topic Identification avec annuaire LDAP in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/identification-avec-annuaire-ldap/m-p/142135#M99538 <HTML><HEAD></HEAD><BODY><SPAN>Bonjour&nbsp; <img id="smileyhappy" class="emoticon emoticon-smileyhappy" src="https://connect.hyland.com/i/smilies/16x16_smiley-happy.png" alt="Smiley Happy" title="Smiley Happy" /> </SPAN><BR /><BR /><SPAN>Comme le titre l'annonce, je n'arrive pas à m'identifier à Alfresco avec mes identifiants de l'annuaire LDAP&nbsp; <img id="smileysurprised" class="emoticon emoticon-smileysurprised" src="https://connect.hyland.com/i/smilies/16x16_smiley-surprised.png" alt="Smiley Surprised" title="Smiley Surprised" />ops: </SPAN><BR /><BR /><SPAN>Malgré la consultation de nombreux posts abordant la question et des tests, je n'arrive pas à me connecter avec les identifiants voulus&nbsp; :? </SPAN><BR /><BR /><SPAN>Pourtant voici les étapes que j'ai suivi :</SPAN><BR /><SPAN>- édition de : ldap-authentication-context.xml (je n'ai rien modifié)</SPAN><BR /><SPAN>- édition de : ldap-synchronisation-context.xml (je n'ai rien modifié)</SPAN><BR /><SPAN>- modification de : ldap-authentication.properties</SPAN><BR /><SPAN>- modification de : ldap-synchronisation.properties</SPAN><BR /><BR /><SPAN>J'utilise thunderbird qui lui même utilise LDAP (et qui fonctionne). J'ai donc repris ces paramètres suivants :</SPAN><BR /><SPAN>- nom d'hôte : ldap-monserveur.net</SPAN><BR /><SPAN>- nom distinct de la base : dc=hermes-prod</SPAN><BR /><SPAN>- numéro de port : 389</SPAN><BR /><BR /><SPAN>J'ai bien essayé d'éditer :</SPAN><BR /><SPAN>- chaining-authentication-context.xml</SPAN><BR /><SPAN>- file-servers.xml</SPAN><BR /><SPAN>MAIS il y'a eu de nombreuses erreurs…(CIFS,FTP, etc..)</SPAN><BR /><BR /><SPAN>Voici mon fichier&nbsp; ldap-authentication.properties :</SPAN><BR /><PRE class="language-none line-numbers"><CODE>#<BR /># This properties file brings together the common options for LDAP authentication rather than editing the bean definitions<BR />#<BR /><BR /># How to map the user id entered by the user to taht passed through to LDAP<BR /># - simple <BR />#&nbsp;&nbsp;&nbsp; - this must be a DN and would be something like<BR />#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CN=%s,DC=company,DC=com<BR /># - digest<BR />#&nbsp;&nbsp;&nbsp; - usually pass through what is entered<BR />#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; %s&nbsp;&nbsp;&nbsp;&nbsp; <BR />ldap.authentication.userNameFormat=CN=%s,dc=hermes-prod <BR /><BR /># The LDAP context factory to use<BR />ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory<BR /><BR /># The URL to connect to the LDAP server <BR />ldap.authentication.java.naming.provider.url=ldap://ldap-monserveur.net:389<BR /><BR /># The authentication mechanism to use<BR />ldap.authentication.java.naming.security.authentication=SIMPLE<BR /><BR /># The default principal to use (only used for LDAP sync)<BR />ldap.authentication.java.naming.security.principal=uid=admin,ou=system<BR /><BR /># The password for the default principal (only used for LDAP sync)<BR />ldap.authentication.java.naming.security.credentials=admin<BR /><BR /># Escape commas entered by the user at bind time<BR /># Useful when using simple authentication and the CN is part of the DN and contains commas<BR />ldap.authentication.escapeCommasInBind=false<BR /><BR /># Escape commas entered by the user when setting the authenticated user<BR /># Useful when using simple authentication and the CN is part of the DN and contains commas, and the escaped \, is <BR /># pulled in as part of an LDAP sync<BR /># If this option is set to true it will break the default home folder provider as space names can not contain \<BR />ldap.authentication.escapeCommasInUid=false<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>Voici mon fichier&nbsp; ldap-synchronisation.properties :</SPAN><BR /><PRE class="language-none line-numbers"><CODE># <BR /># This properties file is used to configure LDAP syncronisation<BR />#<BR /><BR /># The query to find the people to import<BR />ldap.synchronisation.personQuery=(objectclass=inetOrgPerson)<BR /><BR /># The search base of the query to find people to import<BR />ldap.synchronisation.personSearchBase=dc=hermes-prod<BR /><BR /># The attribute name on people objects found in LDAP to use as the uid in Alfresco<BR />ldap.synchronisation.userIdAttributeName=uid<BR /><BR /># The attribute on person objects in LDAP to map to the first name property in Alfresco<BR />ldap.synchronisation.userFirstNameAttributeName=givenName<BR /><BR /># The attribute on person objects in LDAP to map to the last name property in Alfresco<BR />ldap.synchronisation.userLastNameAttributeName=sn<BR /><BR /># The attribute on person objects in LDAP to map to the email property in Alfresco<BR />ldap.synchronisation.userEmailAttributeName=mail<BR /><BR /># The attribute on person objects in LDAP to map to the organizational id&nbsp; property in Alfresco<BR />ldap.synchronisation.userOrganizationalIdAttributeName=o<BR /><BR /># The default home folder provider to use for people created via LDAP import<BR />ldap.synchronisation.defaultHomeFolderProvider=personalHomeFolderProvider<BR /><BR /># The query to find group objects<BR />ldap.synchronisation.groupQuery=(objectclass=groupOfNames)<BR /><BR /># The search base to use to find group objects<BR />ldap.synchronisation.groupSearchBase=dc=hermes-prod<BR /><BR /># The attribute on LDAP group objects to map to the gid property in Alfrecso<BR />ldap.synchronisation.groupIdAttributeName=cn<BR /><BR /># The group type in LDAP<BR />ldap.synchronisation.groupType=groupOfNames<BR /><BR /># The person type in LDAP<BR />ldap.synchronisation.personType=inetOrgPerson<BR /><BR /># The attribute in LDAP on group objects that defines the DN for its members<BR />ldap.synchronisation.groupMemberAttributeName=member<BR /><BR /># The cron expression defining when people imports should take place<BR />ldap.synchronisation.import.person.cron=0 0 * * * ? <BR /><BR /># The cron expression defining when group imports should take place <BR />ldap.synchronisation.import.group.cron=0 30 * * * ? <BR /><BR /># Should all groups be cleared out at import time?<BR /># - this is safe as groups are not used in Alfresco for other things (unlike person objects which you should never clear out during an import)<BR /># - setting this to true means old group definitions will be tidied up.<BR />ldap.synchronisation.import.group.clearAllChildren=true<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><SPAN>Voici mes erreurs :</SPAN><BR /><PRE class="language-none line-numbers"><CODE>18:08:08,929 User:System ERROR [smb.protocol.auth] No valid CIFS authentication combination available<BR />18:08:08,929 User:System ERROR [smb.protocol.auth] Either enable Kerberos support or use an authentication component tha<BR />t supports MD4 hashed passwords<BR />18:08:08,929 User:System ERROR [alfresco.smb.protocol] CIFS server configuration error, Invalid CIFS authenticator confi<BR />guration<BR />org.alfresco.error.AlfrescoRuntimeException: Invalid CIFS authenticator configuration<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><PRE class="language-none line-numbers"><CODE>18:08:08,929 User:System ERROR [alfresco.smb.protocol] FTP server configuration error, Wrong authentication setup for al<BR />fresco authenticator<BR />org.alfresco.error.AlfrescoRuntimeException: Wrong authentication setup for alfresco authenticator<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><PRE class="language-none line-numbers"><CODE><BR />18:08:10,101 User:System WARN&nbsp; [alfresco.util.OpenOfficeConnectionTester] An initial OpenOffice connection could not be<BR />established.<BR />18:08:10,132 User:System INFO&nbsp; [service.descriptor.DescriptorService] Alfresco JVM - v1.5.0_10-b03; maximum heap size 25<BR />4,063MB<BR />18:08:10,132 User:System WARN&nbsp; [service.descriptor.DescriptorService] Alfresco JVM - WARNING - maximum heap size 254,063<BR />MB is less than recommended 512MB<BR />18:08:10,132 User:System INFO&nbsp; [service.descriptor.DescriptorService] Alfresco started (Labs): Current version 3.0.0 (St<BR />able 1526) schema 1002 - Installed version 3.0.0 (Stable 1526) schema 1002<BR />11 ao¹t 2009 18:08:28 org.apache.coyote.http11.Http11Protocol start<BR />INFO: DÚmarrage de Coyote HTTP/1.1 sur http-8080<BR />11 ao¹t 2009 18:08:29 org.apache.jk.common.ChannelSocket init<BR />INFO: JK: ajp13 listening on /0.0.0.0:8009<BR />11 ao¹t 2009 18:08:29 org.apache.jk.server.JkMain start<BR />INFO: Jk running ID=0 time=0/16&nbsp; config=null<BR />11 ao¹t 2009 18:08:29 org.apache.catalina.startup.Catalina start<BR />INFO: Server startup in 76210 ms<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><SPAN>Je n'arrive pas du tout à me connecter, Alfresco ne connait aucun utilisateur du LDAP ni même l'admin (user:admin password:admin)</SPAN><BR /><BR /><SPAN>J'ai essayé toutes les possibilités dans les fichiers properties mais je n'arrive à rien&nbsp; :cry: </SPAN><BR /><BR /><SPAN>Aidez moi s'il vous plait&nbsp; <img id="smileyindifferent" class="emoticon emoticon-smileyindifferent" src="https://connect.hyland.com/i/smilies/16x16_smiley-indifferent.png" alt="Smiley Indifferent" title="Smiley Indifferent" /></SPAN><BR /><SPAN>UN GRAND MERCI à CELUI QUI POURRA M'AIDER !</SPAN><BR /><BR /><SPAN>PS: Je suis sûre que cette notice aidera de nombreuses personnes&nbsp; <img id="smileyvery-happy" class="emoticon emoticon-smileyvery-happy" src="https://connect.hyland.com/i/smilies/16x16_smiley-very-happy.png" alt="Smiley Very Happy" title="Smiley Very Happy" />&nbsp; (erreurs vues dans de nombreux posts jamais résolus)</SPAN></BODY></HTML> Tue, 11 Aug 2009 16:13:20 GMT lomy 2009-08-11T16:13:20Z Identification avec annuaire LDAP https://connect.hyland.com/t5/alfresco-archive/identification-avec-annuaire-ldap/m-p/142135#M99538 Bonjour&nbsp; <IMG id="smileyhappy" class="emoticon emoticon-smileyhappy" src="https://migration33.stage.lithium.com/i/smilies/16x16_smiley-happy.png" alt="Smiley Happy" title="Smiley Happy" /> Comme le titre l'annonce, je n'arrive pas à m'identifier à Alfresco avec mes identifiants de l'annuaire LDAP&nbsp; <IMG id="smileysurprised" class="emoticon emoticon-smileysurprised" src="https://migration33.stage.lithium.com/i/smilies/16x16_smiley-surprised.png" alt="Smiley Surprised" title="Smiley Surprised" />ops: Malgré la consultation de nombreux posts abordant la question et des tests, je n'arrive pas à me connecter avec les identifiants voulus&nbsp; :? Pourtant voici les étapes que j Tue, 11 Aug 2009 16:13:20 GMT https://connect.hyland.com/t5/alfresco-archive/identification-avec-annuaire-ldap/m-p/142135#M99538 lomy 2009-08-11T16:13:20Z Re: Identification avec annuaire LDAP https://connect.hyland.com/t5/alfresco-archive/identification-avec-annuaire-ldap/m-p/142136#M99539 <HTML><HEAD></HEAD><BODY><SPAN>Bonjour,</SPAN><BR /><BR /><SPAN>Une réponse un peu tardive, mais vaut mieux tard que jamais ! Tu trouveras des informations pour la configuration ici notamment : </SPAN><A href="http://wiki.alfresco.com/wiki/Security_and_Authentication" rel="nofollow noopener noreferrer">http://wiki.alfresco.com/wiki/Security_and_Authentication</A><BR /><BR /><SPAN>Si ton problème persiste n'hésite pas à augmenter le debug level de ldap et à nous fournir les logs ( 768 et c'est parfait <img id="smileyhappy" class="emoticon emoticon-smileyhappy" src="https://connect.hyland.com/i/smilies/16x16_smiley-happy.png" alt="Smiley Happy" title="Smiley Happy" /> ). Par contre attention l'authentification LDAP ne marchera pas avec CIFS et FTP d'ou les erreurs que tu as rencontrées !</SPAN></BODY></HTML> Mon, 17 Aug 2009 20:21:33 GMT https://connect.hyland.com/t5/alfresco-archive/identification-avec-annuaire-ldap/m-p/142136#M99539 loïcfache 2009-08-17T20:21:33Z