topic Alfresco authentication with zimbra ldap in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/alfresco-authentication-with-zimbra-ldap/m-p/292150#M245280 <HTML><HEAD></HEAD><BODY><SPAN>Hi,</SPAN><BR /><BR /><SPAN>Can't able to authenticate alfresco using zimbra mail server users,it gets "Failed to login,The remote server may be unavailable or your authentication details have not been recognized",here I posted my ldap-authentication.properties file which is in&nbsp; "/opt/alfresco-4.2.a/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1/ldap-authentication.properties",please help me to sort out</SPAN><BR /><BR /><SPAN>Also I added authentication chain in alfresco-global.properties file:</SPAN><BR /><SPAN>&nbsp; </SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; authentication.chain=alfrescoNtlm1:alfrescoNtlm,ldap1:ldap</SPAN><BR /><BR /><SPAN>My ldap-authentication.properties file:</SPAN><BR /><BR /><SPAN> This flag enables use of this LDAP subsystem for authentication. It may be</SPAN><BR /><SPAN># that this subsytem should only be used for synchronization, in which case</SPAN><BR /><SPAN># this flag should be set to false.</SPAN><BR /><SPAN>ldap.authentication.active=true</SPAN><BR /><BR /><SPAN>#</SPAN><BR /><SPAN># This properties file brings together the common options for LDAP authentication rather than editing the bean definitions</SPAN><BR /><SPAN>#</SPAN><BR /><SPAN>ldap.authentication.allowGuestLogin=false</SPAN><BR /><SPAN># How to map the user id entered by the user to that passed through to LDAP</SPAN><BR /><SPAN># - simple </SPAN><BR /><SPAN>#&nbsp;&nbsp;&nbsp; - this must be a DN and would be something like</SPAN><BR /><SPAN>#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; uid=%s,ou=People,dc=company,dc=com</SPAN><BR /><SPAN># - digest</SPAN><BR /><SPAN>#&nbsp;&nbsp;&nbsp; - usually pass through what is entered</SPAN><BR /><SPAN>#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; %s</SPAN><BR /><SPAN># If not set, an LDAP query involving ldap.synchronization.personQuery and ldap.synchronization.userIdAttributeName will </SPAN><BR /><SPAN># be performed to resolve the DN dynamically. This allows directories to be structured and doesn't require the user ID to</SPAN><BR /><SPAN># appear in the DN.</SPAN><BR /><SPAN>ldap.authentication.userNameFormat=uid\=%s,ou\=people,dc\=xxxx,dc\=com</SPAN><BR /><BR /><SPAN># The LDAP context factory to use</SPAN><BR /><SPAN>ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory</SPAN><BR /><BR /><SPAN># The URL to connect to the LDAP server </SPAN><BR /><SPAN>ldap.authentication.java.naming.provider.url=ldap://IP-OF-Mailserver:389</SPAN><BR /><BR /><SPAN># The authentication mechanism to use for password validation</SPAN><BR /><SPAN>ldap.authentication.java.naming.security.authentication=simple</SPAN><BR /><BR /><SPAN># Escape commas entered by the user at bind time</SPAN><BR /><SPAN># Useful when using simple authentication and the CN is part of the DN and contains commas</SPAN><BR /><SPAN>ldap.authentication.escapeCommasInBind=false</SPAN><BR /><BR /><SPAN># Escape commas entered by the user when setting the authenticated user</SPAN><BR /><SPAN># Useful when using simple authentication and the CN is part of the DN and contains commas, and the escaped \, is </SPAN><BR /><SPAN># pulled in as part of an LDAP sync</SPAN><BR /><SPAN># If this option is set to true it will break the default home folder provider as space names can not contain \</SPAN><BR /><SPAN>ldap.authentication.escapeCommasInUid=false</SPAN><BR /><BR /><SPAN># Comma separated list of user names who should be considered administrators by default</SPAN><BR /><SPAN>ldap.authentication.defaultAdministratorUserNames=admin</SPAN><BR /><SPAN># This flag enables use of this LDAP subsystem for user and group</SPAN><BR /><SPAN># synchronization. It may be that this subsytem should only be used for </SPAN><BR /><SPAN># authentication, in which case this flag should be set to false.</SPAN><BR /><SPAN>ldap.synchronization.active=true</SPAN><BR /><BR /><SPAN># The authentication mechanism to use for synchronization</SPAN><BR /><SPAN>ldap.synchronization.java.naming.security.authentication=simple</SPAN><BR /><BR /><SPAN># The default principal to use (only used for LDAP sync)</SPAN><BR /><SPAN>ldap.synchronization.java.naming.security.principal=cn\=zimbra,cn\=admin,dc\=xxxx,dc\=com</SPAN><BR /><BR /><SPAN># The password for the default principal (only used for LDAP sync)</SPAN><BR /><SPAN>ldap.synchronization.java.naming.security.credentials=xxxxxx(ldap password)</SPAN><BR /><BR /><SPAN># If positive, this property indicates that RFC 2696 paged results should be</SPAN><BR /><SPAN># used to split query results into batches of the specified size. This</SPAN><BR /><SPAN># overcomes any size limits imposed by the LDAP server.</SPAN><BR /><SPAN>ldap.synchronization.queryBatchSize=1000</SPAN><BR /><BR /><SPAN># If positive, this property indicates that range retrieval should be used to fetch</SPAN><BR /><SPAN># multi-valued attributes (such as member) in batches of the specified size.</SPAN><BR /><SPAN># Overcomes any size limits imposed by Active Directory.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </SPAN><BR /><SPAN>ldap.synchronization.attributeBatchSize=0</SPAN><BR /><BR /><SPAN># The query to select all objects that represent the groups to import.</SPAN><BR /><SPAN>ldap.synchronization.groupQuery=(objectclass\=groupOfNames)</SPAN><BR /><BR /><SPAN># The query to select objects that represent the groups to import that have changed since a certain time.</SPAN><BR /><SPAN>ldap.synchronization.groupDifferentialQuery=(&amp;(objectclass\=groupOfNames)(!(modifyTimestamp&lt;\={0})))</SPAN><BR /><BR /><SPAN># The query to select all objects that represent the users to import.</SPAN><BR /><SPAN>ldap.synchronization.personQuery=(objectclass\=inetOrgPerson)</SPAN><BR /><BR /><SPAN># The query to select objects that represent the users to import that have changed since a certain time.</SPAN><BR /><SPAN>ldap.synchronization.personDifferentialQuery=(&amp;(objectclass\=inetOrgPerson)(!(modifyTimestamp&lt;\={0})))</SPAN><BR /><BR /><SPAN># The group search base restricts the LDAP group query to a sub section of tree on the LDAP server.</SPAN><BR /><SPAN>ldap.synchronization.groupSearchBase=ou\=groups,dc\=xxxx,dc\=com</SPAN><BR /><BR /><SPAN># The user search base restricts the LDAP user query to a sub section of tree on the LDAP server.</SPAN><BR /><SPAN>ldap.synchronization.userSearchBase=ou\=people,dc\=xxxx,dc\=com</SPAN><BR /><BR /><SPAN># The name of the operational attribute recording the last update time for a group or user.</SPAN><BR /><SPAN>ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp</SPAN><BR /><BR /><SPAN># The timestamp format. Unfortunately, this varies between directory servers.</SPAN><BR /><SPAN>ldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'</SPAN><BR /><BR /><SPAN># The attribute name on people objects found in LDAP to use as the uid in Alfresco</SPAN><BR /><SPAN>ldap.synchronization.userIdAttributeName=uid</SPAN><BR /><BR /><SPAN># The attribute on person objects in LDAP to map to the first name property in Alfresco</SPAN><BR /><SPAN>ldap.synchronization.userFirstNameAttributeName=givenName</SPAN><BR /><BR /><SPAN># The attribute on person objects in LDAP to map to the last name property in Alfresco</SPAN><BR /><SPAN>ldap.synchronization.userLastNameAttributeName=sn</SPAN><BR /><BR /><SPAN># The attribute on person objects in LDAP to map to the email property in Alfresco</SPAN><BR /><SPAN>ldap.synchronization.userEmailAttributeName=mail</SPAN><BR /><BR /><SPAN># The attribute on person objects in LDAP to map to the organizational id&nbsp; property in Alfresco</SPAN><BR /><SPAN>ldap.synchronization.userOrganizationalIdAttributeName=o</SPAN><BR /><BR /><SPAN># The default home folder provider to use for people created via LDAP import</SPAN><BR /><SPAN>ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider</SPAN><BR /><BR /><SPAN># The attribute on LDAP group objects to map to the authority name property in Alfresco</SPAN><BR /><SPAN>ldap.synchronization.groupIdAttributeName=cn</SPAN><BR /><BR /><SPAN># The attribute on LDAP group objects to map to the authority display name property in Alfresco</SPAN><BR /><SPAN>ldap.synchronization.groupDisplayNameAttributeName=mail</SPAN><BR /><BR /><SPAN># The group type in LDAP</SPAN><BR /><SPAN>ldap.synchronization.groupType=groupOfNames</SPAN><BR /><BR /><SPAN># The person type in LDAP</SPAN><BR /><SPAN>ldap.synchronization.personType=inetOrgPerson</SPAN><BR /><BR /><SPAN># The attribute in LDAP on group objects that defines the DN for its members</SPAN><BR /><SPAN>ldap.synchronization.groupMemberAttributeName=member</SPAN><BR /><BR /><SPAN># If true progress estimation is enabled. When enabled, the user query has to be run twice in order to count entries.</SPAN><BR /><SPAN>ldap.synchronization.enableProgressEstimation=true</SPAN></BODY></HTML> Wed, 26 Jun 2013 04:48:01 GMT rakesraja 2013-06-26T04:48:01Z Alfresco authentication with zimbra ldap https://connect.hyland.com/t5/alfresco-archive/alfresco-authentication-with-zimbra-ldap/m-p/292150#M245280 Hi,Can't able to authenticate alfresco using zimbra mail server users,it gets "Failed to login,The remote server may be unavailable or your authentication details have not been recognized",here I posted my ldap-authentication.properties file which is in&nbsp; "/opt/alfresco-4.2.a/tomcat/shared/classes/al Wed, 26 Jun 2013 04:48:01 GMT https://connect.hyland.com/t5/alfresco-archive/alfresco-authentication-with-zimbra-ldap/m-p/292150#M245280 rakesraja 2013-06-26T04:48:01Z Re: Alfresco authentication with zimbra ldap https://connect.hyland.com/t5/alfresco-archive/alfresco-authentication-with-zimbra-ldap/m-p/292151#M245281 <HTML><HEAD></HEAD><BODY><SPAN>"Failed to login,The remote server may be unavailable or your authentication details have not been recognized".</SPAN><BR /><SPAN>Surely, you can take a look at Zimbra logs to guess which of these two is happening.</SPAN></BODY></HTML> Wed, 26 Jun 2013 18:34:12 GMT https://connect.hyland.com/t5/alfresco-archive/alfresco-authentication-with-zimbra-ldap/m-p/292151#M245281 albertocabello 2013-06-26T18:34:12Z Re: Alfresco authentication with zimbra ldap https://connect.hyland.com/t5/alfresco-archive/alfresco-authentication-with-zimbra-ldap/m-p/292152#M245282 <HTML><HEAD></HEAD><BODY><SPAN>See if you can connect with an LDAP browser.&nbsp;&nbsp; That will enable you to check your principal/credentials/authentication properties are correct.</SPAN><BR /></BODY></HTML> Thu, 27 Jun 2013 09:34:51 GMT https://connect.hyland.com/t5/alfresco-archive/alfresco-authentication-with-zimbra-ldap/m-p/292152#M245282 mrogers 2013-06-27T09:34:51Z Re: Alfresco authentication with zimbra ldap https://connect.hyland.com/t5/alfresco-archive/alfresco-authentication-with-zimbra-ldap/m-p/292153#M245283 <HTML><HEAD></HEAD><BODY><SPAN>Thanks a lot its working fine…</SPAN></BODY></HTML> Mon, 01 Jul 2013 17:34:11 GMT https://connect.hyland.com/t5/alfresco-archive/alfresco-authentication-with-zimbra-ldap/m-p/292153#M245283 rakesraja 2013-07-01T17:34:11Z Re: Alfresco authentication with zimbra ldap https://connect.hyland.com/t5/alfresco-archive/alfresco-authentication-with-zimbra-ldap/m-p/292154#M245284 <HTML><HEAD></HEAD><BODY><SPAN>I am trying to authenticate against UID in LDAP authentication, same as yours. I am too facing same issue. Can you please let me know what was your issue and how did you resolve it?</SPAN></BODY></HTML> Tue, 02 Jul 2013 10:36:39 GMT https://connect.hyland.com/t5/alfresco-archive/alfresco-authentication-with-zimbra-ldap/m-p/292154#M245284 pritesh_shah17 2013-07-02T10:36:39Z Re: Alfresco authentication with zimbra ldap https://connect.hyland.com/t5/alfresco-archive/alfresco-authentication-with-zimbra-ldap/m-p/292155#M245285 <HTML><HEAD></HEAD><BODY><SPAN>I am just changing the correct principal/credentials/authentication values in the ldap-authentication.properties file</SPAN></BODY></HTML> Wed, 24 Jul 2013 05:18:41 GMT https://connect.hyland.com/t5/alfresco-archive/alfresco-authentication-with-zimbra-ldap/m-p/292155#M245285 rakesraja 2013-07-24T05:18:41Z