topic Re: Error while configuring LDAP for SSO in Alfresco Forum

Error while configuring LDAP for SSO

piyush48 — Mon, 16 Mar 2020 09:48:33 GMT

Hi All,

I am getting errors while configuring LDAP with my SDK 3.0 after changing alfresco-global-properties file.

As i am new towards administrating Alfresco topic. I am following documentation example given. Please find the image of error occuring while running SDK 3.0.

Thanks,

Piyush

Re: Error while configuring LDAP for SSO

EddieMay — Mon, 16 Mar 2020 11:21:45 GMT

Hi @piyush48,

Take a look at this thread, it might be of help.

HTH

Re: Error while configuring LDAP for SSO

narkuss — Tue, 17 Mar 2020 06:41:53 GMT

You are not effectively overriding default Alfresco ldap-ad properties, as the logs state it is trying to connect to ldap://domaincontroller.company.com:389, which is the default value for ldap.authentication.java.naming.provider.url, as you can see here: https://github.com/Alfresco/alfresco-repository/blob/3752edb6d69fe5ff4c47bbce4909193bd2db9a97/src/main/resources/alfresco/subsystems/Authentication/ldap-ad/ldap-ad-authentication.properties#L20

Check your ldap-ad configuration properties.

Re: Error while configuring LDAP for SSO

piyush48 — Tue, 17 Mar 2020 13:12:20 GMT

I have tried following the code presented on link you have share but still having error with connection of LDAP.

Please look at my alfresco-global.properties file

authentication.chain=alfrescoNtlm1:alfrescoNtlm,ldap-ad1:ldap-ad
ldap.authentication.active=true
ldap.authentication.allowGuestLogin=true
ldap.authentication.userNameFormat=%s@alfresco.com
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://alfresco.com:389
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.defaultAdministratorUserNames=Administrator

ldap.synchronization.active=true
ldap.synchronization.java.naming.security.principal=administrator@alfresco.com
ldap.synchronization.java.naming.security.credentials=secret
ldap.synchronization.queryBatchSize=1000
ldap.synchronization.attributeBatchSize=1000
synchronization.synchronizeChangesOnly=false
synchronization.allowDeletions=true
synchronization.syncWhenMissingPeopleLogIn=true

ldap.synchronization.groupQuery=objectclass\=group
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(modifyTimestamp<\={0})))

ldap.synchronization.personQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(|(ou=alfresco=alfresco,dc=com)(ou=alfresco,dc=alfresco,dc=com)))

ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(|(ou=alfresco,dc=alfresco,dc=com)(ou=alfresco,dc=alfresco,dc=com))(!(modifyTimestamp<\={0})))

ldap.synchronization.groupSearchBase=ou\=alfresco,dc\=alfresco,dc\=com

ldap.synchronization.userSearchBase=dc\=alfresco,dc\=com

ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'
ldap.synchronization.userIdAttributeName=sAMAccountName
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProvider
ldap.synchronization.groupDisplayNameAttributeName=displayName
ldap.synchronization.groupType=group
ldap.synchronization.personType=user
ldap.synchronization.groupMemberAttributeName=member
ldap.synchronization.enableProgressEstimation=true

Please suggest me changes to this file to solve error.

Re: Error while configuring LDAP for SSO

piyush48 — Tue, 17 Mar 2020 13:15:34 GMT

Also Eddie i have done changes as posted in your thread. i have provided my alfresco-global properties file above please go through and suggest.

Thanks,

Piyush

Re: Error while configuring LDAP for SSO

EddieMay — Tue, 17 Mar 2020 15:52:08 GMT

Hi @piyush48,

Looking at some of the values you are using, these are the default values - these need replacing with your equivalents. For example,

ldap.authentication.userNameFormat=%s@alfresco.com

@alfresco.com should be replaced with your own domain.

Similarly,

ldap.authentication.java.naming.provider.url=ldap://alfresco.com:389
 
....

ldap.synchronization.java.naming.security.principal=administrator@alfresco.com

need changing - the 1st is looking to alfresco.com when it should be referring to the URL to connect to your own LDAP server.

This is probably the primary reason it says it's unable to connect to the LDAP server.