<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Ldap authentication in ALfresco2.1 in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/ldap-authentication-in-alfresco2-1/m-p/132663#M93180</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hi,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Can anyone suggest me the Ldap authentication process in alfresco2.1.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;I have integrated Alfresco2.1 with Liferay4.3, but i am now unable to authenticate the Ldap server from alfresco.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I have provided the Ldap server values and other details in &lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap-authentication-context.xml. The file is as follows:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Here's the code:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;?xml version='1.0' encoding='UTF-8'?&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' '&lt;/SPAN&gt;&lt;A href="http://www.springframework.org/dtd/spring-beans.dtd" rel="nofollow noopener noreferrer"&gt;http://www.springframework.org/dtd/spring-beans.dtd&lt;/A&gt;&lt;SPAN&gt;'&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;beans&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– DAO that rejects changes - LDAP is read only at the moment. It does allow users to be deleted with out warnings from the UI. –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;bean name="authenticationDao" class="org.alfresco.repo.security.authentication.DefaultMutableAuthenticationDao" &amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="allowDeleteUser"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;true&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/bean&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– LDAP authentication configuration –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!–&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;You can also use JAAS authentication for Kerberos against Active Directory or NTLM if you also require single sign on from the&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;web browser. You do not have to use LDAP authentication to synchronise groups and users from an LDAP store if it supports other&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;authentication routes, like Active Directory.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;–&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;bean id="authenticationComponent" class="org.alfresco.repo.security.authentication.ldap.LDAPAuthenticationComponentImpl"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="LDAPInitialDirContextFactory"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="ldapInitialDirContextFactory"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="userNameFormat"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!–&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;This maps between what the user types in and what is passed through to the underlying LDAP authentication.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;"%s" - the user id is passed through without modification.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Used for LDAP authentication such as DIGEST-MD5, anything that is not "simple".&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;"cn=%s,ou=London,dc=company,dc=com" - If the user types in "Joe Bloggs" the authentricate as "cn=Joe Bloggs,ou=London,dc=company,dc=com"&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Usually for simple authentication.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;–&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;%s&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/bean&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!–&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;This bean is used to support general LDAP authentication. It is also used to provide read only access to users and groups&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;to pull them out of the LDAP reopsitory&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;–&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;bean id="ldapInitialDirContextFactory" class="org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextFactoryImpl"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="initialDirContextEnvironment"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;map&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– The LDAP provider –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;entry key="java.naming.factory.initial"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;com.sun.jndi.ldap.LdapCtxFactory&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/entry&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– The url to the LDAP server –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Note you can use space separated urls - they will be tried in turn until one works –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– This could be used to authenticate against one or more ldap servers (you will not know which one ….) –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;entry key="java.naming.provider.url"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;ldap://*********&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/entry&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– The authentication mechanism to use –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Some sasl authentication mechanisms may require a realm to be set –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– java.naming.security.sasl.realm –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– The available options will depend on your LDAP provider –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;entry key="java.naming.security.authentication"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;DIGEST-MD5&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/entry&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– The id of a user who can read group and user information –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– This does not go through the pattern substitution defined above and is used "as is" –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;entry key="java.naming.security.principal"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;cn=****,ou=***,dc=***&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/entry&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– The password for the user defined above –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;entry key="java.naming.security.credentials"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;******&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/entry&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/map&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/bean&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Ldap Syncronisation support –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!–&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;There can be more than one stack of beans that import users or groups. For example, it may be easier&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;to have a version of ldapPeopleExportSource, and associated beans, for each sub-tree of your ldap directory&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;from which you want to import users. You could then limit users to be imported from two or more sub tress and ignore&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;users found else where. The same applies to the import of groups.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;The defaults shown below are for OpenLDAP.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;–&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Extract user information from LDAP and transform this to XML –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;bean id="ldapPeopleExportSource" class="org.alfresco.repo.security.authentication.ldap.LDAPPersonExportSource"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!–&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;The query to select objects that represent the users to import.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;For Open LDAP, using a basic schema, the following is probably what you want:&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;(objectclass=inetOrgPerson)&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;For Active Directory:&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;(objectclass=user)&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;–&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="personQuery"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;(objectclass=inetOrgPerson)&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!–&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;The seach base restricts the LDAP query to a sub section of tree on the LDAP server.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;–&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="searchBase"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;OU=*****,dc=*****&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!–&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;The unique identifier for the user.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;THIS MUST MATCH WHAT THE USER TYPES IN AT THE LOGIN PROMPT&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;For simple LDAP authentication this is likely to be "cn" or, less friendly, "distinguishedName"&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;In OpenLDAP, using other authentication mechanisms "uid", but this depends on how you map&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;from the id in the LDAP authentication request to search for the inetOrgPerson against which&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;to authenticate.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;In Active Directory this is most likely to be "sAMAccountName"&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;This property is mandatory and must appear on all users found by the query defined above.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;–&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="userIdAttributeName"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;sAMAccountName&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Services –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="LDAPInitialDirContextFactory"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="ldapInitialDirContextFactory"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="personService"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="personService"&amp;gt;&amp;lt;/ref&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="namespaceService"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="namespaceService"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!–&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;This property defines a mapping between attributes held on LDAP user objects and&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;the properties of user objects held in the repository. The key is the QName of an attribute in&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;the repository, the value is the attribute name from the user/inetOrgPerson/.. object in the&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;LDAP repository.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;–&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="attributeMapping"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;map&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;entry key="cm:userName"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Must match the same attribute as userIdAttributeName –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;sAMAccountName&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/entry&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;entry key="cm:firstName"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– OpenLDAP: "givenName" –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Active Directory: "givenName" –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;givenName&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/entry&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;entry key="cm:lastName"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– OpenLDAP: "sn" –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Active Directory: "sn" –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;sn&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/entry&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;entry key="cm:email"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– OpenLDAP: "mail" –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Active Directory: "???" –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;mail&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/entry&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;entry key="cm&lt;img id="smileysurprised" class="emoticon emoticon-smileysurprised" src="https://connect.hyland.com/i/smilies/16x16_smiley-surprised.png" alt="Smiley Surprised" title="Smiley Surprised" /&gt;rganizationId"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– OpenLDAP: "o" –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Active Directory: "???" –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;o&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/entry&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Always use the default –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;entry key="cm:homeFolderProvider"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;null/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/entry&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/map&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Set a default home folder provider –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Defaults only apply for values above –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="attributeDefaults"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;map&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;entry key="cm:homeFolderProvider"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;companyFolderProvider&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/entry&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/map&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/bean&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Extract group information from LDAP and transform this to XML –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;bean id="ldapGroupExportSource" class="org.alfresco.repo.security.authentication.ldap.LDAPGroupExportSource"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!–&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;The query to select objects that represent the groups to import.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;For Open LDAP, using a basic schema, the following is probably what you want:&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;(objectclass=groupOfNames)&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;For Active Directory:&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;(objectclass=group)&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;–&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="groupQuery"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;(objectclass=groupOfNames)&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!–&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;The search base restricts the LDAP query to a sub section of tree on the LDAP server.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;–&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="searchBase"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;OU=*****,dc=****&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!–&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;The unique identifier for the user. This must match the userIdAttributeName on the ldapPeopleExportSource bean above.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;–&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="userIdAttributeName"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;sAMAccountName&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!–&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;An attribute that is a unique identifier for each group found.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;This is also the name of the group with the current group implementation.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;This is mandatory for any groups found.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;OpenLDAP: "cn" as it is mandatory on groupOfNames&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Active Directory: "cn"&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;–&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="groupIdAttributeName"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;cn&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!–&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;The objectClass attribute for group members.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;For each member of a group, the distinguished name is given.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;The object is looked up by its DN. If the object is of this class it is treated as a group.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;–&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="groupType"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;groupOfNames&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!–&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;The objectClass attribute for person members.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;For each member of a group, the distinguished name is given.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;The object is looked up by its DN. If the object is of this class it is treated as a person.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;–&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="personType"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;inetOrgPerson&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="LDAPInitialDirContextFactory"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="ldapInitialDirContextFactory"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="namespaceService"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="namespaceService"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!–&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;The repeating attribute on group objects (found by query or as sub groups)&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;used to define membership of the group. This is assumed to hold distinguished names of&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;other groups or users/people; the above types are used to determine this.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;OpenLDAP: "member" as it is mandatory on groupOfNames&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Active Directory: "member"&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;–&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="memberAttribute"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;member&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="authorityDAO"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="authorityDAO"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/bean&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Job definitions to import LDAP people and groups –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– The triggers register themselves with the scheduler –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– You may comment in the default scheduler to enable these triggers –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– If a cron base trigger is what you want seee scheduled-jobs-context.xml for examples. –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Trigger to load poeple –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Note you can have more than one initial (context, trigger, import job and export source) set –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– This would allow you to load people from more than one ldap store –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;bean id="ldapPeopleTrigger" class="org.alfresco.util.TriggerBean"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="jobDetail"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;bean id="ldapPeopleJobDetail" class="org.springframework.scheduling.quartz.JobDetailBean"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="jobClass"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;org.alfresco.repo.importer.ImporterJob&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="jobDataAsMap"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;map&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;entry key="bean"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="ldapPeopleImport"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/entry&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/map&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/bean&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Start after 1 minutes of starting the repository –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="startDelay"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;300&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Repeat every hour –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="repeatInterval"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;3600000&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Commented out to disable&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="scheduler"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="schedulerFactory" /&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;–&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/bean&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;bean id="ldapGroupTrigger" class="org.alfresco.util.TriggerBean"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="jobDetail"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;bean id="ldapGroupJobDetail" class="org.springframework.scheduling.quartz.JobDetailBean"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="jobClass"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;org.alfresco.repo.importer.ImporterJob&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="jobDataAsMap"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;map&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;entry key="bean"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="ldapGroupImport"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/entry&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/map&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/bean&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Start after 1 minutes of starting the repository –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="startDelay"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;300&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Repeat every hour –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="repeatInterval"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;3600000&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– Commented out to disable&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="scheduler"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="schedulerFactory" /&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;–&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/bean&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– The bean that imports xml describing people –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;bean id="ldapPeopleImport" class="org.alfresco.repo.importer.ExportSourceImporter"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="importerService"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="importerComponentWithBehaviour"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="transactionService"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="transactionComponent"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="authenticationComponent"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="authenticationComponent"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="exportSource"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="ldapPeopleExportSource"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– The store that contains people - this should not be changed –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="storeRef"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;${spaces.store}&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– The location of people nodes within the store defined above - this should not be changed –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="path"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;/${system.system_container.childname}/${system.people_container.childname}&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– If true, clear all existing people before import, if false update/add people from the xml –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="clearAllChildren"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;false&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="nodeService"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="nodeService"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="searchService"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="searchService"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="namespacePrefixResolver"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="namespaceService"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="caches"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;set&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="permissionsAccessCache"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/set&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/bean&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– The bean that imports xml descibing groups –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;bean id="ldapGroupImport" class="org.alfresco.repo.importer.ExportSourceImporter"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="importerService"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="importerComponentWithBehaviour"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="transactionService"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="transactionComponent"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="authenticationComponent"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="authenticationComponent"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="exportSource"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="ldapGroupExportSource"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– The store that contains group information - this should not be changed –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="storeRef"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;${alfresco_user_store.store}&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– The location of group information in the store above - this should not be changed –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="path"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;/${alfresco_user_store.system_container.childname}/${alfresco_user_store.authorities_container.childname}&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– If true, clear all existing groups before import, if false update/add groups from the xml –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="clearAllChildren"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;value&amp;gt;true&amp;lt;/value&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="nodeService"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="nodeService"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="searchService"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="searchService"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="namespacePrefixResolver"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="namespaceService"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– caches to clear on import of groups –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;property name="caches"&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;set&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="userToAuthorityCache"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;ref bean="permissionsAccessCache"/&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/set&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/property&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;!– userToAuthorityCache –&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/bean&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;/beans&amp;gt;&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Fri, 31 Aug 2007 06:23:52 GMT</pubDate>
    <dc:creator>sanghamitra</dc:creator>
    <dc:date>2007-08-31T06:23:52Z</dc:date>
    <item>
      <title>Ldap authentication in ALfresco2.1</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-authentication-in-alfresco2-1/m-p/132663#M93180</link>
      <description>Hi,Can anyone suggest me the Ldap authentication process in alfresco2.1.I have integrated Alfresco2.1 with Liferay4.3, but i am now unable to authenticate the Ldap server from alfresco.I have provided the Ldap server values and other details in ldap-authentication-context.xml. The file is as follows</description>
      <pubDate>Fri, 31 Aug 2007 06:23:52 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-authentication-in-alfresco2-1/m-p/132663#M93180</guid>
      <dc:creator>sanghamitra</dc:creator>
      <dc:date>2007-08-31T06:23:52Z</dc:date>
    </item>
    <item>
      <title>Re: Ldap authentication in ALfresco2.1</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-authentication-in-alfresco2-1/m-p/132664#M93181</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hi sanghamitra,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I have a ldap configuration working using simple authentication and no synchronization of users or groups. &lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;My ldap file looks like this :&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;&lt;BR /&gt;&amp;lt;beans&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; &lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;bean name="authenticationDao" class="org.alfresco.repo.security.authentication.DefaultMutableAuthenticationDao" &amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;property name="allowDeleteUser"&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;value&amp;gt;true&amp;lt;/value&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;/property&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;/bean&amp;gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; &lt;BR /&gt;&amp;nbsp;&amp;nbsp; &lt;BR /&gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;!– LDAP authentication configuration –&amp;gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp; &amp;lt;bean id="authenticationComponent" class="es.retevision.ecompany.alfresco.repo.security.authentication.ldap.LDAPAuthenticationComponentWrapper"&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;property name="LDAPInitialDirContextFactory"&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;ref bean="ldapInitialDirContextFactory"/&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;/property&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;property name="userNameFormat"&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;value&amp;gt;uid=%s,ou=***,dc=***,dc=***&amp;lt;/value&amp;gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;/property&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp; &amp;lt;/bean&amp;gt;&lt;BR /&gt;&amp;lt;/bean&amp;gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp; &amp;lt;!– LDAP authentication configuration –&amp;gt;&lt;BR /&gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;bean id="ldapInitialDirContextFactory" class="es.retevision.ecompany.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextFactoryWrapper"&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;property name="initialDirContextEnvironment"&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;map&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;entry key="java.naming.factory.initial"&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;value&amp;gt;com.sun.jndi.ldap.LdapCtxFactory&amp;lt;/value&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;/entry&amp;gt; &lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;entry key="java.naming.provider.url"&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;value&amp;gt;ldap://my.ldap.server:port&amp;lt;/value&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;/entry&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;entry key="java.naming.security.authentication"&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;value&amp;gt;simple&amp;lt;/value&amp;gt;&amp;nbsp;&amp;nbsp; &lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;/entry&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;/map&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;/property&amp;gt;&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;/bean&amp;gt;&lt;BR /&gt; &amp;lt;/beans&amp;gt;&lt;BR /&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;BR /&gt;&lt;SPAN&gt;I would suggest you try the config first with "simple" authentication. I haven't been able to configure it with DIGEST-MD5. &lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Hope this is of help&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Finner&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 31 Aug 2007 07:27:48 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-authentication-in-alfresco2-1/m-p/132664#M93181</guid>
      <dc:creator>finner</dc:creator>
      <dc:date>2007-08-31T07:27:48Z</dc:date>
    </item>
    <item>
      <title>Re: Ldap authentication in ALfresco2.1</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-authentication-in-alfresco2-1/m-p/132665#M93182</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hi Finner,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I tried with the simple authentication too, but that still it doesnt work.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Here's the code of My log4j file inside tomcat55/common/classes.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# Set root logger level to error&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.rootLogger=error, Console, File&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;###### Console appender definition #######&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# All outputs currently set to be a ConsoleAppender.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.appender.Console=org.apache.log4j.ConsoleAppender&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.appender.Console.layout=org.apache.log4j.PatternLayout&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.appender.Console.layout.ConversionPattern=%d{ABSOLUTE} %-5p [%c{3}] %m%n&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.appender.Console.layout.ConversionPattern=%d{ABSOLUTE} %-5p [%c] %m%n&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;###### File appender definition #######&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.appender.File=org.apache.log4j.DailyRollingFileAppender&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.appender.File.File=alfresco.log&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.appender.File.Append=true&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.appender.File.DatePattern='.'yyyy-MM-dd&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.appender.File.layout=org.apache.log4j.PatternLayout&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.appender.File.layout.ConversionPattern=%d{ABSOLUTE} %-5p [%c] %m%n&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;###### Hibernate specific appender definition #######&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.appender.file=org.apache.log4j.FileAppender&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.appender.file.File=hibernate.log&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.appender.file.layout=org.apache.log4j.PatternLayout&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.appender.file.layout.ConversionPattern=%d{ABSOLUTE} %5p %c{1}:%L - %m%n&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;###### Log level overrides #######&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.repo.model.filefolder=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# Hibernate&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.hibernate=error&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.hibernate.util.JDBCExceptionReporter=fatal&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.hibernate.event.def.AbstractFlushingEventListener=fatal&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.hibernate.cache.EhCacheProvider=warn&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.hibernate.type=warn&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;# log4j.logger.org.hibernate.persister.collection=DEBUG&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# Spring&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.springframework=warn&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# Axis/WSS4J&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.apache.axis=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.apache.ws=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# MyFaces&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.apache.myfaces.util.DebugUtils=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.apache.myfaces.el.VariableResolverImpl=error&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.apache.myfaces.application.jsp.JspViewHandlerImpl=error&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.apache.myfaces.taglib=error&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# log prepared statement cache activity ###&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.hibernate.ps.PreparedStatementCache=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# Alfresco&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco=error&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.repo.avm=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.config=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.sample=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.web=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.web.scripts=warn&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.web.ui.repo.component.UIActions=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.web.ui.repo.tag.PageTag=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.web.bean.clipboard=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.repo.webservice=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.service.descriptor.DescriptorService=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.repo.importer.ImporterBootstrap=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.web.ui.common.Utils=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.repo.admin.patch.PatchExecuter=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.repo.module.ModuleServiceImpl=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.repo.domain.schema.SchemaBootstrap=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.repo.admin.ConfigurationChecker=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.repo.node.index.FullIndexRecoveryComponent=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.util.OpenOfficeConnectionTester=warn&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.repo.node.db.hibernate.HibernateNodeDaoServiceImpl=warn&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.web.app.DebugPhaseListener=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.repo.cache.EhCacheTracerJob=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.repo.search.Indexer=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.repo.workflow=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.repo.jscript=DEBUG&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.repo.jscript.AlfrescoRhinoScriptDebugger=off&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# CIFS server debugging&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.smb.protocol=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.smb.protocol.auth=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.acegi=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# FTP server debugging&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.ftp.protocol=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.ftp.server=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# WebDAV debugging&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.webdav.protocol=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# NTLM servlet filters&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.web.app.servlet.NTLMAuthenticationFilter=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.repo.webdav.auth.NTLMAuthenticationFilter=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# Integrity message threshold - if 'failOnViolation' is off, then WARNINGS are generated&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.repo.node.integrity=ERROR&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# New indexer debugging&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.repo.search.impl.lucene.index=DEBUG&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# Audit debugging&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;# log4j.logger.org.alfresco.repo.audit=DEBUG&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;# log4j.logger.org.alfresco.repo.audit.model=DEBUG&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# Turn off Spring remoting warnings that should really be info or debug.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.springframework.remoting.support=error&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# Templating debugging&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;# log4j.logger.org.alfresco.web.forms=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;# log4j.logger.org.chiba.xml.xforms=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# Property sheet and modelling debugging&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;# change to error to hide the warnings about missing properties and associations&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.alfresco.missingProperties=warn&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.web.ui.repo.component.property.UIChildAssociation=warn&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4j.logger.org.alfresco.web.ui.repo.component.property.UIAssociation=warn&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.web.ui.repo.component.property=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.repo.dictionary.DictionaryDAO=info&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#added the below line to enter the debug mode&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;log4.logger.org.alfresco.repo.security.authentication.ldap=debug &lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# Virtualization Server Registry&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.mbeans.VirtServerRegistry=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# Link Validation debugging&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.linkvalidation.LinkValidationServiceImpl=debug&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;#log4j.logger.org.alfresco.linkvalidation.LinkValidationStoreCallbackHandler=debug&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 31 Aug 2007 09:01:25 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-authentication-in-alfresco2-1/m-p/132665#M93182</guid>
      <dc:creator>sanghamitra</dc:creator>
      <dc:date>2007-08-31T09:01:25Z</dc:date>
    </item>
  </channel>
</rss>

