topic Re: LDAP Authentication AD by EMail in Alfresco Archive

LDAP Authentication AD by EMail

mugger — Tue, 09 Jul 2013 13:17:45 GMT

Hello!How i can do authentification by email?Now work by "cn", but users want by email!Please, help!

Re: LDAP Authentication AD by EMail

mrogers — Tue, 09 Jul 2013 13:34:00 GMT

You need to change your ldap.synchronization.userIdAttributeName property from uid to the property name of of the email address in ldap. Probably 'mail'

Re: LDAP Authentication AD by EMail

mugger — Tue, 09 Jul 2013 14:11:41 GMT

Thanks, but unfortunately does not work

My config:


ldap.authentication.active=true
ldap.authentication.allowGuestLogin=true
ldap.authentication.userNameFormat=%s
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://usr.local:3268
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.defaultAdministratorUserNames=admin
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.authentication=simple
ldap.synchronization.java.naming.security.principal=CN=ad.connect,ou=ServiceAccounts,ou=Domain Users,dc=usr,dc=local
ldap.synchronization.java.naming.security.credentials=XXXX
ldap.synchronization.queryBatchSize=1000
ldap.synchronization.attributeBatchSize=1000
ldap.synchronization.groupQuery=(objectclass\=group)
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(whenChanged<\={0})))
ldap.synchronization.personQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(whenChanged<\={0})))
ldap.synchronization.groupSearchBase=ou=Domain Users,dc=usr,dc=local
ldap.synchronization.userSearchBase=ou=Domain Users,dc=usr,dc=local
ldap.synchronization.modifyTimestampAttributeName=whenChanged
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'
ldap.synchronization.userIdAttributeName=mail
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=company
ldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProvider
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupDisplayNameAttributeName=displayName
ldap.synchronization.groupType=group
ldap.synchronization.personType=user
ldap.synchronization.groupMemberAttributeName=member
ldap.synchronization.enableProgressEstimation=true
ldap.authentication.java.naming.read.timeout=0
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: LDAP Authentication AD by EMail

ranajitjana — Mon, 16 Mar 2015 11:40:36 GMT

Please find that I am able to find the user but when i try to login it does not allow me.

Re: LDAP Authentication AD by EMail

ranajitjana — Mon, 16 Mar 2015 13:52:41 GMT

As i have marked in my other post for alfresco LDAP setup is also important as afresco directly look at the dn. Please find the changes i have done to login via email

ldap.authentication.userNameFormat=mail=%s,ou=people,dc=org,dc=com
ldap.synchronization.userIdAttributeName=mail

But look at the screenshot carefully , I am able to login only if my dn is identified by the email (find the attachement) so i could login only via hello@liferay.com

Re: LDAP Authentication AD by EMail

ranajitjana — Thu, 21 May 2015 12:16:33 GMT

Follow this post http://stackoverflow.com/questions/6428283/redirect-loop-problem-for-web-policy-agent/30373181#30373181