Alfresco Authentication with Zimbra (OpenLDAP)

jdbotero — Mon, 03 Aug 2015 21:30:00 GMT

Hi, I Just installed alfresco 5.0d and have zimbra running on another server. I'd configure authentication for Alfresco against the Zimbra LDAP and it works fine for a while, but after some time (like 30 minutes) it stop working.On my alfresco.log i can see a timeout exception, but the weird thing i

Re: Alfresco Authentication with Zimbra (OpenLDAP)

tybion — Mon, 03 Aug 2015 23:48:38 GMT

I'd suggest that you remove all references to some.user@boos.com.co - just use the standard LDAP admin account for authenticating - until you get it working reliably.

My blog might be helpful, also? - http://geofoss.net/category/alfresco/

Re: Alfresco Authentication with Zimbra (OpenLDAP)

lascaux — Fri, 21 Aug 2015 11:47:54 GMT

Hi

here is my Zimbra LDAP configuration

<blockcode>
ldap.authentication.active=true
ldap.authentication.allowGuestLogin=false
ldap.authentication.userNameFormat=uid\=%s,ou\=people,dc\=DOMAIN,dc\=TLD
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://INTERNAL.ZIMBRA.SRV:389
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.defaultAdministratorUserNames=admin
ldap.synchronization.active=false
ldap.synchronization.java.naming.security.principal=uid\=zimbra,cn\=admins,cn\=zimbra
ldap.synchronization.java.naming.security.credentials=
ldap.synchronization.queryBatchSize=1000
ldap.synchronization.groupQuery=(objectclass\=groupOfNames)
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=groupOfNames)(!(modifyTimestamp<\={0})))
ldap.synchronization.personQuery=(objectclass\=inetOrgPerson)
ldap.synchronization.personDifferentialQuery=(&(objectclass\=inetOrgPerson)(!(modifyTimestamp<\={0}) ))
ldap.synchronization.groupSearchBase=ou\=groups,dc\=DOMAIN,dc\=TLD
ldap.synchronization.userSearchBase=ou\=people,dc\=DOMAIN,dc\=TLD
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'
ldap.synchronization.userIdAttributeName=uid
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=o
ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupType=groupOfNames
ldap.synchronization.personType=inetOrgPerson
ldap.synchronization.groupMemberAttributeName=member
ldap.synchronization.enableProgressEstimation=true
</blockcode>

if you have several domains in zimbra and wants to allow users for other domains to connect, create as many configuration files you have domains
then establish a chain ldap authentication

authentication.chain=zimbraDOMAIN:ldap,zimbraDOMAIN2:ldap,zimbraDOMAIN3:ldap

topic Alfresco Authentication with Zimbra (OpenLDAP) in Alfresco Archive

Alfresco Authentication with Zimbra (OpenLDAP)

Re: Alfresco Authentication with Zimbra (OpenLDAP)

Re: Alfresco Authentication with Zimbra (OpenLDAP)