How to add Alfresco users to ldap directory?

sandhya25186 — Mon, 26 Jul 2010 09:46:21 GMT

I have integrated my alfresco 3.3g in ubuntu to use ldap,which is successfully starting without giving any errors but in the login page, im at loss what credentials to give?This are my directory entires :-dn: dc=macif-lfn,dc=comdc: macif-lfnobjectClass: dcObjectobjectClass: organizationalUnitou: mac

Re: How to add Alfresco users to ldap directory?

jpotts — Tue, 27 Jul 2010 16:44:05 GMT

Here's where your config tells Alfresco what to try to bind against LDAP with:
ldap.authentication.userNameFormat=%s,ou=Users,dc=macif-lfn,dc=com

The "%s" string will be replaced with what you use to login with.

I'm noticing that you have your ou=Users but your LDIF file has ou=People.

dn: uid=admin,ou=people,dc=macif-lfn,dc=com
dn: cn=Charlton Heston,ou=people,dc=macif-lfn,dc=com
dn: cn=Roddy McDowall,ou=people,dc=macif-lfn,dc=com

Jeff

Re: How to add Alfresco users to ldap directory?

sandhya25186 — Wed, 28 Jul 2010 08:41:38 GMT

Hi Jeff…

thanks for noticing the error in my file.
But even after i corrected it to ou=people in my changes.properties and restarted the server, i was not able to login

Is there any configuration issue?

Users are getting recognised by the Alfresco system allright as proved by the logs:-

08:31:35,809 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] Retrieving all groups from user registry 'ldap-ad1'
08:31:35,860 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] ldap-ad1 Group Analysis: Commencing batch of 0 entries
08:31:35,861 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] ldap-ad1 Group Analysis: Completed batch of 0 entries
08:31:35,863 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] Retrieving all users from user registry 'ldap-ad1'
08:31:35,883 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] ldap-ad1 User Creation and Association: Commencing batch of 3 entries
08:31:35,895 WARN  [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] User returned by user search does not have mandatory user id attribute {mail=mail: heston@macif-lfn.com, modifytimestamp=modifyTimestamp: 20100726081758Z, sn=sn: Heston}
08:31:35,895 WARN  [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] User returned by user search does not have mandatory user id attribute {mail=mail: mcdowall@macif-lfn.com, modifytimestamp=modifyTimestamp: 20100726081758Z, sn=sn: McDowall}
08:31:35,896 WARN  [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] User returned by user search does not have mandatory user id attribute {mail=mail: admin@macif-lfn.com, modifytimestamp=modifyTimestamp: 20100726082222Z, givenname=givenName: admin, sn=sn: admin}
08:31:35,896 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] ldap-ad1 User Creation and Association: Completed batch of 3 entries
08:31:35,896 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] Finished synchronizing users and groups with user registry 'ldap-ad1'
08:31:35,896 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] 3 user(s) and 0 group(s) processed
08:31:35,903 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'Synchronization' subsystem, ID: [Synchronization, default] complete
08:31:36,011 INFO  [org.alfresco.service.descriptor.DescriptorService] Alfresco JVM - v1.6.0_15-b03; maximum heap size 506.313MB
08:31:36,011 INFO  [org.alfresco.service.descriptor.DescriptorService] Alfresco started (Community): Current version 3.3.0 (g 2860) schema 4100 - Originally installed version 3.2.0 (r2 2440) schema 3300
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Still when I attempt to login using credentials admin,admin or admin,YWRtaW4= (as shown in slapcat output) , Im getting login error !!!

topic Re: How to add Alfresco users to ldap directory? in Alfresco Archive

How to add Alfresco users to ldap directory?

Re: How to add Alfresco users to ldap directory?

Re: How to add Alfresco users to ldap directory?