<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic LDAP: constantly trying to authenticate user 'admin' in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/ldap-constantly-trying-to-authenticate-user-admin/m-p/274286#M227416</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hi there!&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;During the past months I found a lot of helpful information in these forums and posted some solutions back to the community. For my current problem, I wasn't able to get a single clue so far. Maybe some of you could help me out&amp;nbsp;&amp;nbsp; &lt;img id="smileysurprised" class="emoticon emoticon-smileysurprised" src="https://connect.hyland.com/i/smilies/16x16_smiley-surprised.png" alt="Smiley Surprised" title="Smiley Surprised" /&gt;ops: &lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I was able to configure Alfresco (3.4d CE, Tomcat 6, SUSE Enterprise 11) to authenticate users against our LDAP services (Novell eDirectory).&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;My alfresco-global.properties contains the following statements regarding LDAP integration:&lt;/SPAN&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;&lt;BR /&gt;authentication.chain=urLDAP:ldap&lt;BR /&gt;urLDAP&lt;BR /&gt;ldap.authentication.allowGuestLogin=false&lt;BR /&gt;ldap.authentication.userNameFormat=cn=%s,ou=myBranch,o=myCompany,c=de&lt;BR /&gt;ldap.authentication.java.naming.provider.url=ldaps://ldapserver:636/&lt;BR /&gt;ldap.authentication.defaultAdministratorUserNames=myAdminName&lt;BR /&gt;ldap.authentication.java.naming.security.authentication=simple&lt;BR /&gt;ldap.authentication.escapeCommasInBind=false&lt;BR /&gt;alfresco.authentication.authenticateCIFS=false&lt;BR /&gt;synchronization.syncOnStartup=false&lt;BR /&gt;ldap.synchronization.active=false&lt;BR /&gt;ldap.synchronization.userFirstNameAttributeName=givenName&lt;BR /&gt;ldap.synchronization.userLastNameAttributeName=sn&lt;BR /&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;SPAN&gt;Now, users are able to log in using their LDAP credentials, which is exactly what I intended. But, it seems, no success without some quirk:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Whenever Alfresco is running, &lt;/SPAN&gt;&lt;EM&gt;every five seconds&lt;/EM&gt;&lt;SPAN&gt; it tries to authenticate the user "admin", which definitely exists in the tree (&lt;/SPAN&gt;&lt;EM&gt;ldap.authentication.userNameFormat&lt;/EM&gt;&lt;SPAN&gt;), but should never be used for Alfresco. I thought this could be avoided by specifying a certain LDAP user as admin (&lt;/SPAN&gt;&lt;EM&gt;ldap.authentication.defaultAdministratorUserNames&lt;/EM&gt;&lt;SPAN&gt;), which was no cure.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I also tried to deactivate the "admin" account, which is only possible when Alfresco's built in authentication mechanism is in use, but whenever I switch back to LDAP authentication mode and restart Alfresco, "admin" is reactivated and can't be deactivated again. Again, every five seconds I can see this in the debug logs:&lt;/SPAN&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;&lt;BR /&gt;17:38:54,379 DEBUG [org.alfresco.repo.security.authentication.ldap.LDAPAuthenticationComponentImpl] Authenticating user "admin"&lt;BR /&gt;17:38:57,458 DEBUG [org.alfresco.repo.security.authentication.ldap.LDAPAuthenticationComponentImpl] Failed to authenticate user "admin"&lt;BR /&gt;org.alfresco.repo.security.authentication.AuthenticationException: 08200077 LDAP authentication failed.&lt;BR /&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;BR /&gt;&lt;SPAN&gt;Even &lt;/SPAN&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;synchronization.syncOnStartup=false&lt;BR /&gt;ldap.synchronization.active=false&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;SPAN&gt;brought no change.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;As you can imagine, our LDAP administrator is not so overwhelmingly happy, because five wrong authentication attempts render the admin account blocked. &lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;So, please, could one explain to me&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;a) what Alfresco is doing every five seconds that triggers a login attempt&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;b) how this can be deactivated&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Thank you very much for any hint, &lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;best regards,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Flo&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Wed, 21 Sep 2011 06:43:07 GMT</pubDate>
    <dc:creator>flob</dc:creator>
    <dc:date>2011-09-21T06:43:07Z</dc:date>
    <item>
      <title>LDAP: constantly trying to authenticate user 'admin'</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-constantly-trying-to-authenticate-user-admin/m-p/274286#M227416</link>
      <description>Hi there!During the past months I found a lot of helpful information in these forums and posted some solutions back to the community. For my current problem, I wasn't able to get a single clue so far. Maybe some of you could help me out&amp;nbsp;&amp;nbsp; &lt;IMG id="smileysurprised" class="emoticon emoticon-smileysurprised" src="https://migration33.stage.lithium.com/i/smilies/16x16_smiley-surprised.png" alt="Smiley Surprised" title="Smiley Surprised" /&gt;ops: I was able to configure Alfresco (3.4d CE, Tomcat 6, S</description>
      <pubDate>Wed, 21 Sep 2011 06:43:07 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-constantly-trying-to-authenticate-user-admin/m-p/274286#M227416</guid>
      <dc:creator>flob</dc:creator>
      <dc:date>2011-09-21T06:43:07Z</dc:date>
    </item>
    <item>
      <title>Re: LDAP: constantly trying to authenticate user 'admin'</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-constantly-trying-to-authenticate-user-admin/m-p/274287#M227417</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;And while trying to solve a partly different problem I found the solution to my own question.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;The reason for this behaviour is the fact that I tried to authenticate against LDAP exclusively. &lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;But some subsystems of Alfresco depend on the admin-Account and -&lt;/SPAN&gt;&lt;EM&gt; exclusively LDAP, you remember&lt;/EM&gt;&lt;SPAN&gt; - tried to authenticate against a non-existing admin-Account in LDAP, again and again.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;So I chained LDAP and AlfrescoNtlm for a fallback, if a user is not found in LDAP he/she is looked up locally in Alfresco's user db.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Then I created a particular service user &lt;/SPAN&gt;&lt;EM&gt;wcmqs_user&lt;/EM&gt;&lt;SPAN&gt; and provided its credentials within the following files (search for admin and its initial password):&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;&lt;BR /&gt;&amp;lt;ALF&amp;gt;/tomcat/shared/classes/alfresco/extension/wqsapi-custom.properties&lt;BR /&gt;&amp;lt;ALF&amp;gt;/virtual-tomcat/conf/alfresco-virtserver.properties&lt;BR /&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 27 Oct 2011 11:02:50 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-constantly-trying-to-authenticate-user-admin/m-p/274287#M227417</guid>
      <dc:creator>flob</dc:creator>
      <dc:date>2011-10-27T11:02:50Z</dc:date>
    </item>
  </channel>
</rss>

