topic AD authentication in Alfresco Archive

AD authentication

zugs — Tue, 06 May 2014 11:07:04 GMT

Hello,I have a problem setting up Active Directory authentication. I did a setup by the book and it works, I can authenticate with AD, I can synchronize with AD, but what bothers me is that ALL users can authenticate with AD. This is not what I want. I have two organizational units, Teachers and Stu

Re: AD authentication

angelborroy — Tue, 06 May 2014 11:30:52 GMT

It seems Alfresco is creating a new user on successful AD authentication.

You should disable create.missing.people property by overriding spring bean for Alfresco 4.2.c or by setting it to false on alfresco-global.properties for Alfresco 4.2.d.

Re: AD authentication

zugs — Tue, 06 May 2014 14:20:26 GMT

It seems to be working. Thank you very much. Although, I can't say I like this solution, because what if don't want or need synchronization? I just want to authenticate against AD.. Why can't there be a possibility to filter which users you want, which ou or group to look for, like in the sync case?

Re: AD authentication

angelborroy — Wed, 07 May 2014 10:32:04 GMT

Using only AD authentication, you must prepare an LDAP branch on your system containing only Alfresco desired users.

Another alternative is to filter users request based on user DN by extending the LDAP subsystem.

The main reason is that no binding user is required for authentication, because of this no filter or lookup can be configured.