LDAP Authentication using binddn

kiko_ — Tue, 09 Nov 2010 17:46:09 GMT

HelloI'm using Alfresco 3.3 Enterprise (trial license) installed on a Ubuntu 10.04I need to authenticate against an OpenLdap Server who does not allow simple bind.If i want to do a simple query, need use a binddn.A simple query example (on shell): # ldapsearch -x -v -b <searchbase> -D <dn_o

Re: LDAP Authentication using binddn

kiko_ — Thu, 11 Nov 2010 13:04:39 GMT

Hello again,

If anyone is looking for a solution, there's a JIRA which explain ( better than me ) the problem.

…
searching the user DN and then authenticate using this DN.
….
This was fixed in v3.2r.
If you set ldap.authentication.userNameFormat to be empty (now the default for the ldap subsystem)
ldap.authentication.userNameFormat=
it will derive a query from your personQuery to look up a user by UID. So we can now support users in any structure you want.

As the JIRA describe, we need to set userNameFomat to empty.
In addition, we need to set

ldap-authentication.properties.example:


ldap.authentication.active=true
ldap.authentication.allowGuestLogin=false
ldap.authentication.userNameFormat=
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldaps://<my_ldap_server>:636
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.synchronization.active=false
ldap.synchronization.java.naming.security.principal=cn\=search_privileged_user,ou\=example_ou,dc\=example,dc\=com
ldap.synchronization.java.naming.security.credentials=secret
ldap.synchronization.userSearchBase=ou\=example_ou,dc\=example,dc\=com
ldap.synchronization.userIdAttributeName=example_uid
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

It works!

Thanks to any interested, and sorry about my english.

topic Re: LDAP Authentication using binddn in Alfresco Archive

LDAP Authentication using binddn

Re: LDAP Authentication using binddn