topic Re: LDAP import in Alfresco Archive

LDAP import

guestbcs — Tue, 19 Jun 2007 08:33:17 GMT

Hi,I've managed to import the users and groups into Alfresco. But I cannot login using those usernames. the users and groups are in the users list. I got userName not found exception. I'm not using LDAP authentication and instead are using CAS. What i planned was to import some users(not all) into A

Re: LDAP import

andy — Wed, 20 Jun 2007 14:29:01 GMT

Hi

LDAP import only pulls in personal information. It does not get the password or inply that you can authenticate as those users. Authentication is up to your authentication service and component(s) and the web filters how they are configured. I would guess you need to configure an authentication filter to support single sign on. There are a few forum discussions about this and CAS.

Regards

Andy

Re: LDAP import

guestbcs — Thu, 21 Jun 2007 01:16:51 GMT

Hi Andy,

I've went through several thread. the ones i followed for CAS is this
http://forums.alfresco.com/viewtopic.php?t=5893&highlight=cas

for LDAP, i tried following several guides as posted by some of the people here but one thing i noticed is almost all of them use LDAP authentication when they use ldap import. As I noticed in one of your posts, ldap authentication is not necessary as only the ldapInitialDirContextFactory are needed for the ldap import.

with CAS And ldap authentication i can do just fine. but i dont want every user to be able to access Alfresco. so i've commented off the authentication component in ldap-authentication-context.xml and i got the error that i posted in the first post.

sorry cos i'm very slow ops:

————————————————————————————-
EDIT:

Found that the problem is after i commented of the authentication component in ldap-authentication-context, the default authenticationcomponent which is AuthenticationComponentImpl takes place. and when CAS tries to setCurrentUser(), it calls RepositoryAuthenticationDao which finds users in the usersStore which ofcourse is not there. Therefore the exception was thrown

With the LDAPAuthenticationComponentImpl, it just creates a UserDetails and returns it and does not create a user in the usersStore

How can I resolve this? Can i like..when the user tries to log in and it's not in the usersStore, it checks in the spacesStore and if there is a matching username, it creates an entry in the usersStore.. is this the right way? Or I just return a userDetail and not create it after looking it in the spacesStore? Or should I create the user when it is imported? I need some light. I'm just an intern here. All this stuff is overwhelming :cry:

regards

Re: LDAP import

andy — Mon, 17 Sep 2007 11:30:29 GMT

Hi

I suggest you keep the ldap authentication component, configure the person service not to auto create people and then use LDAP import to import only the people who should be able to use alfresco.

The unknown people will be thrown out.

If not you need to fix up the authentication filter to check if users can use alfresco. Can you pass this info through from CAS somehow?

Andy