topic Re: Integrating existing Alfresco with LDAP in Alfresco Archive

Integrating existing Alfresco with LDAP

ashwini — Thu, 05 May 2011 20:43:54 GMT

Currently we are using Alfresco 3.4 with inbuilt Authentication functionality(users and groups created using alfresco's admin account) but now we want to integrate existing alfresco environment with LDAP(Microsoft Active Directory).1.Can I integrated existing Alfresco environment with LDAP.2.Is ther

Re: Integrating existing Alfresco with LDAP

mrogers — Fri, 06 May 2011 07:57:04 GMT

1. yes
2. no

I suggest you read some documentation starting with the installation guide.

Re: Integrating existing Alfresco with LDAP

bensewell — Fri, 06 May 2011 09:26:03 GMT

I got this working quickly using these settings

add these to your global config file and then restart your alfresco services and then it should work with ad. Your Alfresco admin account can set the correct permissions to the AD accounts once the users have logged in.

### Authentication chain settings###
authentication.chain=ldap1:ldap,alfrescoNtlm1:alfrescoNtlm
ldap.authentication.active=true
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.userNameFormat=%s@YOUR DOMAIN NAME e.g. %s@adomain.net
ldap.authentication.allowGuestLogin=false
ldap.authentication.java.naming.provider.url=YOUR LDAP SERVER e.g. ldap://ad1.a.net:389
###ldap.authentication.defaultAdministratorUserNames=YOUR AD USER ACCOUNT TO LOOKUP AD e.g. alfresco
ldap.synchronization.active=false

Re: Integrating existing Alfresco with LDAP

ashwini — Wed, 11 May 2011 10:14:44 GMT

1. yes
2. no

I suggest you read some documentation starting with the installation guide.

Thank You mrogers !!
If there is any specific documentation then can you please suggest it by providing link .. ?

Re: Integrating existing Alfresco with LDAP

ashwini — Wed, 11 May 2011 10:16:18 GMT

Thank you bensewell!!
It will definitely help me while configuring LDAP ..

Re: Integrating existing Alfresco with LDAP

bensewell — Wed, 11 May 2011 10:28:07 GMT

### Authentication chain settings###
authentication.chain=ldap1:ldap,alfrescoNtlm1:alfrescoNtlm
ldap.authentication.active=true
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.userNameFormat=%s@YOUR DOMAIN NAME e.g. %s@adomain.net
ldap.authentication.allowGuestLogin=false
ldap.authentication.java.naming.provider.url=YOUR LDAP SERVER e.g. ldap://ad1.a.net:389
###ldap.authentication.defaultAdministratorUserNames=YOUR AD USER ACCOUNT TO LOOKUP AD e.g. alfresco
ldap.synchronization.active=false

Just make sure it is exactly as above.

the tricky thing I learnt here was the ldap.authentication.userNameFormat=%s@YOUR DOMAIN NAME e.g. %s@adomain.net

You need to leave the %s@ in or it doesnt like it so for example if your domain name was alfresco.net it would be ldap.authentication.userNameFormat=%s@alfresco.net