topic LDAP-AD authentification in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/ldap-ad-authentification/m-p/272665#M225795 <HTML><HEAD></HEAD><BODY><SPAN>Greetings,</SPAN><BR /><BR /><SPAN>i need help with configuring ldap-ad. ldap-ad-authentification.properties looks like-:</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />ldap.authentication.active=false<BR />ldap.authentication.allowGuestLogin=true<BR />ldap.authentication.userNameFormat=%s@mc.net.com<BR />ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory<BR />ldap.authentication.java.naming.provider.url=ldap://mcv1.mc.net.com:389<BR />ldap.authentication.java.naming.security.authentication=simple<BR /><BR />ldap.authentication.userNameFormat=%s@mc.net.com<BR />ldap.authentication.escapeCommasInBind=false<BR />ldap.authentication.escapeCommasInUid=false<BR /><BR />ldap.authentication.defaultAdministratorUserNames=hiv<BR /><BR />ldap.synchronization.active=true<BR /><BR />ldap.synchronization.java.naming.security.authentication=simple<BR />ldap.synchronization.java.naming.security.principal=cn=hiv@mc.net.com<BR />ldap.synchronization.java.naming.security.credentials=*******<BR /><BR />ldap.synchronization.queryBatchSize=1000<BR />ldap.synchronization.attributeBatchSize=1000<BR /><BR />ldap.synchronization.groupQuery=(&amp;(objectclass\=group)(|(cn\=MC-Admin)(memberOf\=cn\=MC-Admin,dc\=mc,dc\=net,dc\=com)))<BR />ldap.synchronization.groupDifferentialQuery=(&amp;(objectclass\=group)(|(cn\=MC-Admin)(memberOf\=cn\=MC-Admin,dc\=mc,dc\=net,dc\=com)(!(modifyTimestamp&lt;\={0})))<BR /><BR />ldap.synchronization.personQuery=(&amp;(objectclass\=user)(memberOf\=cn\=MC-Admin,dc\=mc,dc\=net,dc\=com))<BR />ldap.synchronization.personDifferentialQuery=(&amp;(objectclass\=group)(|(cn\=MC-Admin)(memberOf\=cn\=MC-Admin,dc\=mc,dc\=net,dc\=com)(!(modifyTimestamp&lt;\={0})))<BR /><BR />ldap.synchronization.groupSearchBase=dc\=mc,dc\=net,dc\=com<BR />ldap.synchronization.userSearchBase=dc\=mc,dc\=net,dc\=com<BR /><BR />ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp<BR />ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'<BR />ldap.synchronization.userIdAttributeName=sAMAccountName<BR />ldap.synchronization.userFirstNameAttributeName=givenName<BR />ldap.synchronization.userLastNameAttributeName=sn<BR />ldap.synchronization.userEmailAttributeName=mail<BR />ldap.synchronization.userOrganizationalIdAttributeName=company<BR />ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider<BR />ldap.synchronization.groupIdAttributeName=cn<BR />ldap.synchronization.groupDisplayNameAttributeName=displayName<BR />ldap.synchronization.groupType=group<BR />ldap.synchronization.personType=user<BR />ldap.synchronization.groupMemberAttributeName=member<BR />ldap.synchronization.enableProgressEstimation=true<BR />synchronization.synchronizeChangesOnly=true<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>the exception is :</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE><BR />12:36:09,642 User:System INFO&nbsp; [security.sync.ChainingUserRegistrySynchronizer] Synchronizing users and groups with user registry 'ldap1'<BR />12:36:09,673 User:System INFO&nbsp; [security.sync.ChainingUserRegistrySynchronizer] Retrieving all groups from user registry 'ldap1'<BR />12:36:09,751 User:System ERROR [security.sync.ChainingUserRegistrySynchronizer] Synchronization aborted due to error<BR />org.alfresco.repo.security.authentication.AuthenticationException: 05020000 LDAP authentication failed.<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextFactoryImpl.buildInitialDirContext(LDAPInitialDirContextFactoryImpl.java:114)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextFactoryImpl.getDefaultIntialDirContext(LDAPInitialDirContextFactoryImpl.java:89)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextFactoryImpl.getDefaultIntialDirContext(LDAPInitialDirContextFactoryImpl.java:82)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry$3.&lt;init&gt;(LDAPUserRegistry.java:670)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.getGroups(LDAPUserRegistry.java:667)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.syncWithPlugin(ChainingUserRegistrySynchronizer.java:618)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.synchronize(ChainingUserRegistrySynchronizer.java:434)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer$6.doWork(ChainingUserRegistrySynchronizer.java:1529)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:508)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onBootstrap(ChainingUserRegistrySynchronizer.java:1523)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.extensions.surf.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:56)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:97)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:294)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:858)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:419)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ApplicationContextState.start(ChildApplicationContextFactory.java:624)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.start(AbstractPropertyBackedBean.java:458)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.onApplicationEvent(AbstractPropertyBackedBean.java:386)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:97)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEvent(SafeApplicationEventMulticaster.java:78)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:294)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:858)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:419)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:261)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:192)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:47)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.web.app.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:63)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:4135)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardContext.start(StandardContext.java:4630)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:791)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:771)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:546)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:637)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.startup.HostConfig.deployDescriptors(HostConfig.java:563)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1277)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:321)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1053)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardHost.start(StandardHost.java:785)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:445)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardService.start(StandardService.java:519)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardServer.start(StandardServer.java:710)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.startup.Catalina.start(Catalina.java:581)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)<BR />&nbsp;&nbsp;&nbsp;at java.lang.reflect.Method.invoke(Method.java:597)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)<BR />Caused by: javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>Thanks !</SPAN></BODY></HTML> Thu, 02 Jun 2011 11:40:12 GMT ivan_hajdinjak 2011-06-02T11:40:12Z LDAP-AD authentification https://connect.hyland.com/t5/alfresco-archive/ldap-ad-authentification/m-p/272665#M225795 Greetings,i need help with configuring ldap-ad. ldap-ad-authentification.properties looks like-:ldap.authentication.active=falseldap.authentication.allowGuestLogin=trueldap.authentication.userNameFormat=%s@mc.net.comldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactoryldap Thu, 02 Jun 2011 11:40:12 GMT https://connect.hyland.com/t5/alfresco-archive/ldap-ad-authentification/m-p/272665#M225795 ivan_hajdinjak 2011-06-02T11:40:12Z Re: LDAP-AD authentification https://connect.hyland.com/t5/alfresco-archive/ldap-ad-authentification/m-p/272666#M225796 <HTML><HEAD></HEAD><BODY><SPAN>The key here is:</SPAN><BR /><SPAN>LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece</SPAN><BR /><BR /><SPAN>That code after "data" and before "vece" is an error code. 525 is "user not found" in Active Directory.</SPAN><BR /><BR /><SPAN>Can you use an LDAP browser (if you are an Eclipse user, the Apache Directory Studio plug-in is indispensable) to bind to the LDAP server using that user name and password?</SPAN><BR /><BR /><SPAN>Jeff</SPAN></BODY></HTML> Fri, 03 Jun 2011 23:18:57 GMT https://connect.hyland.com/t5/alfresco-archive/ldap-ad-authentification/m-p/272666#M225796 jpotts 2011-06-03T23:18:57Z