topic Alfresco Community - Config LDAP with AD in Alfresco Archive

Alfresco Community - Config LDAP with AD

joshbishop82 — Tue, 24 Mar 2015 14:17:05 GMT

Hello all, I am new to Alfresco, I have the Community version installed on Windows Server 2012.I would like to bind the application with my company's LDAP Active Directory server. I have attempted myself to update the alfresco-global.properties file to include the following:authentication.chain=alfi

Re: Alfresco Community - Config LDAP with AD

joshbishop82 — Wed, 25 Mar 2015 09:45:19 GMT

Hello,

I updated my alfresco-global.properties file with the following. This also failed sadly, still back in the same please I was where by the only account I can log in with apart from the admin account is x195485 which I only have mentioned in the text below as the LDAP binding credentails. Really strange!

### Authentication ###
ldap.authentication.active=true
authentication.chain=alfinst:alfrescoNtlm,ldap1:ldap-ad
ldap.authentication.userNameFormat=%s@domainname.com
ldap.authentication.allowGuestLogin=false
ldap.authentication.java.naming.security.authentication=SIMPLE
ldap.authentication.java.naming.read.timeout=30000
ldap.authentication.java.naming.provider.url=ldaps://adssl.domainname.com:636

### LDAP Synchronization ###
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.principal=x195485
ldap.synchronization.java.naming.security.credentials=password
ldap.synchronization.groupSearchBase=ou=Prumerica,ou=People,dc=domainname,dc=com
ldap.synchronization.userSearchBase=ou=Prumerica,ou=People,dc=domainname,dc=com

Re: Alfresco Community - Config LDAP with AD

joshbishop82 — Wed, 25 Mar 2015 12:00:15 GMT

RESOLVED

My AD binding credentials were the problem, even though that account is allowed to access AD and view and even modify security groups it is not permitted as a service account. I slightly cheated for testing purposes and used a service account from another application that uses LDAP to see if that was the problem and it worked. Furthermore, the format in my reply post above is the format that worked, not my initial post format.