Integration with AD 2003

adnan_douglas — Sun, 02 Aug 2009 13:45:56 GMT

Can anyone can help me in Alfresco configuration and Integration with AD?I need to allow the users to use their windows account to access Alfresco.Perform SSO on alfresco V3.2Regards,Adnan

Re: Integration with AD 2003

paulweb — Mon, 03 Aug 2009 02:14:00 GMT

view help alfresco 3.2. Your problem there is

my config system: Os win xp pro
configuration ldap (alfresco use openLdAP)
in global properties (file:alfresco-global.properties)

authentication.chain=alfrescoNtlm1:alfrescoNtlm,ldap1:ldap

then in file tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\ldap\ldap-authentication.properties

ldap.authentication.active=true
ldap.authentication.userNameFormat=%s@youdomain.com
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://xx.x.x.xx:389/DC=youdomain,DC=com?samaccountname?base?
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.defaultAdministratorUserNames=admin
ldap.synchronization.java.naming.security.principal=admin@youdomain.com
ldap.synchronization.java.naming.security.credentials=xxxxxxx #(password)
# following settings is synchronization but i am not config and i set false (maybe our ad use in groups russian names. openLDAP not working russian, only
# through base64. but i am testing query without groups, but not working synchronization )
ldap.synchronization.active=true
ldap.synchronization.queryBatchSize=1000
ldap.synchronization.groupQuery=(objectclass\=organizationalUnit)
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=organizationalUnit)(!(modifyTimestamp<\={0})))
ldap.synchronization.personQuery=(&(objectclass\=organizationalPerson)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=organizationalPerson)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp<\={0})))
ldap.synchronization.groupSearchBase=DC\=youdomain,DC\=com
ldap.synchronization.userSearchBase=DC\=youdomain,DC\=com
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'
ldap.synchronization.userIdAttributeName=sAMAccountName
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=company
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupType=group
ldap.synchronization.personType=user
ldap.synchronization.groupMemberAttributeName=member

Re: Integration with AD 2003

dward — Mon, 03 Aug 2009 09:37:12 GMT

For your particular case, I would recommend the chain

authentication.chain=passthru1assthru,ldap1:ldap-ad

That way you can use the domain controller directly for authentication, and still synchronize user account details via LDAP.

See http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#Example

topic Re: Integration with AD 2003 in Alfresco Archive

Integration with AD 2003

Re: Integration with AD 2003

Re: Integration with AD 2003