LDAP + ActiveDirectory Configuration problems

hfrank — Mon, 06 Nov 2006 10:46:30 GMT

I am running alfresco 1.4.0 beta.So far, I make alfresco to authenticate users against AD by generating theNTLM configuration from ntlm-authentication-context.xml.sample. Now I intend to import/synchronize the groups/users information from ADinto alfresco system.What I did includes: (1) As I think N

Re: LDAP + ActiveDirectory Configuration problems

andy — Fri, 24 Nov 2006 11:25:15 GMT

Hi

In ldapInitialDirContextFactory you have configured this for digest authentication but are providing a DN base uid for the user used to import. What is required will depend on your configuration and LDAP server. I have always set this up to use a simple uid (for example in open ldap). You should use a simple ldap browser client to confirm what is required here. Also, in authenticationComponentImpl userNameFormat is set to sAMAccountName=%s. This is probably just %s to pass through the uid typed in by the user to the LDAP digest auth stack. Again, you need to confirm this.

Note, you can use NTLM authentication and also use LDAP to pull in users and groups. The LDAP sync does not rely on the authentication component, only ldapInitialDirContextFactory. Ldap authentication relies on ldapInitialDirContextFactory and updates the uid and password as required rather then using the default in the xml.

For AD, NTLM auth and ldap auth will be broadly similar.

It sounds like CIFS is configured to go direct to your AD server using Kerberos.

If you wnat SSO from the client then you need to use NTLM (v1 enabled on the client). If you want to authenticate against AD you could use LDAP, NTLM or JAAS flavours of the authentication component. So you could stick with what you had and just add LDAP import of users and groups.

Hope this helps

Regards

Andy

topic Re: LDAP + ActiveDirectory Configuration problems in Alfresco Archive

LDAP + ActiveDirectory Configuration problems

Re: LDAP + ActiveDirectory Configuration problems