topic Re: Active Directory over SSL in Alfresco Forum

Active Directory over SSL

mjt99 — Thu, 31 May 2018 18:12:14 GMT

Good day,I'm in the middle of my first Alfresco installation and configuration and need some assistance configuring Alfresco to work with Active Directory over SSL.Here's a summary of what I've done so far:- Exported the certificate from my AD server- Imported the cert into the default keystore: C:\

Re: Active Directory over SSL

afaust — Fri, 01 Jun 2018 09:39:04 GMT

The ssl.keystore is only used for communication between Repository and SOLR. It is inconsequential for communication with LDAP / AD over SSL. In order to use LDAPS, the subsystem provides its own properties for configuring a specific keystore as the truststore. Look for the "ldap.authentication.truststore.xx" settings in the documentation. Of course you could re-use the ssl.truststore for this and add the certificate for the Active Directory server (or for the signing CA) in there.

Re: Active Directory over SSL

mjt99 — Fri, 01 Jun 2018 14:58:03 GMT

Thanks Axel. I've got the Active Directory integration working now over SSL. I did a reinstall of Alfresco to restore the ssl.keystore to it's original state and imported the AD cert into a ldap.keystore file. After an issue with needing to use escape characters in the alfresco-global.properties file to point to the new keystore file everything started up properly with no errors in the log. I was then able to login using my AD account.

I'll now mark this question as solved.

Thanks again.

Re: Active Directory over SSL

crisdev13 — Fri, 14 Jul 2023 16:34:12 GMT

sir can i see your config in alfresco.global.properties