topic Location of changed password (Alfresco - LDAP) in Alfresco Forum

Location of changed password (Alfresco - LDAP)

john2994 — Fri, 19 Mar 2021 05:17:11 GMT

I have successfully added ldap-ad to Alfresco. Now when i am creating a user in AD, it is synchronized with Alfresco and i got an Alfresco user in ECM. The question is, if a user Bob (that has been sync from AD) changes his password, in which authentication system will it change, Alfresco or AD?

Re: Location of changed password (Alfresco - LDAP)

afaust — Fri, 19 Mar 2021 12:17:30 GMT

When using LDAP/AD for authentication, Alfresco will not have any access to password - for all login requests, Alfresco delegates to LDAP/AD, and passwords are only stored / changed there. During synchronisation, only identity details (name, email etc.) are synchronized - never passwords.

Re: Location of changed password (Alfresco - LDAP)

john2994 — Fri, 19 Mar 2021 14:59:15 GMT

So, if the user will try to change the password (in Alfresco), will he manage to do this ? What will happen ?

Re: Location of changed password (Alfresco - LDAP)

heiko_robert — Fri, 19 Mar 2021 18:26:14 GMT

Hi John, please don't do cross postings: Alfresco with LDAP, changing password of a user in Alfresco intefrace

Re: Location of changed password (Alfresco - LDAP)

anandsingh — Sun, 25 Apr 2021 19:21:51 GMT

We are in similar situation. It seems Out of the box Alfresco does not provide password complexity and expiration. So thought of using LDAP for user authentication and this works fine. But then how will end user change their passwords. The users created in Alfresco are synced into Alfresco but they are not allowed to change password. Can't Alfresco use LDAP API to change password into the LDAP?