topic Re: intergrate users of domain Controller in Alfresco in Alfresco Archive

intergrate users of domain Controller in Alfresco

thk — Tue, 19 Jan 2016 17:46:37 GMT

Hi,We want that every user in the company get an account for alfresco. But we don`t want create this accounts twice, in the Domain Controller and in Alfresco.Best would be Single-sign on.Whats the easiest way to get this?Thanks in advance.

Re: intergrate users of domain Controller in Alfresco

mrogers — Wed, 20 Jan 2016 15:00:59 GMT

Either use passthru authentication if you are only using your domain controller for authentication, . Or, if you have other attributes in your AD then use LDAP sync.

Re: intergrate users of domain Controller in Alfresco

thk — Wed, 03 Feb 2016 13:27:00 GMT

Hi, I still have questions to configure passthru authentication.
For passthru (I don`t know yet if I also need LDAP) I added in the alfresco-global.properties:

authentication.chain=passthru1:passthru
alfresco.authentication.authenticateCIFS=false
ldap.authentication.active=false
passthru.authentication.servers=<IP of our domain server>\\name.com,name.com
passthru.authentication.domain=# Leave blank
passthru.authentication.useLocalServer=false‍‍‍‍‍‍

I works now that I can login into Alfresco using any user of our Domain Controller. But the user is only added as an Alfresco user after this user logs in for the first time in Alfresco. And now I want to grant rights to a site for every user. How can I do this best? Do I have to wait until each user logged in for the first time and grant them this right one by one? also i cannot use the admin user I created before, because he is not in the Domain controller.

Is it correct to put this variables in alfresco-global.properties?
Is the line passthru.authentication.servers correct like this (name.com = name of our domain)?
In the documentation (http://docs.alfresco.com/community5.0/tasks/auth-example-passthu.html) is written the following:
<blockquote>After running the previous commands, two separate properties files should appear in your passthru1 directory. These are:

passthru-authentication-context.properties
ntlm-filter.properties</blockquote>

But there is no passthru-authentication-context.properties, only ntlm-filter.properties
in the directory /tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/passthru/ !
and which previous commands as mentioned in the documentation I should run?

Thanks for help in advance.

Re: intergrate users of domain Controller in Alfresco

douglascrp — Tue, 01 Mar 2016 01:27:47 GMT

It is correct to put those properties into the alfresco-global.properties

In order to have the users created in Alfresco, you have to enable the LDAP synchronization, and to allow the login using both domain users and local users (like admin), you have to change the authentication.chain to use alfresco, like this:

authentication.chain=alfinst:alfrescoNtlm,ldap1:ldap‍

Re: intergrate users of domain Controller in Alfresco

thk — Thu, 03 Mar 2016 19:20:00 GMT

ah thanks,

I already wondered why I can login with any domain user now but the users are not visible in the menu "persons". So they the users only created in Alfresco if I use
authentication.chain=alfinst:alfrescoNtlm,ldap1:ldap instead of
authentication.chain=alfinst:alfrescoNtlm,passthru1assthru ?

Further we want to upload all our documents but with all permission of the domain users on this documents. How can we do this?

Thanks for help!

Re: intergrate users of domain Controller in Alfresco

douglascrp — Tue, 29 Mar 2016 18:45:09 GMT

Add the property bellow into alfresco-global.properties in order to have you LDAP users synchronized into Alfresco

ldap.synchronization.active=true

By default, the synchronization is executed once a day or when Alfresco is restarted.