topic Re: LDAP not using specified configuration in Alfresco Archive

LDAP not using specified configuration

warlockvix — Fri, 23 Jul 2010 14:13:40 GMT

Having a bit of an issue with my new alfresco install. I installed Alfresco 3.3g on Windows 2k3 and I am trying to sync and authenticate with AD. For past installs, I've always gone into ldap-ad-authentication.properties or created a changes.properties file and specified what server to point at for

Re: LDAP not using specified configuration

dward — Fri, 23 Jul 2010 15:01:49 GMT

You should NEVER edit any of the configuration files under WEB-INF/classes.

Your own configuration lives under $TOMCAT_HOME/shared/classes/alfresco/extension

Your subsystem override configuration lives under $TOMCAT_HOME/shared/classes/alfresco/extension/subsystems/Authentication/ldap-ad/ldap1

(assuming that you have ldap1:ldap-ad in your authentication chain).

Read http://wiki.alfresco.com/wiki/Alfresco_Subsystems#Configuring_Subsystems

Re: LDAP not using specified configuration

warlockvix — Mon, 26 Jul 2010 12:51:30 GMT

Thanks for the reply, however it isn't my editing of ldap-ad-authentication.properties that is causing this issue. I edit the files under WEB-INF/classes when I notice something isn't being read by my own configuration files. Yes, configurations aren't always read and yes, editing the files under WEB-INF/classes will work as long as you don't screw them up. I know why you shouldn't do it but I also know (from testing and experience) that if you edit the files carefully under WEB-INF/classes that Alfresco will run without any problems. Now on to my issue.

To appease your post, I removed Alfresco and completely reinstalled using only my configuration files. So a new install and I'm configuring Alfresco to use "authentication.chain=passthru1assthru,ldap-ad1:ldap-ad" and CIFS. Which means I've created a changes.properties for files server, passthru and ldap-ad1. Again, same issue. The ldap-ad1 is still returning "Caused by: javax.naming.PartialResultException [Root exception is javax.naming.CommunicationException: THISISMYDOMAIN.COM:389 [Root exception is java.net.ConnectException: Connection timed out: connect]]" and not using the IP address I have in the changes.properties file.

I can ping the IP of the LDAP server from the Alfresco server.
I can ping DNS name of the LDAP server from the Alfresco server.
I have used the LDAP server DNS in my configuration.
I can telnet to the LDAP server from the Alfresco server.
The Alfresco server is part of the domain
Alfresco is in a VM - but then, I've always run Alfresco in a VM but I figure I'd mention it.

So again I ask if anyone has any ideas?

Ldap-ad1 changes.properties snippet
ldap.authentication.java.naming.provider.url=ldap://10.10.3.51:389

Passthru changes.properties snippet
passthru.authentication.domain=THISISMYDOMAIN
passthru.authentication.servers=THISISMYDOMAIN\\10.10.3.51

Re: LDAP not using specified configuration

dward — Mon, 26 Jul 2010 17:49:23 GMT

Please read http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#Domain_level_properties

You shouldn't set domain and servers at the same time. A more typical setting would be

passthru.authentication.domain=
passthru.authentication.servers=THISISMYDOMAIN\\10.10.3.51,10.10.3.51

Re: LDAP not using specified configuration

warlockvix — Tue, 27 Jul 2010 13:33:50 GMT

Yes, I'm familiar with article because it was written for 3.2. And this is the same configuration I used with 3.0 and 3.2r. And while not typical, I have never received a LDAP timeout error because of the passthru configuration. However, I did make the change that you suggested and I am still receiving the same error.

But judging by your comments, I am assuming no new LDAP configuration files have been introduced into Alfresco. Which means that either my install is bugged or something is wrong with the server. I'll download the install package and try a new install again. If that doesn't work, I'll reinstall the OS.

Re: LDAP not using specified configuration

dward — Tue, 27 Jul 2010 13:47:13 GMT

The configuration changed in 3.2 and has not changed since. The article I pointed you to applied to release 3.2 onwards. Not 3.0.

Your error suggests that it is trying to use THISISMYDOMAIN.COM:389 as ldap.authentication.java.naming.provider.url. Check for duplicate settings of this property.

Or perhaps there is some kind of federation / load balancing going on between ldap://10.10.3.51:389 and THISISMYDOMAIN.COM:389 ? Make sure that THISISMYDOMAIN.COM actually resolves on the alfresco host, e.g. by adding an entry to C:\Windows\System32\drivers\etc\hosts.

Re: LDAP not using specified configuration

warlockvix — Tue, 27 Jul 2010 14:24:04 GMT

No duplication, no load balancing. Ok, "THISISMYDOMAIN.COM" is referring to the domain, not an actual host, server or PC. I used IP addresses in my configuration files when pointing to a differnet host, server or PC so I can try to figure out where "THISISMYDOMAIN.COM" is being pulled from. The Alfresco host is part of the domain and can authenticate with it. I've also removed the Alfresco host from the domain, deleted the account and rejoined the domain.

It wants to use "THISISMYDOMAIN.COM" as ldap.authentication.java.naming.provider.url but nowhere in my config files is "THISISMYDOMAIN.COM" even mentioned. Nor is THISISMYDOMAIN.COM pointing towards anything in my hosts file that might be overriding the IP address.

The new install file has completed its download. I'll wipe the current install and reinstall using the new executable. If that doesn't resolve the issue, I'll reinstall Windows.

Re: LDAP not using specified configuration

warlockvix — Fri, 30 Jul 2010 12:15:11 GMT

Reinstall of WIndows resolved the issue. Hasn't error'd in 2 days.

Re: LDAP not using specified configuration

lblancher — Tue, 30 Aug 2011 22:01:11 GMT

Hello,

I experienced this problem with ldap synchronization, Alfresco was using the wrong url to connect to the ldap server. I was using Java 1.6.0_22. I updated to 1.6.0_27 and the problem was resolved. Maybe its a bug in Java????

Lucas Blancher
BizXcel Inc.

Re: LDAP not using specified configuration

nileshyadav326 — Tue, 07 Nov 2017 18:39:52 GMT

How u have updated to 1.6.0_27 ?