topic Re: LDAP authentication 3.4.d with AD in Alfresco Archive

LDAP authentication 3.4.d with AD

docjay — Thu, 17 Mar 2011 20:56:45 GMT

Running:Alfresco 3.4.dWindows Server 2003Hello all, I am new to Alfresco and LDAP AD and I am trying to get Alfresco 3.4.d Community edition to authenticate to my AD server. I have read the wiki http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems and I cannot get Alfresco to authenti

Re: LDAP authentication 3.4.d with AD

mrogers — Thu, 17 Mar 2011 22:47:49 GMT

Don't ever hack files below WEB-INF.

Your config goes into alfresco-global.properties or the shared folder.

Re: LDAP authentication 3.4.d with AD

docjay — Fri, 18 Mar 2011 15:25:57 GMT

thanks - I should have read the wiki more closely and noticed only to modify the alfresco-global.properties file…

so I think I might have ldap-ap setup right, but I still can't authenticate:

#————-
authentication.chain=ldap1:ldap-ad
ldap.authentication.active=true
ldap.authentication.java.naming.security.authentication=DIGEST-MD5
ldap.authentication.userNameformat=%s@mydomain.com
ldap.authentication.java.naming.provider.url=ldap://server.mydomain.com:389‍‍‍‍‍‍

and in the log I found this:

10:01:24,405  INFO  [management.subsystems.ChildApplicationContextFactory] Startup of 'Authentication' subsystem, ID: [Authentication, managed, ldap1] complete‍

When I go to login I still get an error message: 'the remote server may be unabailable or your authentication details have not been recognized'

I am logging in with just my sAMAccountName as our UPN is sAMAccountName@mydomain.com

any ideas?

thank you for all of your help with this!

Re: LDAP authentication 3.4.d with AD

docjay — Tue, 22 Mar 2011 13:15:55 GMT

does anyone have any ideas that I can try?

thanks

Re: LDAP authentication 3.4.d with AD

muralie39 — Wed, 23 Mar 2011 09:42:01 GMT

HI,
add the default user name & password

ldap.authentication.defaultAdministratorUserNames=admin
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.principal=admin
ldap.synchronization.java.naming.security.credentials=<password>

try it…