 05 Aug 2015 13:56:09 GMT

Ahh , just saw you solve it.

Thanks for sharing your problem along side with the solution.