topic NTLM passthru, LDAP synchro and user access restriction in Alfresco Archive

NTLM passthru, LDAP synchro and user access restriction

lascaux — Wed, 07 Feb 2007 08:27:27 GMT

Hi,I configured a LDAP synchro (Active Directory) in order to copy users from a particular group into Alfresco.I also commented the bean <bean id="authenticationComponentImpl" in the ldap-authentication-context.xml fileI modified the web.xml file to activate the NTLM passthru (in order to allow

Re: NTLM passthru, LDAP synchro and user access restriction

andy — Wed, 07 Feb 2007 14:26:08 GMT

Hi

You can turn off the auto creation of people - no one without imported details will be able to log in.

Over-ride the person service bean and change the property createMissingPeople to false.


   <!– The person service.                                                –>

    <bean id="personService" class="org.alfresco.repo.security.person.PersonServiceImpl">
 …….
        <property name="createMissingPeople">
           <value>false</value>
        </property
…….
    </bean>
‍‍‍‍‍‍‍‍‍‍‍

Regards

Andy

Re: NTLM passthru, LDAP synchro and user access restriction

lascaux — Wed, 07 Feb 2007 17:17:06 GMT

You can turn off the auto creation of people - no one without imported details will be able to log in.

Over-ride the person service bean and change the property createMissingPeople to false.


   <!– The person service.                                                –>

    <bean id="personService" class="org.alfresco.repo.security.person.PersonServiceImpl">
 …….
        <property name="createMissingPeople">
           <value>false</value>
        </property
…….
    </bean>
‍‍‍‍‍‍‍‍‍‍‍

Thanks Andy,

But where to override this bean ??

Re: NTLM passthru, LDAP synchro and user access restriction

andy — Tue, 13 Feb 2007 09:57:34 GMT

Hi

Take the defintion from authentication-services-context.xml and put it in extensions, somewhere like custom-authentication-services-context.xml.
Then make your changes - this will over-ride the bean defintion. Any file matching *-context.xml will be found in the extensions directory.

Regards

Andy