topic Re: LDAP filtering issue in Alfresco 4.0E Community in Alfresco Archive

LDAP filtering issue in Alfresco 4.0E Community

haas71 — Thu, 27 Sep 2012 17:50:08 GMT

Hello,I was able to get AD LDAP auth enabled in Alfresco 4.0E and log on. However, I have been seaching Google and this site for an answer to why my Profiles are not populating with the users information in Alfresco from AD. Is there an XML file I need to edit as well? I am able to logon to Alfresco

Re: LDAP filtering issue in Alfresco 4.0E Community

haas71 — Fri, 28 Sep 2012 15:16:20 GMT

I figured it out based on this blog: http://onalfresco.blogspot.com/2011/01/alfresco-authentication-and-integration.html

Two things I did wrong:
1. I needed to change my auth string to, "authentication.chain=ldap-ad1:ldap-ad,alfrescoNtlm1:alfrescoNtlm"
2. I needed to add the XML file shown at the bottom of the blog.

"Straight out of the blog"
In community version, you need to add this XMl tag in common-ldap-context.xml file in subsystems\Authentication folder.
Under the following tag -
<bean id="ldapInitialDirContextFactory">
<property name="initialDirContextEnvironment">
<map>

Add this entry -
<entry key="java.naming.referral">
<value>follow</value>
</entry>

Re: LDAP filtering issue in Alfresco 4.0E Community

sharifu — Tue, 09 Oct 2012 11:21:06 GMT

I have similar issue with mines. Is my properties correct


### AD SSO
#authentication.chain=passthru1:passthru,ldap1:ldap-ad
authentication.chain=alfrescoNtlm1:alfrescoNtlm,passthru1:passthru,ldap1:ldap-ad
ntlm.authentication.sso.enabled=false
alfresco.authentication.authenticateCIFS=false
ntlm.authentication.sso.enabled=false
passthru.authentication.authenticateCIFS=true
ldap.authentication.active=false
ldap.synchronization.active=true

ntlm.authentication.mapUnknownUserToGuest=false
alfresco.authentication.allowGuestLogin=false

passthru.authentication.domain=DOMAIN
passthru.authentication.servers=DOMAIN\\echo.uk.domain.com,DOMAIN\\fezziwig.uk.domain.com
passthru.authentication.defaultAdministratorUserNames=johnl,markw,administrator,alfresco,sharifu


ldap.authentication.userNameFormat=%s
ldap.authentication.allowGuestLogin=false
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://echo.uk.domain.com:389
ldap.synchronization.java.naming.security.authenticaton=simple
ldap.synchronization.java.naming.security.principal=administrator@domain.com
ldap.synchronization.java.naming.security.credentials=xxx
ldap.synchronization.userSearchBase=ou\=Sites,dc\=domain,dc\=com
synchronization.synchronizeChangesOnly=false
### synchronization.import.cron=0 0 0 * * ?
synchronization.syncWhenMissingPeopleLogIn=true
synchronization.autoCreatePeopleOnLogin=true

ldap.synchronization.queryBatchSize=1000
#ldap.synchronization.groupDifferentialQuery=(&(objectclass=nogroup)(!(modifyTimestamp<\={0})))
#ldap.synchronization.personQuery=(&(objectclass=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
#ldap.synchronization.personDifferentialQuery=(& (objectclass=user)(!(modifyTimestamp<\={0})))
ldap.synchronization.groupQuery=(objectclass\=group)

ldap.synchronization.groupSearchBase=cn\=users,dc\=domain,dc\=com

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍