topic [Résolu] ALFRESCO 3B + AD in Alfresco Archive

[Résolu] ALFRESCO 3B + AD

richardb — Fri, 03 Oct 2008 07:33:06 GMT

Bonjour,je reviens vers vous tous pour un probléme de configuration.Sous la version 2.1, l'authentification ldap marchait sans probléme (authentification, synchronisation, CIFS…).Sous la version 3B, avec la même configuration utilisée en 2.1 , je tombe sur une erreur dont je n'arrive pas à voir l'is

Re: [Résolu] ALFRESCO 3B + AD

michaelh — Fri, 03 Oct 2008 08:13:35 GMT

Bonjour,

Avez-vous repris les fichiers de configuration de la 2.1 sans les modifier ?
Si oui, ça ne peut juste pas fonctionner … voir l'annonce concernant la parution de la 3.0b.

Sinon, rien ne vaut le contenu de alfresco.log

Re: [Résolu] ALFRESCO 3B + AD

richardb — Fri, 03 Oct 2008 08:36:04 GMT

merci pour cette réponse rapide comme d'habitude.

au début, j'avais effectivement mis les fichiers de la 2.1, en me rendant compte rapideement des problémes engendrés.

du coup, je suis parti sur les fichiers de la 3.B en les adaptant à mes besoins.

Voici l'erreur dans le fichier logs

org.alfresco.error.AlfrescoRuntimeException: Not implemented                                                                                                                             at org.alfresco.repo.security.authentication.DefaultMutableAuthenticationDao.loadUserByUsername(DefaultMutableAuthenticationDao.java:410)                                        at net.sf.acegisecurity.providers.dao.DaoAuthenticationProvider.getUserFromBackend(DaoAuthenticationProvider.java:390)                                                           at net.sf.acegisecurity.providers.dao.DaoAuthenticationProvider.authenticate(DaoAuthenticationProvider.java:225)                                                                 at net.sf.acegisecurity.providers.ProviderManager.doAuthentication(ProviderManager.java:159)                                                                                     at net.sf.acegisecurity.AbstractAuthenticationManager.authenticate(AbstractAuthenticationManager.java:49)                                                                        at org.alfresco.repo.security.authentication.AuthenticationComponentImpl.authenticateImpl(AuthenticationComponentImpl.java:74)                                                   at org.alfresco.repo.security.authentication.AbstractAuthenticationComponent.authenticate(AbstractAuthenticationComponent.java:130)                                              at org.alfresco.repo.security.authentication.AuthenticationServiceImpl.authenticate(AuthenticationServiceImpl.java:117)                                                          at org.alfresco.repo.security.authentication.ChainingAuthenticationServiceImpl.authenticate(ChainingAuthenticationServiceImpl.java:166)                                          at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)                                                                                                                   at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)                                                                                                 at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)                                                                                         at java.lang.reflect.Method.invoke(Method.java:597)                                                                                                                              at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:296)                                                                                    at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:177)                                                             at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:144)                                                                     at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:80)                                                         at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:166)                                                                     at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:49)                                         at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:166)                                                                     at org.alfresco.repo.audit.AuditComponentImpl.audit(AuditComponentImpl.java:245)                                                                                                 at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:69)                                                                                         at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:166)                                                                     at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)                                                                    at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:166)                                                                     at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)                                                                                      at $Proxy20.authenticate(Unknown Source)                                                                                                                                         at org.alfresco.web.bean.LoginBean.login(LoginBean.java:275)                                                                                                                     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)                                                                                                                   at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)                                                                                                 at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)                                                                                         at java.lang.reflect.Method.invoke(Method.java:597)                                                                                                                              at org.apache.myfaces.el.MethodBindingImpl.invoke(MethodBindingImpl.java:132)                                                                                                    at org.apache.myfaces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:61)                                                                                   at javax.faces.component.UICommand.broadcast(UICommand.java:109)                                                                                                                 at javax.faces.component.UIViewRoot._broadcastForPhase(UIViewRoot.java:97)                                                                                                       at javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:171)                                                                                                      at org.apache.myfaces.lifecycle.InvokeApplicationExecutor.execute(InvokeApplicationExecutor.java:32)                                                                             at org.apache.myfaces.lifecycle.LifecycleImpl.executePhase(LifecycleImpl.java:95)                                                                                                at org.apache.myfaces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:70)                                              ‍

Afin de lever un doute avec un eventuel conflit avec CIFS, j'ai désactivé le protocole dans le file-server.xml. Le résultat est le même.

Si vous avez une piste à explorer, ce sera avec plaisir

Cordialement

Richard

PS: comment cloturer un post résolu ?

Re: [Résolu] ALFRESCO 3B + AD

richardb — Thu, 09 Oct 2008 15:21:32 GMT

pas d' idées ?

je suis tjs bloqué et je ne sais plus ou regarder :roll:

cordialement

Richard

Re: [Résolu] ALFRESCO 3B + AD

michaelh — Wed, 15 Oct 2008 20:11:08 GMT

Bonjour,

Vous indiquez dans un autre message que la partie AD fonctionne.
Est-ce avec une version 3.0 ? Si oui les fichiers de configuration pourraient aider quelques personnes …

Pour indiquer qu'un problème est résolu, il suffit de changer le titre de votre premier message en indiquant [Résolu] en début de sujet.

Re: [Résolu] ALFRESCO 3B + AD

richardb — Thu, 16 Oct 2008 07:41:41 GMT

Bonjou à tous,

Désolé pour cet oubli impardonnable. Quand on prend, il faut savoir donner. :!: :!:

Voici mes fichiers de conf pour faire touner alfresco 3B avec AD (Pas de synchronisation encore dans ce cas).

Les fichiers ne sont pas optimisés car tous les paramétres devraient être dans des fichiers .properties, en autre. Mais cela devrez vous aider tout de même.

chaining-authentication-context.xml

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>

<beans>

    <!– Chaining –>
    <bean id="authenticationServiceImpl" class="org.alfresco.repo.security.authentication.ChainingAuthenticationServiceImpl">
        <property name="authenticationServices">
            <list>
                <ref bean="authenticationServiceImplLDAP"/>
            </list>
        </property>
        <property name="mutableAuthenticationService">
            <ref bean="authenticationServiceImplAlfresco"/>
        </property>
    </bean>

    <!– Alfresco Auth –>
    <bean id="authenticationServiceImplAlfresco" class="org.alfresco.repo.security.authentication.AuthenticationServiceImpl">
        <property name="authenticationDao">
            <ref bean="authenticationDaoAlfresco"/>
        </property>
        <property name="ticketComponent">
            <ref bean="ticketComponent"/>
        </property>
        <property name="authenticationComponent">
            <ref bean="authenticationComponentImplAlfresco"/>
        </property>
    </bean>

    <bean id="authenticationDaoAlfresco" class="org.alfresco.repo.security.authentication.RepositoryAuthenticationDao">
        <property name="nodeService">
            <ref bean="nodeService"/>
        </property>
        <property name="dictionaryService">
            <ref bean="dictionaryService"/>
        </property>
        <property name="namespaceService">
            <ref bean="namespaceService"/>
        </property>
        <property name="searchService">
            <ref bean="searchService"/>
        </property>
        <property name="userNamesAreCaseSensitive">
            <value>${user.name.caseSensitive}</value>
        </property>
        <property name="passwordEncoder">
            <ref bean="passwordEncoder"/>
        </property>
    </bean>


    <bean id="authenticationComponentImplAlfresco" class="org.alfresco.repo.security.authentication.AuthenticationComponentImpl">
        <property name="authenticationDao">
            <ref bean="authenticationDaoAlfresco"/>
        </property>
        <property name="authenticationManager">
            <ref bean="authenticationManager"/>
        </property>
        <property name="allowGuestLogin">
            <value>false</value>
        </property>
    </bean>

   <!– LDAP Auth –>
    <bean id="authenticationServiceImplLDAP" class="org.alfresco.repo.security.authentication.AuthenticationServiceImpl">
        <property name="authenticationDao">
            <ref bean="authenticationDaoLDAP" />
        </property>
        <property name="ticketComponent">
            <ref bean="ticketComponent" />
        </property>
        <property name="authenticationComponent">
            <ref bean="authenticationComponentImplLDAP" />
        </property>
    </bean>

    <bean id="authenticationComponentImplLDAP" class="org.alfresco.repo.security.authentication.ldap.LDAPAuthenticationComponentImpl">
        <property name="LDAPInitialDirContextFactory">
            <ref bean="ldapInitialDirContextFactory"/>
        </property>
        <property name="userNameFormat">
            <value>sAMAccountName=%s</value>
        </property>
    </bean>

    <bean id="authenticationDaoLDAP" class="org.alfresco.repo.security.authentication.ntlm.NullMutableAuthenticationDao"/>

</beans>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

ldap-authentication-context.xml

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>

<beans>

    <bean id="ldapInitialDirContextFactory" class="org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextFactoryImpl">
        <property name="initialDirContextEnvironment">
            <map>
                <!– The LDAP provider –>
                <entry key="java.naming.factory.initial">
                    <value>com.sun.jndi.ldap.LdapCtxFactory</value>
                </entry>

                <!– The url to the LDAP server –>
                <entry key="java.naming.provider.url">
                    <value>ldap://XXX.XXX.YYY.YYY:389</value>
                </entry>

                <!– The authentication mechanism to use      –>
                <!– Some sasl authentication mechanisms may require a realm to be set –>
                <!–                java.naming.security.sasl.realm –>
                <!– The available options will depend on your LDAP provider –>
                <entry key="java.naming.security.authentication">
                    <value>simple</value>
                </entry>

                <!– The id of a user who can read group and user information –>
                <!– This does not go through the pattern substitution defined above and is used "as is" –>
                <entry key="java.naming.security.principal">
                    <value>loginAD</value>
                </entry>

                <!– The password for the user defined above –>
                <entry key="java.naming.security.credentials">
                    <value>PasswdLoginAD</value>
                </entry>
            </map>
        </property>
    </bean>

</beans>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

ntlm-authentication-context.xml

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>

<beans>

    <bean id="authenticationDao" class="org.alfresco.repo.security.authentication.ntlm.NullMutableAuthenticationDao" />

    <!– The authentication component.                                      –>

    <!– Use the passthru authentication component to authenticate using    –>
    <!– user accounts on one or more Windows servers.                      –>

    <!– Properties that specify the server(s) to use for passthru          –>
    <!– authentication :-                                                  –>
    <!–   useLocalServer   use the local server for authentication         –>
    <!–   domain           use domain controllers from the specified domain–>
    <!–   servers          comma delimted list of server addresses or      –>
    <!–                    names                                           –>

    <bean id="authenticationComponent"
          class="org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl"
          parent="authenticationComponentBase">
        <property name="useLocalServer">
            <value>false</value>
        </property>
        <property name="personService">
            <ref bean="personService" />
        </property>
        <property name="nodeService">
            <ref bean="nodeService" />
        </property>
        <property name="transactionService">
            <ref bean="transactionComponent" />
        </property>
        <property name="guestAccess">
            <value>false</value>
        </property>
        <property name="servers">
            <value>XXX.XXX.YYY.YYY</value>
        </property>
    </bean>

</beans>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Dés que j'ai réalisé ma synchro, je modifierai ce post en mettant en ligne le fichier ldap-synchronisation-context.xml

Je profites de l'occasion pour remercier certaines personnes pour le sérieux de leur travail tant sur le plan du suivi des post, des réponses apportées et de leur rapidité à répondre. Je suis sure qu'elles se reconnaitront :wink:

En restant à votre disposition à tous

Cordialement

Richard