topic Re: LDAP and eDirectory in Alfresco Archive

LDAP and eDirectory

clauded1 — Tue, 01 Sep 2009 21:21:19 GMT

Hi,I'm trying to setup Alfresco 3.2 to interact with Novell eDirectory. So far I just can't authenticate with LDAP using this config :alfresco-global.properties :authentication.chain=alfrescoNtlm1:alfrescoNtlm,ldap1:ldap#alfrescoNtlm1alfresco.authentication.authenticateCIFS=true#ldap1ldap.authentica

Re: LDAP and eDirectory

clauded1 — Wed, 02 Sep 2009 01:54:57 GMT

Ok, I got it working (sort of) by using this :

ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.userNameFormat=cn=%s,ou=myou,o=myorg‍‍

Now the problem : it can only authenticate user in ou=myou,o=myorg but my users are in dozens of different organizational units. How do I solve that?

Re: LDAP and eDirectory

dward — Wed, 02 Sep 2009 10:49:20 GMT

I'm afraid that right now, we don't support search-based name resolution. Whilst there was a workaround on AD to use UPN format and on OpenLDAP to use authz-regexp mappings, it seems that for other directories we may need to support a solution where, in order to resolve a UID, the sync user first runs the user query with uid=x tacked on the end.

I've logged this as an issue

https://issues.alfresco.com/jira/browse/ETHREEOH-2782

Right now, your only option would be to code an extension to LDAPAuthenticationComponent and LDAPUserRegistry

Re: LDAP and eDirectory

clauded1 — Wed, 02 Sep 2009 13:02:24 GMT

Hum, I'm afraid this is beyond my abilities. I've installed many open source softwares that supports natively LDAP search base authentication so I'm a bit disappointed as this renders Alfresco almost unusable here.

Thanks for filling the request anyway.

Re: LDAP and eDirectory

clauded1 — Wed, 02 Sep 2009 15:23:52 GMT

Ok I found one workaround that's worth mentioning here : in eDir, we can create a OU for Alfresco, point to this OU in Alfresco's global.properties file and populate the OU with user's alias. I've tested successfully this config here.