topic Re: Configuring LDAP Microsoft AD with Alfresco in Alfresco Archive

Configuring LDAP Microsoft AD with Alfresco

merryo — Fri, 30 Mar 2012 07:56:41 GMT

Hi, Folks I have installed Alfresco community 4.0 edition with all the default settings which are working f9. Now I want to configure microsoft AD with alfresco so that my users can be authenticated and syncronization shall done from microsoft AD. Can anyone help me how to do it. As i had gone throu

Re: Configuring LDAP Microsoft AD with Alfresco

scouil — Fri, 30 Mar 2012 14:24:44 GMT

Hello,

Can you detail what documentation you used so that we can fix it if something's wrong with it?
Can you tell us what file you've modified? With what changes?
And maybe posting your log file would help.

I'd suggest you to look on the forum for similar issues, it's usually richer in experiences and details than the wiki.
You might wanna start with this one https://forums.alfresco.com/en/viewtopic.php?f=46&t=14737.
Or directly look at the last post https://forums.alfresco.com/en/viewtopic.php?f=46&t=14737&start=15#p116244 (sorry for the egocentric link to my own post). Forget about the rant in the first line of the post and the 3.4 version comment (it's the same system in the 4.0) and start at line4.

Good luck

Re: Configuring LDAP Microsoft AD with Alfresco

ashex — Fri, 30 Mar 2012 20:25:43 GMT

You'll need to give us more information about the problems you're having for us to help you

Take a look at these resources:

http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#LDAP

http://docs.alfresco.com/4.0/topic/com.alfresco.enterprise.doc/concepts/auth-ldap-intro.html

Re: Configuring LDAP Microsoft AD with Alfresco

unknown-user — Fri, 13 Apr 2012 21:17:43 GMT

I feel your pain, i spent yesterday afternoon and this morning figuring it out.

append the following to your global properties file (change your specific values, like server name, username etc)


### Authentication ###
authentication.chain=passthru1:passthru,ldap-ad1:ldap-ad
‍‍‍‍


### Passthru Config ###
passthru.authentication.useLocalServer=false
passthru.authentication.domain=
passthru.authentication.servers=DOMAIN\\SERVER1.DOMAIN.COM,DOMAIN\\SERVER2.DOMAIN.COM,SERVER1.DOMAIN.COM
passthru.authentication.guestAccess=false
passthru.authentication.defaultAdministratorUserNames=Administrator,admin
#Timeout value when opening a session to an authentication server, in milliseconds
passthru.authentication.connectTimeout=5000
#Offline server check interval in seconds
passthru.authentication.offlineCheckInterval=300
passthru.authentication.protocolOrder=NetBIOS,TCPIP
passthru.authentication.authenticateCIFS=true
passthru.authentication.authenticateFTP=true
ntlm.uthentication.sso.enabled=false
ntlm.authentication.mapUnknownUserToGuest=false

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍


### LDAP-AD Auth ###
ldap.authentication.active=false
ldap.authentication.allowGuestLogin=false
ldap.authentication.userNameFormat=%s@domain
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://server1.domain.com:389
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.defaultAdministratorUserNames=Administrator,admin
‍‍‍‍‍‍‍‍‍‍‍‍


### LDAP-AD Synch ###
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.authentication=simple
ldap.synchronization.java.naming.security.principal=administrator@domain.com
ldap.synchronization.java.naming.security.credentials=your-admin-password
ldap.synchronization.queryBatchSize=1000
ldap.synchronization.attributeBatchSize=1000
ldap.synchronization.groupQuery=(objectclass\=group)
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(modifyTimestamp<\={0})))
ldap.synchronization.personQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp<\={0})))
ldap.synchronization.groupSearchBase=ou\=MyGroups,ou\=MyCompany,dc=domain,dc=com
ldap.synchronization.userSearchBase=ou\=MyUsers,ou\=MyCompany,dc=domain,dc=com
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'
ldap.synchronization.userIdAttributeName=sAMAccountName
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=company
ldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProvider
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupDisplayNameAttributeName=displayName
ldap.synchronization.groupType=group
ldap.synchronization.personType=user
ldap.synchronization.groupMemberAttributeName=member
ldap.synchronization.enableProgressEstimation=true

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

With the above i was able to use passthru authentication against AD and to sync the user information from AD. My problem was understanding the "passthru.authentication.servers" directive as explained in the docs, once i got it, i was able to set it up correctly.

Re: Configuring LDAP Microsoft AD with Alfresco

arunkumar_p — Sat, 01 Nov 2014 13:59:53 GMT

Hi guys,i am new to Alfresco,i have installed Alfresco community edition 5.0 i am unable to sync with Active Directory.So any one help me to bring the output soon.
Is there a possible to sync with Active directory in Alfresco community edition 5.0?

Regards,
Arunkumar.p

Re: Configuring LDAP Microsoft AD with Alfresco

vignesh_sabapat — Mon, 03 Nov 2014 16:07:39 GMT

Please provide your configuration to look for issues. Also you can enable debugging and look into log files for the reason for failure.

Re: Configuring LDAP Microsoft AD with Alfresco

102020 — Tue, 04 Nov 2014 16:51:25 GMT

https://forums.alfresco.com/forum/installation-upgrades-configuration-integration/installation-upgrades/howto-installconfig-3x
Just jump to the AD and SSO part. yw

Re: Configuring LDAP Microsoft AD with Alfresco

olajohn — Fri, 24 Apr 2015 11:37:08 GMT

Hi Vignesh. Can you please recommend a working signature addon for Alfresco 4.2f. I've spent several hour looking and test, but I could not get any to work. I will also appreciate a link to detail instruction to get such recommended solution working on Alfresco 4.2f (community)

Thanks.