Active Direcory & Alfresco

[adnan_douglas]

Dears,

Can anyone help me to configure Alfresco authentication to use Active Directory? I need the steps for the configuration.
Please Advice.

Regards,
Adnan Douglas

[luminary_mb]

I'm trying to use this method to enable single sign-on to my Alfresco server. I am using Alfresco 3.1 Enterprise edition, but I can't find the alfresco-global.properties file anywhere on my system. Does anyone know which file I would have to configure with these settings to make this work?

[dward]

There isn't such a file in v3.1. Go read http://wiki.alfresco.com/wiki/3.0_Configuring_NTLM

[luminary_mb]

Yeah I didn't think there was. I am following that article to configure my Alfresco 3.1, just havent got it fully working yet, so thought I might give this method a try. I'm reverting back to the method in the article now and trying to get info on it in the other post…

[mrojas73]

I would suggest an authentication chain containing the passthru subsystem for authentication and the ldap-ad subsystem for synchronization. You will get NTLM SSO and CIFS authentication against the domain server by default.

Just set the following in alfresco-global.properties

authentication.chain=passthru1assthru,ldap1:ldap-ad
ldap.authentication.active=false
passthru.authentication.domain=# Intentionally left blank
passthru.authentication.servers=DOMAIN\\domaincontroller.com,domaincontroller.com
passthru.authentication.defaultAdministratorUserNames=Administrator
ldap.authentication.java.naming.provider.url=ldap://domaincontroller.com:389
ldap.synchronization.java.naming.security.principal=alfresco@domain
ldap.synchronization.java.naming.security.credentials=secret
ldap.synchronization.groupSearchBase=ou=Security Groups,ou=Alfresco,dc=domain
ldap.synchronization.userSearchBase=ou=User Accounts,ou=Alfresco,dc=domain

I would recommend taking a v3.3 nightly build or building from HEAD, as a number of improvements have been made since the v3.2 Community release.

See http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems for a guide to all these parameters and their meanings.

hi dward,

Thanks for all your posts on the LDAP issues.

I was able to get this working…for new users out there, make sure the accounts you use a ldap account for the following so that you can login as an admin.

ldap.synchronization.java.naming.security.principal=alfresco@domain
passthru.authentication.defaultAdministratorUserNames=Administrator‍‍

Thank you.

[adnan_douglas]

hi dward,

I am Still facing the same problem, I dont know what i have to do, Sorry I cant found and clear way for the configuration.
Please Advice.

Adnan

[dward]

Adnan

Your error is

No valid authentication servers found for passthru

So you have to check the value of your

passthru.authentication.servers

property. What is it set to?

[adnan_douglas]

I did,

I setup all the values , But i still face the problem.
Sometimes http://servername/alfresco not working .

I need ur help, If you need any more info I will provide u.
Adnan ops:

[dward]

Please answer my question.

[adnan_douglas]

passthru.authentication.servers=testDC.test.local
I did it with diff format as below:
    *Test\TestDC
    *Test\\TestDC

[dward]

So your domain name is TEST and the domain controller is testdc.test.local ?

First, from the alfresco server, make sure you can ping the domain controller.

ping testdc.test.local

If you don't get a response back, then you probably have a dns or firewall issue to resolve.

Also check that the domain controller's firewall is open

Assuming that the ping works, the correct setting is

passthru.authentication.domain=#Leave blank
passthru.authentication.servers=TEST\\testdc.test.local,testdc.test.local

There are plent of examples of this on the Wiki and the forums.