topic [SOLVED] Authentication Active direcotory by sAMAccountName in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/solved-authentication-active-direcotory-by-samaccountname/m-p/225523#M178653 <HTML><HEAD></HEAD><BODY><SPAN>Hi all,</SPAN><BR /><SPAN>I'm looking how to loggin a user via LDAP AD sAMAccountName parameter.</SPAN><BR /><BR /><SPAN>My ldap-ad-authentication.properties is this:</SPAN><BR /><PRE class="language-none line-numbers"><CODE>ldap.authentication.active=true<BR />ldap.authentication.allowGuestLogin=true<BR />ldap.authentication.userNameFormat=%s<BR /># Try also with this<BR />#ldap.authentication.userNameFormat=%s@mytria.tria.it<BR />#ldap.authentication.userNameFormat=sAMAccountName=%s<BR />#ldap.authentication.userNameFormat=cn=%s,cn=Users,DC=mytria,DC=tria,DC=it<BR />ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory<BR />ldap.authentication.java.naming.provider.url=ldap://&lt;server&gt;:389<BR />ldap.authentication.java.naming.security.authentication=simple<BR />ldap.authentication.escapeCommasInBind=false<BR />ldap.authentication.escapeCommasInUid=false<BR />ldap.authentication.defaultAdministratorUserNames=Administrator<BR />ldap.synchronization.active=true<BR />ldap.synchronization.java.naming.security.principal=cn=user1,cn=Users,DC=mytria,DC=tria,DC=it<BR />ldap.synchronization.java.naming.security.credentials=12345678<BR />ldap.synchronization.queryBatchSize=1000<BR />ldap.synchronization.attributeBatchSize=1000<BR />ldap.synchronization.groupQuery=(objectclass\=group)<BR />ldap.synchronization.groupDifferentialQuery=(&amp;(objectclass\=group)(!(modifyTimestamp&lt;\={0})))<BR />ldap.synchronization.personQuery=(&amp;(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))<BR />ldap.synchronization.personDifferentialQuery=(&amp;(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp&lt;\={0})))<BR />ldap.synchronization.groupSearchBase=cn=Users,DC=mytria,DC=tria,DC=it<BR />ldap.synchronization.userSearchBase=cn=Users,DC=mytria,DC=tria,DC=it<BR />ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp<BR />ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'<BR />ldap.synchronization.userIdAttributeName=sAMAccountName<BR />ldap.synchronization.userFirstNameAttributeName=givenName<BR />ldap.synchronization.userLastNameAttributeName=sn<BR />ldap.synchronization.userEmailAttributeName=mail<BR />ldap.synchronization.userOrganizationalIdAttributeName=company<BR />ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider<BR />ldap.synchronization.groupIdAttributeName=cn<BR />ldap.synchronization.groupDisplayNameAttributeName=displayName<BR />ldap.synchronization.groupType=group<BR />ldap.synchronization.personType=user<BR />ldap.synchronization.groupMemberAttributeName=member<BR />ldap.synchronization.enableProgressEstimation=true<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>And my alfresco-global.properties inside the "classes" folder have this configuration for authentication:</SPAN><BR /><PRE class="language-none line-numbers"><CODE>authentication.chain=ldap-ad1:ldap-ad<SPAN class="line-numbers-rows"><SPAN>‍</SPAN></SPAN></CODE></PRE><SPAN>ù</SPAN><BR /><BR /><SPAN>A simple user inside AD is like this:</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />dn: CN=test user,CN=Users,DC=mytria,DC=tria,DC=it<BR />cn: test user<BR />displayName: test user<BR />distinguishedName: CN=test user,CN=Users,DC=mytria,DC=tria,DC=it<BR />givenName: test user<BR />mail: user1@mytria.it<BR />mailNickname: user_1<BR />name: test user<BR />sAMAccountName: user1<BR />sn: 1<BR />userPrincipalName: user1@mytria.tria.it<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>I try to login with user:</SPAN><BR /><SPAN>user1</SPAN><BR /><SPAN><A class="jive-link-email-small" href="mailto:user1@mytria.tria.it" rel="nofollow noopener noreferrer">user1@mytria.tria.it</A></SPAN><BR /><SPAN>test user</SPAN><BR /><BR /><SPAN>but all this account don't work for login inside Alfresco via LDAP AD.</SPAN><BR /><BR /><SPAN>CAN YOU HELP ME?</SPAN><BR /><BR /><SPAN>THANK YOU</SPAN></BODY></HTML> Fri, 24 Sep 2010 09:29:25 GMT chicco0386 2010-09-24T09:29:25Z [SOLVED] Authentication Active direcotory by sAMAccountName https://connect.hyland.com/t5/alfresco-archive/solved-authentication-active-direcotory-by-samaccountname/m-p/225523#M178653 Hi all,I'm looking how to loggin a user via LDAP AD sAMAccountName parameter.My ldap-ad-authentication.properties is this:ldap.authentication.active=trueldap.authentication.allowGuestLogin=trueldap.authentication.userNameFormat=%s# Try also with this#ldap.authentication.userNameFormat=%s@mytria.tria Fri, 24 Sep 2010 09:29:25 GMT https://connect.hyland.com/t5/alfresco-archive/solved-authentication-active-direcotory-by-samaccountname/m-p/225523#M178653 chicco0386 2010-09-24T09:29:25Z Re: [SOLVED] Authentication Active direcotory by sAMAccountName https://connect.hyland.com/t5/alfresco-archive/solved-authentication-active-direcotory-by-samaccountname/m-p/225524#M178654 <HTML><HEAD></HEAD><BODY><SPAN>I've solved.</SPAN><BR /><SPAN>Now I can log me in with user1 and ldap password.</SPAN><BR /><BR /><SPAN>I use:</SPAN><BR /><PRE class="language-none line-numbers"><CODE>ldap.authentication.userNameFormat=%s@mytria.tria.it<SPAN class="line-numbers-rows"><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>and</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE>authentication.chain=ldap-ad1:ldap-ad,alfrescoNtlm1:alfrescoNtlm<SPAN class="line-numbers-rows"><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>I hope that this can you help me.</SPAN><BR /><BR /><SPAN>BYE</SPAN></BODY></HTML> Fri, 24 Sep 2010 10:05:04 GMT https://connect.hyland.com/t5/alfresco-archive/solved-authentication-active-direcotory-by-samaccountname/m-p/225524#M178654 chicco0386 2010-09-24T10:05:04Z