topic Re: Configure Alfresco with LDAP for Authentication in Alfresco Archive

Configure Alfresco with LDAP for Authentication

sksahu — Thu, 30 Jul 2009 07:22:17 GMT

Hello, I had configured Alfresco to authenticate with database , which works fine. Now I am trying to configure with OpenLDAP for authentication. we have closely followed the steps in wiki . I have updated the following xmlldap-authentication-context.xmlldap-synchronisation-context.xmlBut still , al

Re: Configure Alfresco with LDAP for Authentication

dward — Thu, 30 Jul 2009 10:12:15 GMT

What Wiki article were you reading? Please see

http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems

All other wiki articles on LDAP are out of date and point to this one. There should be no need to edit any context.xml files.

Re: Configure Alfresco with LDAP for Authentication

sksahu — Fri, 31 Jul 2009 05:47:57 GMT

Hello,

Thanks for the Information.I did the configuration of LDAP as described in the link,which works fine.

http://wiki.alfresco.com/wiki/Enterprise_Security_and_Authentication_Configuration#Changes_after_2.1

After this configuration,all the existing users in openLDAP imported to Alfresco DB.But I do nt want to import the users to Alfresco DB,instead of directly authentication with openLDAP.

When I will try to creat session with ALfresco,It should connect to configued openLDAP and auntenticate the user.Is there any way to implement this?

Thanks

Re: Configure Alfresco with LDAP for Authentication

dward — Fri, 31 Jul 2009 08:52:48 GMT

Yes. Just use the LDAPAuthenticationComponent as documented on the page you are reading. I assume you are using v3.1?

Re: Configure Alfresco with LDAP for Authentication

sksahu — Fri, 31 Jul 2009 11:17:11 GMT

Hello,

Thanks for the information.

I am using alfresco v3.0 and openLDAP authentication server.

I went through LDAPAuthenticationComponent mentioned in that document ,but it describes how to import the user details in to Alfresco DB.

My requirementy is to aunthenticate user credentials directly with openLDAP rather then imported data in Alfresco DB.Please give some information(detailed) to impliment this.

Appreciate your help.

Thanks

Re: Configure Alfresco with LDAP for Authentication

dward — Fri, 31 Jul 2009 12:20:26 GMT

LDAPAuthenticationComponent validates user names and passwords directly against an LDAP server. The passwords do not need to be stored in the Alfresco database. There is no need to set up synchronization if you don't want (but it would make sense, as then Alfresco would get email address information). Even with synchronization set up, the passwords are not exported from the LDAP directory and authentication is done live against the LDAP directory.

Just copy custom-ldap-authentication-context.xml.sample to $TOMCAT_HOME/shared/classes/alfresco/extension and configure it to your needs. (Readers note that in v3.2 it can all be set up with a few lines in alfresco-global.properties).

Re: Configure Alfresco with LDAP for Authentication

sksahu — Mon, 03 Aug 2009 05:45:25 GMT

I have configued the ldap-authentication-context.xml file with required changed in \Alfresco\tomcat\shared\classes\alfresco\extension sub floder,but I am getting the below Error.
————————————————————————————————————————————-
11:12:48,010 ERROR [org.alfresco.smb.protocol.auth] No valid CIFS authentication combination available
11:12:48,010 ERROR [org.alfresco.smb.protocol.auth] Either enable Kerberos support or use an authentication component that supports MD4 hashed passwords
11:12:48,010 ERROR [org.alfresco.smb.protocol] CIFS server configuration error, Invalid CIFS authenticator configuration
org.alfresco.error.AlfrescoRuntimeException: Invalid CIFS authenticator configuration   at org.alfresco.filesys.auth.cifs.EnterpriseCifsAuthenticator.initialize(EnterpriseCifsAuthenticator.java:389)
   at org.alfresco.jlan.smb.server.CIFSConfigSection.setAuthenticator(CIFSConfigSection.java:607)
   at org.alfresco.filesys.ServerConfigurationBean.processCIFSServerConfig(ServerConfigurationBean.java:881)
   at org.alfresco.filesys.ServerConfigurationBean.init(ServerConfigurationBean.java:546)
   at org.alfresco.filesys.ServerConfigurationBean.onApplicationEvent(ServerConfigurationBean.java:3098)
   at org.springframework.context.event.SimpleApplicationEventMulticaster$1.run(SimpleApplicationEventMulticaster.java:77)
   at org.springframework.core.task.SyncTaskExecutor.execute(SyncTaskExecutor.java:49)
   at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:75)
   at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:246)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:355)
   at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:244)
   at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:187)
   at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:49)
   at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3843)
   at org.apache.catalina.core.StandardContext.start(StandardContext.java:4342)
   at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:791)
   at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:771)
   at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:525)
   at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:830)
   at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:719)
   at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:490)
   at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1149)
   at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:311)
————————————————————————————————-

Please let me know how to over come this Error? Thanks

Re: Configure Alfresco with LDAP for Authentication

dward — Mon, 03 Aug 2009 09:29:49 GMT

Yes, you're falling into all the pitfalls that were involved in configuring LDAP pre-v3.2.

Next you have to either disable CIFS (because the LDAP authentication component cannot support CIFS authentication) or chain the built-in AuthenticationComponentImpl so that the built in Alfresco users can still authenticate with CIFS (complex in v3.1 - see chaining-authentication-context.xml.sample).

Please see my post

http://forums.alfresco.com/en/viewtopic.php?f=10&t=20661&p=67398#p67398