LDAP authentication not working but the sync is working

vkpatel — Thu, 14 Aug 2014 06:29:19 GMT

I have installed Alfresco5.0.a community edition.After configuring the ldap (slapd on linux) the synchronisation is working fine. Users and Groups are getting synchronised but the user authentication/login is not working. Please guide me. ###### begin : ldap-authentication.properties ###############

Re: LDAP authentication not working but the sync is working

rudischmitz — Fri, 15 Aug 2014 13:26:56 GMT

You should check your tomcat logs to see the ldap errors for more info.

My ldap opendj requires authentication no anonymous allowed. So i noticed that in order for ldap authentication to work I had to have this field (ldap.synchronization.java.naming.security.principal) in my alfresco-global.properties file. I dont have sync turned on. Otherwise it can't authenticate?

ldap.synchronization.active=false
ldap.synchronization.java.naming.security.authentication=simple
ldap.synchronization.java.naming.security.principal=cn\=connect,ou=\People,dc\=derpderp,dc\=com
ldap.synchronization.java.naming.security.credentials=password1234
ldap.synchronization.queryBatchSize=0
ldap.synchronization.attributeBatchSize=0
ldap.synchronization.groupQuery=(objectclass\=groupOfNames)
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=groupOfNames)(!(modifyTimestamp<\={0})))
ldap.synchronization.personQuery=(objectclass\=inetOrgPerson)
ldap.synchronization.personDifferentialQuery=(&(objectclass\=inetOrgPerson)(!(modifyTimestamp<\={0})))
ldap.synchronization.groupSearchBase=ou\=Groups,dc\=derpderp,dc\=com
ldap.synchronization.userSearchBase=ou\=People,dc\=derpderp,dc\=com
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'
ldap.synchronization.userIdAttributeName=cn
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=o
ldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProvider
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupDisplayNameAttributeName=description
ldap.synchronization.groupType=groupOfNames
ldap.synchronization.personType=inetOrgPerson
ldap.synchronization.groupMemberAttributeName=member
ldap.synchronization.enableProgressEstimation=true
ldap.authentication.java.naming.read.timeout=0

Re: LDAP authentication not working but the sync is working

mc128k — Tue, 19 Aug 2014 08:46:41 GMT

Please, also check (most importantly) the access.log file on the ldap server! This tells you in real time if the login was successful.
IMHO your ldap configuration is incomplete and the users maybe require the full dn in the openldap implementation.
I wrote some notes (after hours of troubleshooting) here https://wiki.mc128k.info/index.php/Alfresco#Integration

MODERATORS: If it's a problem to post the link, please tell me.

topic LDAP authentication not working but the sync is working in Alfresco Archive

LDAP authentication not working but the sync is working

Re: LDAP authentication not working but the sync is working

Re: LDAP authentication not working but the sync is working