topic Re: LDAP Authentication not working in Alfresco Archive

LDAP Authentication not working

paul99 — Tue, 20 Oct 2009 22:04:02 GMT

Hi,Using Alfresco Community Edition 3.2 on Ubuntu 9.04. I edited ldap-authentication.properties and restarted, but I can't seem to log in using my LDAP user id.I have used the same LDAP settings in Plone, TikiWiki and DekiWiki with success, so not sure why it's not working with Alfresco. Any ideas

Re: LDAP Authentication not working

lees — Wed, 21 Oct 2009 04:49:00 GMT

Did you updated your authentication chain?

Re: LDAP Authentication not working

paul99 — Mon, 26 Oct 2009 22:44:03 GMT

Did you updated your authentication chain?

Umm .. sorry, I must have don't recall seeing that in the documentation. How do I go about doing this?

Thanks,

Paul

Re: LDAP Authentication not working

bufke — Tue, 27 Oct 2009 19:57:37 GMT

Hi

I'm in the same boat but I think I do know what the authentication chain is. It tells alfresco what to check when logging in. So you could authenticate against many sources, say locally and AD in a specified order. In the file /usr/share/tomcat6/shared/classes/alfresco-global.properties I think you can add
authentication.chain=ldapfile:ldap
where ldapfile whatever you named the ldap extension.

Let me know if and how you get it working. This is the most confusing setup for ldap I've ever seen.

Re: LDAP Authentication not working

paul99 — Tue, 27 Oct 2009 20:07:46 GMT

Hi,

I got it sort of working. I added:

authentication.chain=ldap1:ldap

to:

../tomcat/shared/classes/alfresco-global.properties

and restarted. Then I was able to authenticate using LDAP; however, my admin password no longer worked. I recall reading that there is some way to specify exceptions to using LDAP for certain users.

I agree that the LDAP setup is more confusing than need be, compared to what I've used before.

Cheers,

Paul

Hi

I'm in the same boat but I think I do know what the authentication chain is. It tells alfresco what to check when logging in. So you could authenticate against many sources, say locally and AD in a specified order. In the file /usr/share/tomcat6/shared/classes/alfresco-global.properties I think you can add
authentication.chain=ldapfile:ldap
where ldapfile whatever you named the ldap extension.

Let me know if and how you get it working. This is the most confusing setup for ldap I've ever seen.