topic CIFS and LDAP in 3.2? in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/cifs-and-ldap-in-3-2/m-p/229732#M182862 <HTML><HEAD></HEAD><BODY><SPAN>I'm running Alfresco 3.2 CE in Linux and I'm trying to configure CIFS. This is my alfresco-global.properties:</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE>#<BR /># CIFS<BR />#—————–<BR />cifs.enabled=true<BR />cifs.serverName=hostname<BR />cifs.hostannounce=true<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>That works just fine when I use Alfresco's internal authentication, but when I disable that and enable LDAP only, it's no longer possible to connect through CIFS, the server is not listening at all on the appropriate ports.</SPAN><BR /><BR /><SPAN>This is my ldap config, which works alright when it comes to authentication:</SPAN><BR /><PRE class="language-none line-numbers"><CODE># This flag enables use of this LDAP subsystem for authentication. It may be<BR /># that this subsytem should only be used for synchronization, in which case<BR /># this flag should be set to false.<BR />ldap.authentication.active=true<BR /><BR />#<BR /># This properties file brings together the common options for LDAP authentication rather than editing the bean definitions<BR />#<BR />ldap.authentication.allowGuestLogin=true<BR /># How to map the user id entered by the user to taht passed through to LDAP<BR /># - simple <BR />#&nbsp;&nbsp;&nbsp; - this must be a DN and would be something like<BR />#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; uid=%s,ou=People,dc=company,dc=com<BR /># - digest<BR />#&nbsp;&nbsp;&nbsp; - usually pass through what is entered<BR />#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; %s&nbsp;&nbsp;&nbsp;&nbsp; <BR />ldap.authentication.userNameFormat=uid=%s,dc=domain,dc=com<BR /><BR /># The LDAP context factory to use<BR />ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory<BR /><BR /># The URL to connect to the LDAP server <BR />ldap.authentication.java.naming.provider.url=ldap://192.168.250.24:389<BR /><BR /># The authentication mechanism to use<BR />ldap.authentication.java.naming.security.authentication=simple<BR /><BR /># Escape commas entered by the user at bindi time<BR /># Useful when using simple authentication and the CN is part of the DN and contains commas<BR />ldap.authentication.escapeCommasInBind=false<BR /><BR /># Escape commas entered by the user when setting the authenticated user<BR /># Useful when using simple authentication and the CN is part of the DN and contains commas, and the escaped \, is <BR /># pulled in as part of an LDAP sync<BR /># If this option is set to true it will break the default home folder provider as space names can not contain \<BR />ldap.authentication.escapeCommasInUid=false<BR /><BR /># Comma separated list of user names who should be considered administrators by default<BR />ldap.authentication.defaultAdministratorUserNames=mikael@domain.com,ola@domain.com<BR /><BR /># This flag enables use of this LDAP subsystem for user and group<BR /># synchronization. It may be that this subsytem should only be used for <BR /># authentication, in which case this flag should be set to false.<BR />ldap.synchronization.active=false<BR /><BR /># The default principal to use (only used for LDAP sync)<BR />ldap.synchronization.java.naming.security.principal=uid=admin,dc=domain,dc=com<BR /><BR /># The password for the default principal (only used for LDAP sync)<BR />ldap.synchronization.java.naming.security.credentials=realTime08<BR /><BR /># If positive, this property indicates that RFC 2696 paged results should be<BR /># used to split query results into batches of the specified size. This<BR /># overcomes any size limits imposed by the LDAP server.<BR />ldap.synchronization.queryBatchSize=1000<BR /><BR /># The query to select all objects that represent the groups to import.<BR />ldap.synchronization.groupQuery=(objectclass\=groupOfNames)<BR /><BR /># The query to select objects that represent the groups to import that have changed since a certain time.<BR />ldap.synchronization.groupDifferentialQuery=(&amp;(objectclass\=groupOfNames)(!(modifyTimestamp&lt;\={0})))<BR /><BR /># The query to select all objects that represent the users to import.<BR />ldap.synchronization.personQuery=(objectclass\=inetOrgPerson)<BR /><BR /># The query to select objects that represent the users to import that have changed since a certain time.<BR />ldap.synchronization.personDifferentialQuery=(&amp;(objectclass\=inetOrgPerson)(!(modifyTimestamp&lt;\={0})))<BR /><BR /># The group search base restricts the LDAP group query to a sub section of tree on the LDAP server.<BR />#ldap.synchronization.groupSearchBase=dc=domain,dc=com<BR /><BR /># The user search base restricts the LDAP user query to a sub section of tree on the LDAP server.<BR />#ldap.synchronization.userSearchBase=dc=domain,dc=com<BR /><BR /># The name of the operational attribute recording the last update time for a group or user.<BR />ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp<BR /><BR /># The timestamp format. Unfortunately, this varies between directory servers.<BR />ldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'<BR /><BR /># The attribute name on people objects found in LDAP to use as the uid in Alfresco<BR />ldap.synchronization.userIdAttributeName=uid<BR /><BR /># The attribute on person objects in LDAP to map to the first name property in Alfresco<BR />ldap.synchronization.userFirstNameAttributeName=givenName<BR /><BR /># The attribute on person objects in LDAP to map to the last name property in Alfresco<BR />ldap.synchronization.userLastNameAttributeName=sn<BR /><BR /># The attribute on person objects in LDAP to map to the email property in Alfresco<BR />ldap.synchronization.userEmailAttributeName=mail<BR /><BR /># The attribute on person objects in LDAP to map to the organizational id&nbsp; property in Alfresco<BR />ldap.synchronization.userOrganizationalIdAttributeName=o<BR /><BR /># The default home folder provider to use for people created via LDAP import<BR />ldap.synchronization.defaultHomeFolderProvider=personalHomeFolderProvider<BR /><BR /># The attribute on LDAP group objects to map to the gid property in Alfrecso<BR />ldap.synchronization.groupIdAttributeName=cn<BR /><BR /># The group type in LDAP<BR />ldap.synchronization.groupType=groupOfNames<BR /><BR /># The person type in LDAP<BR />ldap.synchronization.personType=inetOrgPerson<BR /><BR /># The attribute in LDAP on group objects that defines the DN for its members<BR />ldap.synchronization.groupMemberAttributeName=member<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>There are no error messages in the log (it just says that the File Servers subsystem is started).</SPAN><BR /><BR /><SPAN>What do I need to do to get LDAP and CIFS working together?</SPAN></BODY></HTML> Mon, 21 Sep 2009 13:10:50 GMT gronfelt 2009-09-21T13:10:50Z CIFS and LDAP in 3.2? https://connect.hyland.com/t5/alfresco-archive/cifs-and-ldap-in-3-2/m-p/229732#M182862 I'm running Alfresco 3.2 CE in Linux and I'm trying to configure CIFS. This is my alfresco-global.properties:## CIFS#—————–cifs.enabled=truecifs.serverName=hostnamecifs.hostannounce=true‍‍‍‍‍‍That works just fine when I use Alfresco's internal authentication, but when I disable that and enable LDAP Mon, 21 Sep 2009 13:10:50 GMT https://connect.hyland.com/t5/alfresco-archive/cifs-and-ldap-in-3-2/m-p/229732#M182862 gronfelt 2009-09-21T13:10:50Z Re: CIFS and LDAP in 3.2? https://connect.hyland.com/t5/alfresco-archive/cifs-and-ldap-in-3-2/m-p/229733#M182863 <HTML><HEAD></HEAD><BODY><SPAN>Unfortunately, an LDAP server is not capable of supporting CIFS authentication, because it needs NTLM-like authentication.</SPAN><BR /><BR /><SPAN>So your only option would be to chain another authentication subsystem, e.g. alfrescoNtlm or passthru.</SPAN><BR /><BR /><SPAN>For example</SPAN><BR /><BR /><SPAN>authentication.chain=alfrescoNtlm:alfrescoNtlm,ldap1:ldap</SPAN><BR /><BR /><SPAN>would allow the internal alfresco users (but not the ldap users) to authenticate with CIFS.</SPAN></BODY></HTML> Mon, 21 Sep 2009 13:22:49 GMT https://connect.hyland.com/t5/alfresco-archive/cifs-and-ldap-in-3-2/m-p/229733#M182863 dward 2009-09-21T13:22:49Z Re: CIFS and LDAP in 3.2? https://connect.hyland.com/t5/alfresco-archive/cifs-and-ldap-in-3-2/m-p/229734#M182864 <HTML><HEAD></HEAD><BODY><SPAN>I should add that if your LDAP server is Active Directory, it would make more sense to chain the passthru authentication subsytem to directly authenticate CIFS users with the backend server.</SPAN></BODY></HTML> Mon, 21 Sep 2009 13:25:00 GMT https://connect.hyland.com/t5/alfresco-archive/cifs-and-ldap-in-3-2/m-p/229734#M182864 dward 2009-09-21T13:25:00Z