topic Error al conectar con Active Directoy Win 2012 in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/error-al-conectar-con-active-directoy-win-2012/m-p/210137#M163267 <HTML><HEAD></HEAD><BODY><SPAN>Buenos dias,</SPAN><BR /><BR /><SPAN>De antemano agradezco la ayuda en lo siguiente: tengo problemas al conectar alfresco 5.0.d a un directorio activo en windows 2012. Como dato adicional, se ha conectado herramientas de este tipo como GLPI a este dominio por el puerto 636 de manera exitosa.</SPAN><BR /><BR /><SPAN>***La configuración que tengo es la siguiente:***</SPAN><BR /><BR /><SPAN>ldap.authentication.active=true</SPAN><BR /><SPAN>authentication.chain=alfinst:alfrescoNtlm,ldap1:ldap-ad</SPAN><BR /><BR /><SPAN>ntlm.authentication.sso.enabled=false</SPAN><BR /><BR /><SPAN>ldap.authentication.allowGuestLogin=false</SPAN><BR /><SPAN>ldap.authentication.userNameFormat=%s@servppal.empresa.local</SPAN><BR /><SPAN>ldap.authentication.java.naming.provider.url=ldaps://10.121.100.12:636</SPAN><BR /><SPAN>ldap.authentication.defaultAdministratorUserNames=alfresco</SPAN><BR /><BR /><SPAN>ldap.authentication.java.naming.security.authentication=SIMPLE</SPAN><BR /><SPAN>ldap.authentication.java.naming.read.timeout=60000</SPAN><BR /><BR /><SPAN>ldap.synchronization.java.naming.security.principal=alfresco@servppal.empresa.local</SPAN><BR /><SPAN>ldap.synchronization.java.naming.security.credentials=xxxxx&nbsp;&nbsp;&nbsp;</SPAN><BR /><SPAN>ldap.synchronization.groupSearchBase=dc\=servppal,dc\=empresa,dc\=local</SPAN><BR /><SPAN>ldap.synchronization.userSearchBase=dc\=servppal,dc\=empresa,dc\=local</SPAN><BR /><BR /><SPAN>____________________________________</SPAN><BR /><BR /><SPAN>***El error es el siguiente: ***</SPAN><BR /><SPAN>2016-05-03 11:59:15,113 INFO&nbsp; [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'Authentication' subsystem, ID: [Authentication, managed, alfinst]</SPAN><BR /><SPAN>2016-05-03 11:59:15,411 INFO&nbsp; [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'Authentication' subsystem, ID: [Authentication, managed, alfinst] complete</SPAN><BR /><SPAN>2016-05-03 11:59:15,411 INFO&nbsp; [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'Authentication' subsystem, ID: [Authentication, managed, ldap1]</SPAN><BR /><SPAN>2016-05-03 11:59:15,644 ERROR [org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextFactoryImpl] [localhost-startStop-1] Unable to connect to LDAP Server; check LDAP configuration</SPAN><BR /><SPAN>javax.naming.CommunicationException: simple bind failed: 10.121.100.12:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at com.sun.jndi.ldap.LdapClient.authenticate(Unknown Source)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at com.sun.jndi.ldap.LdapCtx.connect(Unknown Source)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at com.sun.jndi.ldap.LdapCtx.&lt;init&gt;(Unknown Source)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(Unknown Source)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(Unknown Source)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(Unknown Source)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(Unknown Source)</SPAN><BR /><BR /><BR /></BODY></HTML> Tue, 03 May 2016 17:59:54 GMT enriquejose 2016-05-03T17:59:54Z Error al conectar con Active Directoy Win 2012 https://connect.hyland.com/t5/alfresco-archive/error-al-conectar-con-active-directoy-win-2012/m-p/210137#M163267 Buenos dias,De antemano agradezco la ayuda en lo siguiente: tengo problemas al conectar alfresco 5.0.d a un directorio activo en windows 2012. Como dato adicional, se ha conectado herramientas de este tipo como GLPI a este dominio por el puerto 636 de manera exitosa.***La configuración que tengo es Tue, 03 May 2016 17:59:54 GMT https://connect.hyland.com/t5/alfresco-archive/error-al-conectar-con-active-directoy-win-2012/m-p/210137#M163267 enriquejose 2016-05-03T17:59:54Z Re: Error al conectar con Active Directoy Win 2012 https://connect.hyland.com/t5/alfresco-archive/error-al-conectar-con-active-directoy-win-2012/m-p/210138#M163268 <HTML><HEAD></HEAD><BODY><SPAN>Necesitas incluir el certificado SSL del LDAP (la parte pública) en el </SPAN><PRE class="language-none line-numbers"><CODE>cacerts<SPAN class="line-numbers-rows"><SPAN>‍</SPAN></SPAN></CODE></PRE><SPAN> de la JVM que empleas para lanzar Alfresco.</SPAN></BODY></HTML> Tue, 03 May 2016 20:04:49 GMT https://connect.hyland.com/t5/alfresco-archive/error-al-conectar-con-active-directoy-win-2012/m-p/210138#M163268 angelborroy 2016-05-03T20:04:49Z Re: Error al conectar con Active Directoy Win 2012 https://connect.hyland.com/t5/alfresco-archive/error-al-conectar-con-active-directoy-win-2012/m-p/210139#M163269 <HTML><HEAD></HEAD><BODY><SPAN>Hola angel gracias por tu respuesta, podrias referenciarme algo de como hacer esto que planteas.</SPAN><BR /><BR /><SPAN>Muchas gracias</SPAN></BODY></HTML> Wed, 04 May 2016 21:41:14 GMT https://connect.hyland.com/t5/alfresco-archive/error-al-conectar-con-active-directoy-win-2012/m-p/210139#M163269 enriquejose 2016-05-04T21:41:14Z Re: Error al conectar con Active Directoy Win 2012 https://connect.hyland.com/t5/alfresco-archive/error-al-conectar-con-active-directoy-win-2012/m-p/210140#M163270 <HTML><HEAD></HEAD><BODY><SPAN>Tienes un montón de tutoriales por ahí, por ejemplo éste para añadir la CA de Azure al cacerts de Java: </SPAN><A href="https://azure.microsoft.com/en-us/documentation/articles/java-add-certificate-ca-store/" rel="nofollow noopener noreferrer">https://azure.microsoft.com/en-us/documentation/articles/java-add-certificate-ca-store/</A><BR /><BR /><SPAN>Tienes que incluir la parte pública del certificado de tu ldapS en el fichero </SPAN><PRE class="language-none line-numbers"><CODE>/opt/alfresco/java/lib/security/cacerts<SPAN class="line-numbers-rows"><SPAN>‍</SPAN></SPAN></CODE></PRE><SPAN>. De esta manera, la comunicación SSL puede establecerse de manera segura.</SPAN></BODY></HTML> Thu, 05 May 2016 06:37:08 GMT https://connect.hyland.com/t5/alfresco-archive/error-al-conectar-con-active-directoy-win-2012/m-p/210140#M163270 angelborroy 2016-05-05T06:37:08Z