Authentication Nightmare

jpv — Thu, 22 Oct 2009 12:00:10 GMT

I have been trying to configure Alfresco authentication against our Active Directory for more than a month now without any luck. I have followed every conflicting instruction out there and re-installed Alfresco at least 30 times on 6 different servers on Windows 2K3, XP, Ubuntu and Solaris. I used

Re: Authentication Nightmare

jpv — Thu, 22 Oct 2009 13:38:04 GMT

The closest I could get to a fully working system is with the following settings in alfresco-global.properties.
This gives me a working Alfresco, Share and CIFS but non working VTI and IMAP.

authentication.chain=PASSassthru,AD:ldap-ad
#NTLM
#====================
ntlm.authentication.sso.enabled=true
ntlm.authentication.mapUnknownUserToGuest=false
alfresco.authentication.allowGuestLogin=true
alfresco.authentication.authenticateCIFS=true
#PASSTHROUGH
#=====================
passthru.authentication.defaultAdministratorUserNames=USERID
passthru.authentication.useLocalServer=false
passthru.authentication.servers=DOMAIN\\DC01.DOMAIN.co.za
passthru.authentication.domain=#
passthru.authentication.authenticateCIFS=true
passthru.authentication.guestAccess=true
passthru.authentication.authenticateCIFS=true
#AD
#=======================
ldap.authentication.active=false
ldap.authentication.sso.enabled=true
ldap.synchronization.active=true
ldap.authentication.java.naming.security.authentication=SIMPLE
ldap.authentication.defaultAdministratorUserNames=USERID
ldap.synchronization.java.naming.security.principal=USERID@DOMAIN
ldap.synchronization.java.naming.security.credentials=PASSWORD
ldap.authentication.userNameFormat=%s@DOMAIN
ldap.authentication.java.naming.provider.url=ldap://DC01.DOMAIN.co.za:389
ldap.synchronization.groupSearchBase=ou\=Groups,dc\=DOMAIN,dc\=co,dc\=za
ldap.synchronization.userSearchBase=ou\=User Accounts,dc\=DOMAIN,dc\=co,dc\=za

topic Re: Authentication Nightmare in Alfresco Archive

Authentication Nightmare

Re: Authentication Nightmare