Active Directory Configuration

makram_baaziz — Wed, 28 Mar 2018 08:19:15 GMT

Hello All,I have alfresco process services 1.8.1 and wanted to activate the LDAP (active directory) authentication, but I'm facing the following error and don't know what to do:2018-03-28 09:57:59,578 INFO [com.activti.idm.ldap.service.LdapSettingsManager] [localhost-startStop-1] rangeEnabled = fals

Re: Active Directory Configuration

keith_bailey — Fri, 25 May 2018 10:32:48 GMT

Hi Makram,

Appreciate that it has been a while since you asked your question, but I found it whilst trying to problem solve a different issue myself.

Did you get this resolved in the end ?

I notice that you have

ldap.synchronization.userIdAttributeName=uid

Although 'uid' is an attribute in AD, i'm not sure what it gets populated with. That might be why you are getting non-unique results for a specific user.

See User Naming Attributes (Windows)

You might be better off using

ldap.synchronization.userIdAttributeName=sAMAccountName

- we've had some success with this setting & AD, although my current problem is that disabled AD accounts are not making active users 'inactive'

Caution : Note that this contradicts the example-activiti-ldap-for-ad.properties file which suggests you use 'cn' together as does numerous other examples i've found in google searches. However, that gives us the users full name in 'external_id' within APS, which is not correct.

See [MNT-18209] AD ldap.authentication.active-directory.* configuration properties cause auth failure - Alfresco JIRA

I also note that there is an open JIRA to improve the documentation.

HTH

Keith

topic Re: Active Directory Configuration in Alfresco Forum

Active Directory Configuration

Re: Active Directory Configuration