<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Ldap-ad Configuration in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/ldap-ad-configuration/m-p/289679#M242809</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;We configured ldap-ad in alfresco-global.properties in the following way:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;authentication.chain=alfinst:alfrescoNtlm,passthru1&lt;img id="smileytongue" class="emoticon emoticon-smileytongue" src="https://connect.hyland.com/i/smilies/16x16_smiley-tongue.png" alt="Smiley Tongue" title="Smiley Tongue" /&gt;assthru,ldap-ad1:ldap-ad&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;alfresco.authentication.authenticateCIFS=true&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.active=false&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.active=true&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;passthru.authentication.servers=10.1.1.10\\ota.de,ota.de&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;passthru.authentication.domain=# Leave blank&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;passthru.authentication.useLocalServer=false&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;ntlm.authentication.sso.enabled=false&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.allowGuestLogin=false&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&lt;A class="jive-link-email-small" href="https://migration33.stage.lithium.com/" rel="nofollow noopener noreferrer"&gt;ldap.authentication.userNameFormat=%s@OTA.DE&lt;/A&gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.java.naming.provider.url=ldap://10.1.1.10.OTA.DE:389&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.defaultAdministratorUserNames=alfresco&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&lt;A class="jive-link-email-small" href="mailto:ldap.synchronization.java.naming.security.principal=alfresco@OTA.DE" rel="nofollow noopener noreferrer"&gt;ldap.synchronization.java.naming.security.principal=alfresco@OTA.DE&lt;/A&gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.java.naming.security.credentials=&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.groupSearchBase=ou=Security Groups,ou=Alfresco\,dc=OTA,dc=DE&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.userSearchBase=ou=User Accounts,ou=Alfresco,dc=OTA,dc=DE&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;In alfresco.log I got:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;&lt;BR /&gt;-1] Synchronizing users and groups with user registry 'ldap-ad1'&lt;BR /&gt;2016-03-10 14:09:35,834 INFO&amp;nbsp; [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Retrieving all groups from user registry 'ldap-ad1'&lt;BR /&gt;2016-03-10 14:09:35,905 ERROR [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization aborted due to error&lt;BR /&gt;2016-03-10 14:09:35,978 WARN&amp;nbsp; [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Failed initial synchronize with user registries&lt;BR /&gt;org.alfresco.repo.security.authentication.AuthenticationException: 02100001 Failed to communicate with ldap://10.1.1.10.OTA.DE:389. Reason javax.naming.CommunicationException, 10.1.1.10.otca.br:389, java.net.UnknownHostException, 10.1.1.10.OTA.DE&lt;BR /&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;10.1.1.10 is the internal IP of our Domain Server , the domain is ota.de&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I also tried &lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.java.naming.provider.url=ldap://OTA.DE:389 and ldap.authentication.java.naming.provider.url=ldap://10.1.1.10.ota.de:389 instead of ldap.authentication.java.naming.provider.url=ldap://10.1.1.10.OTA.DE:389 but got:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;&lt;BR /&gt;2016-03-10 14:15:45,428 INFO&amp;nbsp; [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'Synchronization' subsystem, ID: [Synchronization, default]&lt;BR /&gt;2016-03-10 14:15:45,609 INFO&amp;nbsp; [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronizing users and groups with user registry 'ldap-ad1'&lt;BR /&gt;2016-03-10 14:15:45,662 INFO&amp;nbsp; [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Retrieving all groups from user registry 'ldap-ad1'&lt;BR /&gt;2016-03-10 14:15:45,697 ERROR [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization aborted due to error&lt;BR /&gt;org.alfresco.error.AlfrescoRuntimeException: 02100001 Error during LDAP Search. Reason:[LDAP: error code 1 - 000004DC: LdapErr: DSID-0C09072B, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v2580^@]&lt;BR /&gt;Caused by: javax.naming.NamingException: [LDAP: error code 1 - 000004DC: LdapErr: DSID-0C09072B, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v2580^@]; remaining name 'ou=Security Groups,ou=Alfresco,dc=OTA,dc=DE'&lt;BR /&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;So whats wrong? Thanks for helping!&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Thu, 10 Mar 2016 17:01:04 GMT</pubDate>
    <dc:creator>thk</dc:creator>
    <dc:date>2016-03-10T17:01:04Z</dc:date>
    <item>
      <title>Ldap-ad Configuration</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-ad-configuration/m-p/289679#M242809</link>
      <description>We configured ldap-ad in alfresco-global.properties in the following way:authentication.chain=alfinst:alfrescoNtlm,passthru1&lt;IMG id="smileytongue" class="emoticon emoticon-smileytongue" src="https://migration33.stage.lithium.com/i/smilies/16x16_smiley-tongue.png" alt="Smiley Tongue" title="Smiley Tongue" /&gt;assthru,ldap-ad1:ldap-adalfresco.authentication.authenticateCIFS=trueldap.authentication.active=falseldap.synchronization.active=truepassthru.authentication.servers=10.1.1.10</description>
      <pubDate>Thu, 10 Mar 2016 17:01:04 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-ad-configuration/m-p/289679#M242809</guid>
      <dc:creator>thk</dc:creator>
      <dc:date>2016-03-10T17:01:04Z</dc:date>
    </item>
    <item>
      <title>Re: Ldap-ad Configuration</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-ad-configuration/m-p/289680#M242810</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Your URL is not valid.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;It should probably be this:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.java.naming.provider.url=ldap://10.1.1.10:389&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 10 Mar 2016 17:33:00 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-ad-configuration/m-p/289680#M242810</guid>
      <dc:creator>mrogers</dc:creator>
      <dc:date>2016-03-10T17:33:00Z</dc:date>
    </item>
    <item>
      <title>Re: Ldap-ad Configuration</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-ad-configuration/m-p/289681#M242811</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;I tried &lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.java.naming.provider.url=ldap://10.1.1.10:389&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;but got the same error messages (see attached the structure in our Domain Controller):&lt;/SPAN&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;-1] Synchronization aborted due to error&lt;BR /&gt;org.alfresco.error.AlfrescoRuntimeException: 02100001 Error during LDAP Search. Reason:[LDAP: error code 1 - 000004DC: LdapErr: DSID-0C09072B, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v2580^@]&lt;BR /&gt;&lt;BR /&gt;Caused by: javax.naming.NamingException: [LDAP: error code 1 - 000004DC: LdapErr: DSID-0C09072B, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v2580^@]; remaining name 'ou=Security Groups,ou=Alfresco,dc=OTA,dc=DE'&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3175)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3081)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2888)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1846)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1769)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:392)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:358)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:341)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1277)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; … 38 more&lt;BR /&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 14 Mar 2016 16:12:00 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-ad-configuration/m-p/289681#M242811</guid>
      <dc:creator>thk</dc:creator>
      <dc:date>2016-03-14T16:12:00Z</dc:date>
    </item>
  </channel>
</rss>

