topic AD Authentication by Email in Alfresco Archive

AD Authentication by Email

alchemist — Thu, 20 Feb 2014 16:28:18 GMT

Hello,I wanted the users to be logged by their Email.Here is my ldap-ad parameters. After synchronisation, I verified that the uid in the database was the mail and not the samaccountname, (ok). But the authentication failed. Thx for your help!ldap.authentication.userNameFormat=%sldap.authentication.

Re: AD Authentication by Email

eswbitto — Thu, 20 Feb 2014 17:13:29 GMT

When posting your config to this community it would probably be a good idea NOT to include your password. Now everyone knows it and now you have to change that. (That's if you provided your true password by accident).

Your config looks ok…

ldap.authentication.userNameFormat=%s‍

I would put =domain\\%s

See if that fixes it.

Re: AD Authentication by Email

mrogers — Thu, 20 Feb 2014 17:18:00 GMT

I suspect you don't want to have the userNameFormat=%s. Instead you want to lookup the user in ldap by the email id.

Edit - yes you need to set your ldap.synchronization.personQuery to find people by email id.

Edit2 - I removed your password for you.

Re: AD Authentication by Email

alchemist — Fri, 21 Feb 2014 12:22:00 GMT

I tried this but it didn't work. My idea is that AD consider that the mail is not a valid (unique) identifier to get password. The only parameters that AD can accept to give a corresponding password are UPN and DN. That's why alfresco accept the modification (samaccountname to mail) in database but the user still can't log in. Thanks for the password