topic Re: AD problem in 2.1.0 in Alfresco Archive

AD problem in 2.1.0

xietengfei — Sun, 12 Aug 2007 02:34:56 GMT

I have modifed the ldap xml file as as follows<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'><beans> <bean name="authenticationDao" class="org.alfresco.repo.security.auth

Re: AD problem in 2.1.0

tyve — Mon, 13 Aug 2007 06:40:33 GMT

I think you have truncated the actual error:

Caused by: javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece

Please, post the complete line. Which type of Ldap server do you use?

Re: AD problem in 2.1.0

xietengfei — Mon, 13 Aug 2007 07:42:55 GMT

thanks tyve
I use   Active Directory
09:03:59,515 ERROR [org.quartz.core.JobRunShell] Job DEFAULT.ldapPeopleJobDetail threw an unhandled Exception:
org.alfresco.repo.importer.ExportSourceImporterException: Failed to import
   at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:214)
   at org.alfresco.repo.importer.ImporterJob.execute(ImporterJob.java:44)
   at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
   at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:529)
Caused by: org.alfresco.repo.security.authentication.AuthenticationException: LDAP authentication failed.
   at org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextFactoryImpl.buildInitialDirContext(LDAPInitialDirContextFactoryImpl.java:90)
   at org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextFactoryImpl.getDefaultIntialDirContext(LDAPInitialDirContextFactoryImpl.java:79)
   at org.alfresco.repo.security.authentication.ldap.LDAPPersonExportSource.generateExport(LDAPPersonExportSource.java:164)
   at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:174)
   … 3 more

Re: AD problem in 2.1.0

xietengfei — Mon, 13 Aug 2007 07:51:27 GMT

Caused by: javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:2985)
   at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2931)
   at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2732)
   at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2646)
   at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:283)
   at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175)
   at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:193)
   at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:136)
   at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:66)
   at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:667)
   at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:247)
   at javax.naming.InitialContext.init(InitialContext.java:223)
   at javax.naming.InitialContext.<init>(InitialContext.java:197)
   at javax.naming.directory.InitialDirContext.<init>(InitialDirContext.java:82)
   at org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextFactoryImpl.buildInitialDirContext(LDAPInitialDirContextFactoryImpl.java:86)
   … 6 more

Re: AD problem in 2.1.0

tyve — Mon, 13 Aug 2007 07:56:06 GMT

You still missed the actual error. It's the line "Caused by…"

Anyway a search on google on "error code 49" resultet in this page: http://www.websina.com/bugzero/faq/ldap-error-code-49.html

So you need to supply some other credentials in these tags:

                <entry key="java.naming.security.authentication"> 
                    <value>simple</value> 
                </entry> 
                
                
                <entry key="java.naming.security.principal"> 
                    <value>reader</value> 
                </entry> 
                
                <!– The password for the user defined above –> 
                <entry key="java.naming.security.credentials"> 
                    <value>secret</value> 
                </entry>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I Think the java.naming.security.principal value should be something like:
uid=a_user,ou=People,dc=your_org,dc=com

Where you replace a_user and your_org with your user information. We don't use AD for Alfresco so I'm not sure how the directory structure is and if there is a guest user you could use to read the information.

Re: AD problem in 2.1.0

xietengfei — Mon, 13 Aug 2007 14:25:22 GMT

java.naming.security.principal
what can i modify ?

Re: AD problem in 2.1.0

tyve — Mon, 13 Aug 2007 14:33:15 GMT

java.naming.security.principal
what can i modify ?

I don't know what you are asking for. You can change the value between the <value> and </value> tags but if you don't understand how a xml-file works I think you're doomed to fail with Alfresco :twisted:

Re: AD problem in 2.1.0

schambon — Tue, 14 Aug 2007 08:37:07 GMT

You have to give the id (distinguished name – dn – actually) of a user with read rights on the directory.

For instance:


<entry key="java.naming.security.principal">
    <value>cn=Administrator,ou=admins,dc=mycompany,dc=com</value>
</entry>
                
<!– The password for the user defined above –>
<entry key="java.naming.security.credentials">
    <value>secret</value>
</entry>
‍‍‍‍‍‍‍‍‍‍

Re: AD problem in 2.1.0

tomw — Mon, 10 Sep 2007 11:45:21 GMT

I have had the same error.
Instead of typing just the user account, you have to fill in your
active directory strcture. In my case is was:

<value>cn=administrator,cn=users,dc=ad,dc=wurth,dc=be</value>