topic Re: Deployed Records Management -> Blew away my authentication in Alfresco Archive

Deployed Records Management -> Blew away my authentication

bloodyiron — Tue, 26 Nov 2013 22:39:39 GMT

So I'm running 4.2d Community Edition.I was using LDAP-AD for sync and PASSTHRU for authentication.Today I tried to deploy the Records Management module for testing. I ran the amp deploy script after moving the amps into amps/ and amps_share/, I ran the script while Alfresco was running.After the sc

Re: Deployed Records Management -> Blew away my authentication

bloodyiron — Wed, 27 Nov 2013 17:27:06 GMT

So in attempting to resolve this issue I've found a discrepancy in the documentation

When copying the subsystem to the shared folder (outlined below), the documentation suggests a peculiar way to rename it, which doesn't work, and doesn't match what it describes.

So, I copy the relevant subsystem, in this example ldap to this folder:

$TOMCAT_HOME/shared/classes/alfresco/subsystems/Authentication/ldap‍

Now since I'm modifying that subsystem it's a good idea to rename the folder so that it doesn't overlap with the default ldap subsystem. But here's the problem. The documentation recommends the folder location changes too. The documentation recommends moving it and renaming it to the following:

$TOMCAT_HOME/shared/classes/alfresco/subsystems/Authentication/ldap/myldap‍

And then in that "myldap" folder is your ldap configs. Then the Documentation recommends the chain entry be myldap:myldap . The second one being the type, the first one being the name. This doesn't work. What I had to do was this:

$TOMCAT_HOME/shared/classes/alfresco/subsystems/Authentication/myldap‍

And now using myldap:myldap works!

Other parts of the documentation are a bit confusing. Initially I was doing myldap:ldap, and having it under the subfolder as suggested above, which didn't work, it just ended up loading the default subsystem, not the one I had configured under shared.

So now my Auth subsystems work. I did not lose users at all, oddly enough, or permissions. So that's good.

Re: Deployed Records Management -> Blew away my authentication

mrogers — Wed, 27 Nov 2013 17:52:38 GMT

Which page of documentation is wrong?

Your configuration settings, including your auth chain settings should be in $TOMCAT_HOME/shared/classes/alfresco-global.properties.

For a simple configuration (only one ldap server) there's no need to touch the subsystem configuration at all.

Your configuration should be under $TOMCAT_HOME/shared/classes/alfresco/extension/subsystems/Authentication/ldap/myldap

your chain should contain myldap:ldap