topic Re: LDAP on 3.2 in Alfresco Archive

LDAP on 3.2

jefflv — Fri, 28 Aug 2009 16:57:21 GMT

I have an Alfresco v3.2 Community Edition server running on Ubuntu and mysql (it's actually a Jumpbox). I am trying to configure Alfresco to use my OpenLDAP to do user authentication. No synchronization, nothing fancy…plain old authentication and that's it.I have followed the instructions precisely

Re: LDAP on 3.2

jefflv — Fri, 28 Aug 2009 17:03:39 GMT

(This BB needs the ability to RSS a topic! *sigh* )

Re: LDAP on 3.2

mikeh — Fri, 28 Aug 2009 17:11:08 GMT

(This BB needs the ability to RSS a topic! *sigh* )

We've not found a decent enough PHPBB3 plug-in to do it yet. In the meantime, you can subscribe to the topic and/or forum:
[img]http://img.skitch.com/20090828-g9pjtywgqti91gmmhkysq7ab4.png[/img]

…or run the Forum RSS feed through YAHOO Pipes or similar and subscribe to that.

Cheers,
Mike

Re: LDAP on 3.2

mikeh — Fri, 28 Aug 2009 17:13:01 GMT

On a side note, I'd LOVE to see a wiki page that describes what steps to take in order to set this up. Yes, I've reviewed all of the information on the subject in the wiki; it does a great job of talking about how things work but seems devoid of step-by-step instructions. I apologize if I have looked something.

Did you see this one? http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems

Cheers,
Mike

Re: LDAP on 3.2

jefflv — Fri, 28 Aug 2009 17:49:54 GMT

Did you see this one? http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems

I did, but it requires an understanding of http://wiki.alfresco.com/wiki/Alfresco_Subsystems#Configuring_Subsystems in order to work and it's not step-by-step. That's why I referred to dward's post at http://forums.alfresco.com/en/viewtopic.php?f=9&t=18812#p62669, which seems to be the most concise implementation of the wiki documentation (aside from the fact that he's altering custom-repository.properties but I believe the documented file is named alfresco-global.properties).

That being said, I have followed both wiki documentation and dward's post to the best of my ability and it doesn't work.

My current analysis is that:

1) The "authentication.chain=ldap1:ldap,alfrescoNtlm1:alfrescoNtlm" does attempt to implement LDAP because removing "ldap1:ldap" it makes the error go away.
2) The /opt/alfresco/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1/ldap-authentication.properties is being ignored in favor of some other properties file.

I'm attempting to solve for #2: Why is my subsystems file being ignored, and where is it getting "openldap.domain.com" from?

Jeff

Re: LDAP on 3.2

mikeh — Fri, 28 Aug 2009 18:29:20 GMT

Two potential things I can suggest:

1 - That original post has the extension file renamed to ldap-synchronisation.properties. I don't know if that's a typo or not…

2 - Are you using Tomcat 6? If so, did you see the notes here? http://wiki.alfresco.com/wiki/Install_Tomcat6

Thanks,
Mike

Re: LDAP on 3.2

jefflv — Fri, 28 Aug 2009 18:52:11 GMT

Two potential things I can suggest:

1 - That original post has the extension file renamed to ldap-synchronisation.properties. I don't know if that's a typo or not…

2 - Are you using Tomcat 6? If so, did you see the notes here? http://wiki.alfresco.com/wiki/Install_Tomcat6

Thanks,
Mike

1 - I have assumed the file name is irrelevant since the wiki documentation at http://wiki.alfresco.com/wiki/Alfresco_Subsystems#Extension_classpath indicates that a properties file might be named "mychanges.properties" so long as it exists in the correct shared folder.

2 - Yes, I'm using Tomcat 6. Because this is a jumpbox, I did not do the installation. However, I have reviewed that page and verified that the installers at Jumpbox did execute all of these instructions, and paying particular attention to the shared.loader setting, which is configured as "shared.loader=${catalina.base}/shared/classes,${catalina.base}/shared/lib/*.jar"

UPDATE:
I now have simple LDAP authentication working on my system. The instructions for creating a shared configuration to override the standard implementation (documented at http://wiki.alfresco.com/wiki/Alfresco_Subsystems#Extension_classpath) do not work for me. Even though I created my shared file as /opt/alfresco/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1/ldap-authentication.properties, it does not properly override /opt/alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/ldap/ldap-authentication.properties, which is where Alfresco was picking up the value "openldap.domain.com".

I created a backup of this file, copied my version of the file into its place and restarted Alfresco and PRESTO! everything worked.

If someone would like to help me troubleshoot why the settings described at http://wiki.alfresco.com/wiki/Alfresco_Subsystems#Extension_classpath do not work, I would be happy to try another avenue. If not, I will open a bug report for this issue.

Thank you for your feedback Mike, I appreciate your thoughts.

Jeff

Re: LDAP on 3.2

dward — Sun, 30 Aug 2009 11:52:04 GMT

See http://forums.alfresco.com/en/viewtopic.php?f=9&t=20316&p=68649&hilit=extension_classpath#p68649

You will need a more recent nightly build to get the subsystem extension classpath mechanism to work.

Remember you only need it if you are trying to control multiple authentication subsytem instances. Otherwise, everything can be controlled in alfresco-global.properties.

Re: LDAP on 3.2

jefflv — Mon, 31 Aug 2009 12:18:32 GMT

See http://forums.alfresco.com/en/viewtopic.php?f=9&t=20316&p=68649&hilit=extension_classpath#p68649

You will need a more recent nightly build to get the subsystem extension classpath mechanism to work.

Okay, got it. Thanks!