topic I need help in integrating AD with alfresco in Alfresco Archive

I need help in integrating AD with alfresco

dayanandj — Mon, 21 Feb 2011 13:06:00 GMT

Hi ALL,I tried integrating AD with alfresco. taking help of Google or forums. It helped me to configure the AD but i am not able to sync the users and i get error saying LDAP authentication failed.Steps that are followed:1. cd /Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/2. Changed the value t

Re: I need help in integrating AD with alfresco

mrogers — Mon, 21 Feb 2011 13:15:23 GMT

Never change any files in WEB-INF. I suggest you read the repository configuration guide on the wiki.

Re: I need help in integrating AD with alfresco

dayanandj — Mon, 21 Feb 2011 14:41:47 GMT

Thanks mrogers,

Can you please suggest. me the best way to integrate AD with alfresco.
this is will be a grate help.
thanks waiting for your reply.

Re: I need help in integrating AD with alfresco

tysat — Tue, 22 Feb 2011 20:53:34 GMT

Here's what I used to get authentication off of AD working, I just set it up and have not put AD sync into place yet:

## Authentication stuff ##
authentication.chain=passthru1:passthru,ldap1:ldap

passthru.authentication.sso.enabled=false
passthru.authentication.allowGuestLogin=false

passthru.authentication.authenticateCIFS=false
passthru.authentication.authenticateFTP=false

passthru.authentication.servers=(domain controllers IP)
passthru.authentication.domain=(domain name)
passthru.authentication.useLocalServer=false
passthru.authentication.defaultAdministratorUserNames=(my windows login name)
passthru.authentication.connectTimeout=5000
passthru.authentication.offlineCheckInterval=300
passthru.authentication.protocolOrder=TCPIP,NETBIOS

ldap.authentication.active=false
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.userNameFormat=%s
ldap.authentication.allowGuestLogin=false
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://(domain controllers IP):389
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false

ldap.synchronization.active=false
ldap.synchronization.java.naming.security.principal=<Netbios Domain>\\<administrator.privilege.account>
ldap.synchronization.java.naming.security.credentials=<administrator.privilege.account.password>
ldap.synchronization.queryBatchSize=1000
ldap.synchronization.groupDifferentialQuery=(&(objectclass=nogroup)(!(modifyTimestamp<\={0})))
ldap.synchronization.personQuery=(&(objectclass=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(& (objectclass=user)(!(modifyTimestamp<\={0})))
ldap.synchronization.groupQuery=(objectclass\=group)

ldap.synchronization.groupSearchBase=cn\=users,dc=<company.domain>,dc=com
ldap.synchronization.userSearchBase=cn\=users,dc=<company.domain>,dc=com

ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss..0Z.
ldap.synchronization.userIdAttributeName=sAMAccountName
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=msExchALObjectVersion
ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupType=Nogroup
ldap.synchronization.personType=user
ldap.synchronization.groupMemberAttributeName=member

synchronization.synchronizeChangesOnly=true

cifs.enabled=false‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I appended the alfresco-global.properties located in (installation directory)/tomcat/shared/classes

Re: I need help in integrating AD with alfresco

dayanandj — Thu, 24 Feb 2011 13:17:03 GMT

Thank you so very much.
IT works !!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Re: I need help in integrating AD with alfresco

soop — Thu, 03 Mar 2011 15:02:46 GMT

Does your synching work now?

If so I think I may need to pick your brain

let me know

Re: I need help in integrating AD with alfresco

pnavinkumar — Fri, 25 Mar 2011 07:50:48 GMT

Hi

Thanks for the configuration provided. It worked for me as well. I wanted to know if you were able to get the Synchronization working. I am using version 3.4d

Please let me know.

Re: I need help in integrating AD with alfresco

pnavinkumar — Tue, 26 Apr 2011 08:36:36 GMT

Hi Dayanand

Were you able to get the synchronization done. Please do share the settings with us. I have been searching for a synchronization setting but still haven't found one which works for me. I am using 3.4d.

Thanks for the help.

Re: I need help in integrating AD with alfresco

jacortijo — Wed, 27 Apr 2011 09:42:52 GMT

thanks a lot tysat,
I tried your configuration and it worked like a charm.
the only missing now is the synchronization in order to get the email address for each user so the notification system can start working!

Like a first try I just changed
ldap.synchronization.active=true

but it didnt work, someone else found the solution to this?

Thanks!
Jose

Re: I need help in integrating AD with alfresco

leber33 — Tue, 10 May 2011 14:17:06 GMT

Hi. Thx for sharing your thoughts!

I just want to know something general. The Wiki describes that you should configure subsystems in order to use LDAP authentication or synchronization. My alfresco installation ignores any changes made to subsystems (for example /Authentication/ldap-ad1/ldap-ad). I also red that you shouldn't change any files in WEB-INF.

Sooo … can still put the configuration into alfresco-global.properties? Is that the right way instead of using the subsystems' configuration files?

Thx for your help

Re: I need help in integrating AD with alfresco

mouradef — Fri, 13 May 2011 14:07:05 GMT

hello,
I see the same thing:
it ignores files under /Authentication/ldap-ad/ldap-ad1

but when i put ldap-ad-authentification file under /Authentication/ldap-ad/ it works

in alfresco-global.properties i juste added1:
authentification.chain=AlfrescoNtlm1:AlfrescoNtlm,external1:external,ldap-ad1:ldap-ad
synchronization.import.cron=0 1 * * * ?
synchronization.synchronizeChangeOnly=false
synchronization.syncOnStartup=false

it works for me, but if i have more than one subsystem ldap-ad i think it wouldn't work !