topic Re: Sync LDAP and Alfresco Passwords in Alfresco Archive

Sync LDAP and Alfresco Passwords

athrawn17 — Thu, 17 Jun 2010 16:56:44 GMT

I am using Alfresco 3.3I would love to use SSO with NTLM v2 for authentication. From the documentation:This basic use of NTLM requires Alfresco to store its own copies of your MD4 password hash, which means your user ID and password must be the same in both Alfresco and your Windows domain.I have t

Re: Sync LDAP and Alfresco Passwords

richard_im — Fri, 18 Jun 2010 14:25:41 GMT

Authentication and synchronization are treated as two separate things. So, you should set up ntlm passthru authentication to the windows domain server, but use LDAP sync to import users and groups.

Re: Sync LDAP and Alfresco Passwords

athrawn17 — Fri, 18 Jun 2010 18:28:08 GMT

… So, you should set up ntlm passthru authentication to the windows domain server, but use LDAP sync to import users and groups.

Unfortunately this doesn't work since passthru only supports NTLM v1. Unless there is something I'm overlooking from reading the documentation.

Re: Sync LDAP and Alfresco Passwords

richard_im — Fri, 18 Jun 2010 21:43:43 GMT

tradeoffs…

why not do kerberos?

Re: Sync LDAP and Alfresco Passwords

athrawn17 — Mon, 21 Jun 2010 16:39:17 GMT

why not do kerberos?

Alas, Kerberos is not available for us. We technically could invest the time and money to set it all up, but if there was a way to sync the LDAP passwords with alfresco's internal storage then we wouldn't have to.

As of now we have the authentication happening against the Active Directory LDAP system, but the SSO isn't possible since Alfresco doesn't know about the user's passwords. As much as I like Alfresco, I'm worried that this is going to be a deal killer for using it.

Re: Sync LDAP and Alfresco Passwords

fracat71 — Thu, 16 Sep 2010 21:43:41 GMT

Hi,
i have the same error.
How do you solve it?

Thanks