How to configure LDAP to search for user?

alfresco-user12 — Thu, 10 Aug 2006 14:57:03 GMT

I'm trying to configure Alfresco to use LDAP to authenticate users. Currently, I can get it to authenticate, using the manager's credentials if I specify the complete ldap path (ex. cn=Manager,dc=company,dc=com) to the manager's credentials as the user name. With any other user name, it just tries

Re: How to configure LDAP to search for user?

andy — Mon, 14 Aug 2006 10:34:45 GMT

Hi

To use simple authentication you probably want the user to type in a CN and then use the userNameFormat to expand this to the full DN.


    <bean id="authenticationComponentImpl" class="org.alfresco.repo.security.authentication.ldap.LDAPAuthenticationComponentImpl">
        <property name="LDAPInitialDirContextFactory">
            <ref bean="ldapInitialDirContextFactory"/>
        </property>
        <property name="userNameFormat">
            <!–
            
            This maps between what the user types in and what is passed through to the underlying LDAP authentication.
            
            "%s" - the user id is passed through without modification.
            Used for LDAP authentication such as DIGEST-MD5, anything that is not "simple".
            
            "cn=%s,ou=London,dc=company,dc=com" - If the user types in "Joe Bloggs" the authentricate as "cn=Joe Bloggs,ou=London,dc=company,dc=com" 
            Usually for simple authentication.
            
            –>
            <value>%s</value>
        </property>
    </bean>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

If you have many locations in which to look then you can use chaining authentication.

It is easy to set up md5 authentication (and the serach for user by userid). See the wiki. Then users type in thier user id which is probably what they expect.

http://wiki.alfresco.com/wiki/Enterprise_Security_and_Authentication_Configuration

Regards

Andy

topic How to configure LDAP to search for user? in Alfresco Archive

How to configure LDAP to search for user?

Re: How to configure LDAP to search for user?