topic Re: auth against active directoy using ldaps in Alfresco Archive

auth against active directoy using ldaps

elmuchacho — Fri, 02 Oct 2009 10:24:05 GMT

i found some informations about this by searching this forum and reading the wiki …I have an ubuntu 8.04 LTS system with running alfresco on it …Right now it works by using alfresco's local user dbI would like to login to alfresco by using my MS Active Directory credentials.the ldap-connection is es

Re: auth against active directoy using ldaps

rliu — Tue, 06 Oct 2009 23:36:07 GMT

A couple things you should look at.

1. See how frequent the LDAP synchronization is occurring.
2. Look at your LDAP query as it may be selecting users of a certain group. Also, I'm not sure if the LDAP query detects whether the newly created user must sign in first before the account is activated.

Re: auth against active directoy using ldaps

elmuchacho — Thu, 05 Nov 2009 11:55:38 GMT

AUTH against ADS works for me right now …
using this entries in alfresco.global.properties:

### AUTH against MS-ADS
authentication.chain=alferscoNtlm1:alfrescoNtlm,ldap1:ldap-ad
ldap.authentication.active=true
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://serverip:389
ldap.authentication.java.naming.security.authentication=SIMPLE
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.userNameFormat=%s@test.local
ldap.synchronization.java.naming.security.principal=ldapreaduser@test.local
ldap.synchronization.java.naming.security.credentials=verysecret
ldap.synchronization.groupSearchBase=ou=intranet,dc=test,dc=local
ldap.synchronization.userSearchBase=ou=intranet,dc=test,dc=local
‍‍‍‍‍‍‍‍‍‍‍‍‍‍

right now i have two problems:
1. how to set up ldaps?
ldaps didn't work by only changing the url from ldap://serverip:389 to ldaps://serverip:636 …
something more to do? like setting up the path to the cert-file?
but where/how to config this?
2. how to delete a user in alfresco when user is deleted in ldap?
didn't found a solution yet ;(