<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Authentication problem. in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/authentication-problem/m-p/310650#M263780</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;&lt;SPAN&gt;Hi guys! I encountered a strange problem with my alfresco. The thing is I have two accounts for each user, one in format name - John Doe, username - jdoe; and another in format name - jdoe, username - &lt;/SPAN&gt;&lt;A class="jive-link-email-small" href="mailto:jdoe@company.com" rel="nofollow noopener noreferrer"&gt;jdoe@company.com&lt;/A&gt;&lt;SPAN&gt;. Users can login only with account in &lt;/SPAN&gt;&lt;A class="jive-link-email-small" href="mailto:jdoe@company.com" rel="nofollow noopener noreferrer"&gt;jdoe@company.com&lt;/A&gt;&lt;SPAN&gt; format, which is fine untill they want to give others access rights for some document because they're looking for the user by his name John Doe which gives them the wrong account jdoe and, of course, the rights given to this account have no effect as he actually uses another account &lt;/SPAN&gt;&lt;A class="jive-link-email-small" href="mailto:jdoe@company.com" rel="nofollow noopener noreferrer"&gt;jdoe@company.com&lt;/A&gt;&lt;SPAN&gt;! How can I get rid of this double accounts? Why is this even happening?&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;I'm running version 5.0.a on Ubuntu 14.04. Users access it from their Windows machines. I guess I misconfigured ldap authentication, but current configuration is the only one working, everything else I've tried resulted in another errors. &lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;And another funny thing: if I use &lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&lt;A class="jive-link-email-small" href="https://migration33.stage.lithium.com/" rel="nofollow noopener noreferrer"&gt;ldap.authentication.userNameFormat=%s@company.com&lt;/A&gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;instead of&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.userNameFormat=%s&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;the search stop working! Not entirely, advanced search still works fine, but if I just type something in the search box it results in a blank page. But I have one and only account for each user.))&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Here is my config.:&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;### LDAP ###&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;authentication.chain=passthru1&lt;img id="smileytongue" class="emoticon emoticon-smileytongue" src="https://connect.hyland.com/i/smilies/16x16_smiley-tongue.png" alt="Smiley Tongue" title="Smiley Tongue" /&gt;assthru,ldap1:ldap&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;### Passthru Config ###&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;passthru.authentication.useLocalServer=false&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;passthru.authentication.domain=&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;passthru.authentication.servers=10.1.1.1&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;passthru.authentication.guestAccess=false&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&lt;A class="jive-link-email-small" href="mailto:passthru.authentication.defaultAdministratorUserNames=admin@company.com" rel="nofollow noopener noreferrer"&gt;passthru.authentication.defaultAdministratorUserNames=admin@company.com&lt;/A&gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#Timeout value when opening a session to an authentication server, in milliseconds&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;passthru.authentication.connectTimeout=5000&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#Offline server check interval in seconds&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;passthru.authentication.offlineCheckInterval=300&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;passthru.authentication.protocolOrder=NetBIOS,TCPIP&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;passthru.authentication.authenticateCIFS=true&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;passthru.authentication.authenticateFTP=true&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;ntlm.authentication.sso.enabled=true&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ntlm.authentication.mapUnknownUserToGuest=false&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;### LDAP-AD Auth ###&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.active=true&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.allowGuestLogin=false&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.userNameFormat=%s&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.java.naming.provider.url=ldap://10.1.1.1:389&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.java.naming.security.authentication=simple&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.escapeCommasInBind=false&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.escapeCommasInUid=false&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&lt;A class="jive-link-email-small" href="mailto:ldap.authentication.defaultAdministratorUserNames=admin@company.com" rel="nofollow noopener noreferrer"&gt;ldap.authentication.defaultAdministratorUserNames=admin@company.com&lt;/A&gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;### LDAP-AD Synch ###&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.active=true&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.java.naming.security.authentication=simple&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&lt;A class="jive-link-email-small" href="mailto:ldap.synchronization.java.naming.security.principal=admin@company.com" rel="nofollow noopener noreferrer"&gt;ldap.synchronization.java.naming.security.principal=admin@company.com&lt;/A&gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.java.naming.security.credentials=password&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.queryBatchSize=1000&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.attributeBatchSize=1000&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.groupQuery=(objectclass\=group)&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.groupDifferentialQuery=(&amp;amp;(objectclass\=group)(!(modifyTimestamp&amp;lt;\={0})))&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.personQuery=(&amp;amp;(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.personDifferentialQuery=(&amp;amp;(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp&amp;lt;\={0})))&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.groupSearchBase=dc=diasoft,dc=ru&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.userSearchBase=dc=diasoft,dc=ru&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.userIdAttributeName=sAMAccountName&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.userFirstNameAttributeName=givenName&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.userLastNameAttributeName=sn&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.userEmailAttributeName=mail&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.userOrganizationalIdAttributeName=company&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProvider&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.groupIdAttributeName=cn&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.groupDisplayNameAttributeName=displayName&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.groupType=group&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.personType=user&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.groupMemberAttributeName=member&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.enableProgressEstimation=true&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Fri, 31 Oct 2014 14:30:29 GMT</pubDate>
    <dc:creator>statira</dc:creator>
    <dc:date>2014-10-31T14:30:29Z</dc:date>
    <item>
      <title>Authentication problem.</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/authentication-problem/m-p/310650#M263780</link>
      <description>Hi guys! I encountered a strange problem with my alfresco. The thing is I have two accounts for each user, one in format name - John Doe, username - jdoe; and another in format name - jdoe, username - jdoe@company.com. Users can login only with account in jdoe@company.com format, which is fine until</description>
      <pubDate>Fri, 31 Oct 2014 14:30:29 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/authentication-problem/m-p/310650#M263780</guid>
      <dc:creator>statira</dc:creator>
      <dc:date>2014-10-31T14:30:29Z</dc:date>
    </item>
    <item>
      <title>Re: Authentication problem.</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/authentication-problem/m-p/310651#M263781</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;hi .. &lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;may i know how user login to alfresco share &lt;/SPAN&gt;&lt;A href="http://localhost:8080/share" rel="nofollow noopener noreferrer"&gt;http://localhost:8080/share&lt;/A&gt;&lt;SPAN&gt; ,&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&lt;SPAN&gt;username&amp;nbsp; jdoe&amp;nbsp; or&amp;nbsp; &lt;/SPAN&gt;&lt;A class="jive-link-email-small" href="mailto:jdoe@company.com" rel="nofollow noopener noreferrer"&gt;jdoe@company.com&lt;/A&gt;&lt;SPAN&gt; ?&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;maybe you can try this , add dc\=diasoft,dc\=ru&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.groupSearchBase=dc\=diasoft,dc\=ru&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.userSearchBase=dc\=diasoft,dc\=ru&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;restart the alfresco service and try.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;if success proceed step 2 , add @company.com&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&lt;A class="jive-link-email-small" href="https://migration33.stage.lithium.com/" rel="nofollow noopener noreferrer"&gt;ldap.authentication.userNameFormat=%s@company.com&lt;/A&gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;restart alfresco service&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;try to login use jdoe&amp;nbsp; on &lt;/SPAN&gt;&lt;A href="http://localhost:8080/share" rel="nofollow noopener noreferrer"&gt;http://localhost:8080/share&lt;/A&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;hope can help you&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 03 Nov 2014 01:43:04 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/authentication-problem/m-p/310651#M263781</guid>
      <dc:creator>csyeow</dc:creator>
      <dc:date>2014-11-03T01:43:04Z</dc:date>
    </item>
    <item>
      <title>Re: Authentication problem.</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/authentication-problem/m-p/310652#M263782</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hi, csyeow. Thanks for your reply. I tried what you suggested with no success. &lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;If I use &lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&lt;A class="jive-link-email-small" href="https://migration33.stage.lithium.com/" rel="nofollow noopener noreferrer"&gt;ldap.authentication.userNameFormat=%s@company.com&lt;/A&gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;I can login as jdoe, but only advanced search works this way, and if I use &lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.userNameFormat=%s&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&lt;SPAN&gt;I can login as &lt;/SPAN&gt;&lt;A class="jive-link-email-small" href="mailto:jdoe@company.com" rel="nofollow noopener noreferrer"&gt;jdoe@company.com&lt;/A&gt;&lt;SPAN&gt;, and search works fine. &lt;/SPAN&gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;But no matter what the config is, both users present in alfresco at the same time, which leads to confusion.&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 05 Nov 2014 08:42:00 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/authentication-problem/m-p/310652#M263782</guid>
      <dc:creator>statira</dc:creator>
      <dc:date>2014-11-05T08:42:00Z</dc:date>
    </item>
  </channel>
</rss>

