topic LDAP Authentication with SSL only in Alfresco Archive

LDAP Authentication with SSL only

garbetsp — Tue, 27 Sep 2016 18:29:24 GMT

I have a site which can be accessed by SSL only. I've configured the server.xml with a certificate to only enable the 8443 port of the site. This has caused the LDAP authentication to fail, I look in the logs and it's hitting localhost:8080, which is disabled. How can I modify LDAP to work when 8080

Re: LDAP Authentication with SSL only

afaust — Tue, 27 Sep 2016 20:07:56 GMT

Can you provide the error details from the log?

Making Alfresco accessible via SSL should have no side effects on LDAP authentication which is completely separate from the Tomcat connector configuration.

The only thing I can imagine is that you have unknowingly cut the connection between the Share and Repository tier by disabling the port 8080. In this case you should adapt the share-config-custom.xml configuration for the section "Remote", specifically the URL of the endpoint elements.

Re: LDAP Authentication with SSL only

garbetsp — Wed, 28 Sep 2016 16:26:27 GMT

Editing this file did change which port it's hitting, and the error logs changed from hitting a dead port to not trusting the cert (hint: it wasn't registered to localhost). So I changed it to point to the server name itself.

Now I'm getting the following:

2016-09-28 11:21:49,300 INFO [webscripts.connector.RemoteClient] [http-bio-844
3-exec-5] Exception calling (GET) http://XXX.com:8443/alfresc
o/s/api/admin/restrictions?guest=true
2016-09-28 11:21:49,300 INFO [webscripts.connector.RemoteClient] [http-bio-84
43-exec-5] Error status 500 null
org.apache.http.client.ClientProtocolException
at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttp
Client.java:186)
at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttp
Client.java:186)

...

Over and over in the logs.

Re: LDAP Authentication with SSL only

garbetsp — Wed, 28 Sep 2016 16:33:16 GMT

DOH!

http -> https for protocol and it just worked.