cancel
Showing results for 
Search instead for 
Did you mean: 

Active Direcory & Alfresco

adnan_douglas
Champ in-the-making
Champ in-the-making
Dears,

Can anyone help me to configure Alfresco authentication to use Active Directory? I need the steps for the configuration.
Please Advice.

Regards,
Adnan Douglas
35 REPLIES 35

adnan_douglas
Champ in-the-making
Champ in-the-making
authentication.chain=passthru1Smiley Tongueassthru,ldap1:ldap-ad
ldap.authentication.active=false
passthru.authentication.domain=
passthru.authentication.servers=test\\TestDdc.test.local,TestDdc.test.local
passthru.authentication.defaultAdministratorUserNames=administrator,admin
ldap.authentication.java.naming.provider.url=ldap://testdc.test.local:389
ldap.authentication.userNameFormat=%s@test.local
ldap.synchronization.java.naming.security.principal=alfresco@test.local
ldap.synchronization.java.naming.security.credentials=secret
ldap.synchronization.groupSearchBase=ou=users,ou=sandbox org,dc=test,dc=local
ldap.synchronization.userSearchBase=ou=users,ou=sandbox org,dc=test,dc=local
cifs.domain=test.local

This is my configuration.

dward
Champ on-the-rise
Champ on-the-rise
So what?

Please try

passthru.authentication.servers=TEST\\testdc.test.local,testdc.test.local
cifs.domain=TEST

And can you ping testdc.test.local OK?

adnan_douglas
Champ in-the-making
Champ in-the-making
Yes I can Ping the server, we are in the same network.
I found this error
15:32:13,606 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] Synchronizing users and groups with user registry 'ldap1'
15:32:13,622 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] Retrieving all users from user registry 'AUTH.EXT.ldap1'
15:32:13,622 ERROR [org.alfresco.web.scripts.AbstractRuntime] Exception from executeScript - redirecting to status template error: 08170032 Login failed
org.alfresco.web.scripts.WebScriptException: 08170032 Login failed
   at org.alfresco.repo.web.scripts.bean.AbstractLoginBean.login(AbstractLoginBean.java:81)
   at org.alfresco.repo.web.scripts.bean.LoginPost.executeImpl(LoginPost.java:79)
   at org.alfresco.web.scripts.DeclarativeWebScript.executeImpl(DeclarativeWebScript.java:223)
   at org.alfresco.web.scripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:70)
   at org.alfresco.repo.web.scripts.RepositoryContainer$2.execute(RepositoryContainer.java:357)
   at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:326)
   at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:407)
   at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:424)
   at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:253)
   at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:262)
   at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:139)
   at org.alfresco.web.scripts.servlet.WebScriptServlet.service(WebScriptServlet.java:122)
   at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
   at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
   at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
   at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
   at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
   at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
   at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)
   at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
   at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
   at java.lang.Thread.run(Thread.java:619)
Smiley Happy

dward
Champ on-the-rise
Champ on-the-rise

pticek
Champ in-the-making
Champ in-the-making
Hi,

I have followed all the instructions given in this thread, but I can't get things work. Alfesco is v3.3 on Ubuntu 9.10.

I am getting this exception:

net.sf.acegisecurity.AuthenticationServiceException: General error; nested exception is org.alfresco.service.namespace.InvalidQNameException: A QName must consist of a local name
caused by:
org.alfresco.service.namespace.InvalidQNameException: A QName must consist of a local name

Copy from alfresco.global.properties:


authentication.chain=passthru1:passthru,ldap1:ldap

ldap.authentication.active=false
passthru.authentication.domain=
passthru.authentication.servers=SAGENA\\mrcina.sagena.local
passthru.authentication.defaultAdministratorUserNames=Administrator
ldap.authentication.java.naming.provider.url=ldap://mrcina.sagena.local:389  #192.168.200.100
ldap.authentication.userNameFormat=%s@sagena.local
ldap.synchronization.java.naming.security.principal=ldap@sagena.local
ldap.synchronization.java.naming.security.credentials=ldap123
ldap.synchronization.groupSearchBase=cn=Users, dc=sagena, dc=local
ldap.synchronization.userSearchBase=cn=Users, dc=sagena, dc=local
cifs.domain=SAGENA

Any suggestion?  :?

thank you.

pticek
Champ in-the-making
Champ in-the-making
update:

hm, everything is OK if I use Firefox, I can login and map disc, but in Google Chrome, sometimes I get this exception and sometimes it ask me for the credentials but I can't login.