topic LDAP - Bind Account Logs in no one else in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/ldap-bind-account-logs-in-no-one-else/m-p/196972#M150102 <HTML><HEAD></HEAD><BODY><SPAN>I have followed all the forum post for getting LDAP to work and believe I have it right but the only user that can log in is the actual bind account user. I am on Alfresco 3.x, Windows Server 2003 Standard, Full Install from Alfresco Community, etc. Please review the following file and let me know if anyone sees anything wrong that would cause just the actual bind account to login and no one else.</SPAN><BR /><BR /><SPAN>My ldap-authentication.properties file is the following:</SPAN><BR /><BR /><SPAN style="color:#008000;">#<BR /># This properties file brings together the common options for LDAP authentication rather than editing the bean definitions<BR />#<BR /><BR /># How to map the user id entered by the user to taht passed through to LDAP<BR /># - simple <BR />#&nbsp;&nbsp;&nbsp; - this must be a DN and would be something like<BR />#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CN=%s,DC=company,DC=com<BR /># - digest<BR />#&nbsp;&nbsp;&nbsp; - usually pass through what is entered<BR />#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; %s&nbsp; </SPAN><SPAN>&nbsp;&nbsp; </SPAN><BR /><SPAN>ldap.authentication.userNameFormat=%s</SPAN><BR /><BR /><SPAN style="color:#008000;"># The LDAP context factory to use</SPAN><BR /><SPAN>ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory</SPAN><BR /><BR /><SPAN style="color:#008000;"># The URL to connect to the LDAP server </SPAN><BR /><SPAN>ldap.authentication.java.naming.provider.url=ldap://pxdc05.us.pxd.pvt:389</SPAN><BR /><SPAN style="color:#008000;">#ldap.authentication.java.naming.provider.url=ldap://172.01.120.3:389</SPAN><BR /><BR /><BR /><BR /><SPAN style="color:#008000;"># The authentication mechanism to use</SPAN><BR /><SPAN>ldap.authentication.java.naming.security.authentication=SIMPLE</SPAN><BR /><BR /><SPAN style="color:#008000;"># The default principal to use (only used for LDAP sync)</SPAN><BR /><SPAN>ldap.authentication.java.naming.security.principal=CN=alf-mgr,OU=ServiceAccounts,OU=Communities,DC=us,DC=pxd,DC=pvt</SPAN><BR /><SPAN style="color:#008000;">#ldap.authentication.java.naming.security.principal=CN=alf-mgr<BR /># The password for the default principal (only used for LDAP sync)</SPAN><BR /><SPAN>ldap.authentication.java.naming.security.credentials=Xb1z3R5#</SPAN><BR /><BR /><SPAN style="color:#008000;"># Escape commas entered by the user at bind time<BR /># Useful when using simple authentication and the CN is part of the DN and contains commas</SPAN><BR /><SPAN>ldap.authentication.escapeCommasInBind=false</SPAN><BR /><BR /><SPAN style="color:#008000;"># Escape commas entered by the user when setting the authenticated user<BR /># Useful when using simple authentication and the CN is part of the DN and contains commas, and the escaped \, is <BR /># pulled in as part of an LDAP sync<BR /># If this option is set to true it will break the default home folder provider as space names can not contain \</SPAN><BR /><SPAN>ldap.authentication.escapeCommasInUid=false</SPAN></BODY></HTML> Thu, 05 Mar 2009 18:12:42 GMT neomlsra 2009-03-05T18:12:42Z LDAP - Bind Account Logs in no one else https://connect.hyland.com/t5/alfresco-archive/ldap-bind-account-logs-in-no-one-else/m-p/196972#M150102 I have followed all the forum post for getting LDAP to work and believe I have it right but the only user that can log in is the actual bind account user. I am on Alfresco 3.x, Windows Server 2003 Standard, Full Install from Alfresco Community, etc. Please review the following file and let me know i Thu, 05 Mar 2009 18:12:42 GMT https://connect.hyland.com/t5/alfresco-archive/ldap-bind-account-logs-in-no-one-else/m-p/196972#M150102 neomlsra 2009-03-05T18:12:42Z Re: LDAP - Bind Account Logs in no one else https://connect.hyland.com/t5/alfresco-archive/ldap-bind-account-logs-in-no-one-else/m-p/196973#M150103 <HTML><HEAD></HEAD><BODY><SPAN>I resolved this issue and everyone can log in now by changing from SIMPLE to DIGEST-MD5.&nbsp; Now on to chaining so I get the Admin to work.</SPAN></BODY></HTML> Thu, 05 Mar 2009 20:56:57 GMT https://connect.hyland.com/t5/alfresco-archive/ldap-bind-account-logs-in-no-one-else/m-p/196973#M150103 neomlsra 2009-03-05T20:56:57Z