Active Directory AD configuration
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-30-2011 05:06 AM
Je voudrai s activer l’active Directory dans alfresco, mais je n’y parviens pas. J’ai essayé en suivant les indications de ce lien http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#AlfrescoNtlm mais a la suite de la conf, il n’y a aucun changement mis a part que l’interface share ne fonctionne plus sans générer d’erreur dans les logs.
Quel fichier avez-vous modifié pour activer l’import des users de l’AD ?
Merci
- Labels:
-
Archive
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-30-2011 05:35 AM
Avec quelques informations complémentaires, comme :
Version alfresco,
Sgbd
OS
et aussi les fichiers de configuration que vous avez modifiés pourrait nous permettre de vous répondre sans boule de cristal comme dirait Romain …
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-30-2011 08:06 AM
Alfresco 3.4d
mysql
le tout sur centOS 5.6
Pour le momet je viens de refaire une install donc je n ai pas encore modifé de fichier.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-30-2011 08:15 AM
si cela ne marche pas n'hésitez pas à envoyer votre fichier de configuration.
Avec des informations sur votre AD en terme d'architecture.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-30-2011 08:34 AM
L'AD fonctionne avec share et le CIFS ? Si oui cela ne nécessite qu'une seul configuration ?
Il faut modifier le fichier share-config-custom.xml.sample, mais y a t il des modification a apporter dans les fichiers du dossier
/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-30-2011 09:08 AM
Pour la déclaration de votre AD vous pouvez le faire directement dans :
alfresco-global.properties
Toutes les informations à remplir ce trouve sur cette page :
http://www.alfresco.com/help/34/community/all/concepts/auth-ldap-props.html
N'oubliez pas le chainage d'authentification sur cette page :
http://www.alfresco.com/help/34/community/all/tasks/auth-subsystem-chain-config.html
Et pour finir la totale pour ce qui concerne l'authentification et notamment les accès CIFS avec les différentes possibilités d'authentification :
http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#What_are_the_Authentication_Subsyst...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-30-2011 10:57 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-07-2011 11:40 AM
Ce n'est pas encore ca, mais ca avance !
Je bloque :
- 17:24:37,945 User

17:24:37,950 User

17:24:38,004 User

17:24:38,005 User

17:24:38,008 User

17:24:38,152 User

17:24:38,170 User

fr, modifytimestamp=modifyTimeStamp: 20110318165427.0Z, givenname=givenName: user1, sn=sn: name1}
17:24:38,171 User

eStamp: 20110221170727.0Z, givenname=givenName: user2}
17:24:38,171 User

eStamp: 20110221170750.0Z, givenname=givenName: user3}
17:24:38,171 User

17:24:38,171 User

Avez vous une idée ?
Merci
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-07-2011 05:50 PM
ce serait bien de nous mettre votre configuration avec le contenu du alfresco-global.properties…
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-17-2011 09:55 AM
Finalement j'ai bien acces aux differantes interfaces avec le compte admin.
Pour le fichier alfresco-global.properties,
j ai :
authentication.chain=alfrescoNtlm1:alfrescoNtlm,ldap1:ldap
ldap.authentication.active=true
le reste de la configuration est dans le fichier : ldap-authentication.properties
ldap.authentication.active=trueldap.authentication.allowGuestLogin=trueldap.authentication.userNameFormat=ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactoryldap.authentication.java.naming.provider.url=ldap://mon serveur:389ldap.authentication.java.naming.security.authentication=simpleldap.authentication.escapeCommasInBind=falseldap.authentication.escapeCommasInUid=falseldap.authentication.defaultAdministratorUserNames=ldap.synchronization.active=trueldap.synchronization.java.naming.security.authentication=simpleldap.synchronization.java.naming.security.principal=cn\=user,ou\=service,ou\=utilisateurs,ou\=toto,dc\=toto,dc\=toto,dc\=frldap.synchronization.java.naming.security.credentials=totoldap.synchronization.queryBatchSize=0ldap.synchronization.attributeBatchSize=0ldap.synchronization.groupQuery=(objectclass\=groupOfNames)ldap.synchronization.groupDifferentialQuery=(&(objectclass\=groupOfNames)(!(modifyTimestamp<\={0})))ldap.synchronization.personQuery=(objectclass\=user)ldap.synchronization.personDifferentialQuery=(&(objectcategory\=user)(objectclass\=user)(!(modifyTimestamp<\={0})))ldap.synchronization.groupSearchBase=ou\=toto,dc\=toto,dc\=toto,dc\=frldap.synchronization.userSearchBase=ou\=toto,dc\=toto,dc\=toto,dc\=frldap.synchronization.modifyTimestampAttributeName=modifyTimestampldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'ldap.synchronization.userIdAttributeName=uidldap.synchronization.userFirstNameAttributeName=givenNameldap.synchronization.userLastNameAttributeName=snldap.synchronization.userEmailAttributeName=mailldap.synchronization.userOrganizationalIdAttributeName=oldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProviderldap.synchronization.groupIdAttributeName=cnldap.synchronization.groupDisplayNameAttributeName=descriptionldap.synchronization.groupType=groupOfNamesldap.synchronization.personType=inetOrgPersonldap.synchronization.groupMemberAttributeName=memberldap.synchronization.enableProgressEstimation=true
Avec ces parametres catalina.out ma donne :
15:02:02,147 User:System INFO [security.sync.ChainingUserRegistrySynchronizer] Synchronizing users and groups with user registry 'ldap1'15:02:02,152 User:System INFO [security.sync.ChainingUserRegistrySynchronizer] Retrieving all groups from user registry 'ldap1'15:02:02,188 User:System INFO [security.sync.ChainingUserRegistrySynchronizer] ldap1 Group Analysis: Commencing batch of 0 entries15:02:02,190 User:System INFO [security.sync.ChainingUserRegistrySynchronizer] ldap1 Group Analysis: Completed batch of 0 entries15:02:02,192 User:System INFO [security.sync.ChainingUserRegistrySynchronizer] Retrieving all users from user registry 'ldap1'15:02:02,223 User:System INFO [security.sync.ChainingUserRegistrySynchronizer] ldap1 User Creation and Association: Commencing batch of 123 entries15:02:02,236 User:System WARN [sync.ldap.LDAPUserRegistry] User returned by user search does not have mandatory user id attribute {mail=mail: user1@toto.fr, modifytimestamp=modifyTimeStamp: 20110318165427.0Z, givenname=givenName: user1, sn=sn: name1}15:02:02,237 User:System WARN [sync.ldap.LDAPUserRegistry] User returned by user search does not have mandatory user id attribute {modifytimestamp=modifyTimeStamp: 20110221170727.0Z, givenname=givenName: user2}15:02:02,237 User:System WARN [sync.ldap.LDAPUserRegistry] User returned by user search does not have mandatory user id attribute {modifytimestamp=modifyTimeStamp: 20110221170750.0Z, givenname=givenName: user3}15:02:02,237 User:System WARN [sync.ldap.LDAPUserRegistry] User returned by user search does not have mandatory user id attribute {mail=mail: toto@toto.fr, modifytimestamp=modifyTimeStamp: 20110617125247.0Z, givenname=givenName: toto, sn=sn: toto}
Puis :
15:02:02,269 User:System INFO [security.sync.ChainingUserRegistrySynchronizer] ldap1 User Creation and Association: Completed batch of 123 entries15:02:02,271 User:System ERROR [security.sync.ChainingUserRegistrySynchronizer] Synchronization aborted due to errororg.alfresco.error.AlfrescoRuntimeException: 05170000 Failed to parse timestamp. at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.mapToNode(LDAPUserRegistry.java:981) at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.access$800(LDAPUserRegistry.java:77) at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry$PersonCollection$PersonIterator.fetchNext(LDAPUserRegistry.java:1466) at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry$PersonCollection$PersonIterator.<init>(LDAPUserRegistry.java:1362) at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry$PersonCollection.iterator(LDAPUserRegistry.java:1313) at org.alfresco.repo.batch.BatchProcessor$WorkProviderIterator.hasNext(BatchProcessor.java:589) at org.alfresco.repo.batch.BatchProcessor.process(BatchProcessor.java:378) at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.syncWithPlugin(ChainingUserRegistrySynchronizer.java:1275) at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.synchronize(ChainingUserRegistrySynchronizer.java:434) at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer$6.doWork(ChainingUserRegistrySynchronizer.java:1529) at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:508) at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onBootstrap(ChainingUserRegistrySynchronizer.java:1523) at org.springframework.extensions.surf.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:56) at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:97) at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:294) at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:858) at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:419) at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ApplicationContextState.start(ChildApplicationContextFactory.java:624) at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.start(AbstractPropertyBackedBean.java:458) at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.onApplicationEvent(AbstractPropertyBackedBean.java:386) at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:97) at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEvent(SafeApplicationEventMulticaster.java:78) at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:294) at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:858) at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:419) at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:261) at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:192) at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:47) at org.alfresco.web.app.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:63) at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3972) at org.apache.catalina.core.StandardContext.start(StandardContext.java:4467) at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:791) at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:771) at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:546) at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:637) at org.apache.catalina.startup.HostConfig.deployDescriptors(HostConfig.java:563) at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498) at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1277) at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:321) at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119) at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1053) at org.apache.catalina.core.StandardHost.start(StandardHost.java:785) at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045) at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443) at org.apache.catalina.core.StandardService.start(StandardService.java:519) at org.apache.catalina.core.StandardServer.start(StandardServer.java:710) at org.apache.catalina.startup.Catalina.start(Catalina.java:581) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289) at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)Caused by: java.text.ParseException: Unparseable date: "20110617104849.0Z" at java.text.DateFormat.parse(DateFormat.java:337) at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.mapToNode(LDAPUserRegistry.java:977) … 52 more15:02:02,286 User:System WARN [security.sync.ChainingUserRegistrySynchronizer] Failed initial synchronize with user registriesorg.alfresco.error.AlfrescoRuntimeException: 05170000 Failed to parse timestamp. at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.mapToNode(LDAPUserRegistry.java:981) at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.access$800(LDAPUserRegistry.java:77) at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry$PersonCollection$PersonIterator.fetchNext(LDAPUserRegistry.java:1466) at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry$PersonCollection$PersonIterator.<init>(LDAPUserRegistry.java:1362) at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry$PersonCollection.iterator(LDAPUserRegistry.java:1313) at org.alfresco.repo.batch.BatchProcessor$WorkProviderIterator.hasNext(BatchProcessor.java:589) at org.alfresco.repo.batch.BatchProcessor.process(BatchProcessor.java:378) at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.syncWithPlugin(ChainingUserRegistrySynchronizer.java:1275) at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.synchronize(ChainingUserRegistrySynchronizer.java:434) at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer$6.doWork(ChainingUserRegistrySynchronizer.java:1529) at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:508) at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onBootstrap(ChainingUserRegistrySynchronizer.java:1523) at org.springframework.extensions.surf.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:56) at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:97) at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:294) at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:858) at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:419) at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ApplicationContextState.start(ChildApplicationContextFactory.java:624) at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.start(AbstractPropertyBackedBean.java:458) at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.onApplicationEvent(AbstractPropertyBackedBean.java:386) at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:97) at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEvent(SafeApplicationEventMulticaster.java:78) at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:294) at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:858) at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:419) at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:261) at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:192) at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:47) at org.alfresco.web.app.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:63) at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3972) at org.apache.catalina.core.StandardContext.start(StandardContext.java:4467) at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:791) at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:771) at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:546) at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:637) at org.apache.catalina.startup.HostConfig.deployDescriptors(HostConfig.java:563) at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498) at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1277) at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:321) at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119) at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1053) at org.apache.catalina.core.StandardHost.start(StandardHost.java:785) at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045) at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443) at org.apache.catalina.core.StandardService.start(StandardService.java:519) at org.apache.catalina.core.StandardServer.start(StandardServer.java:710) at org.apache.catalina.startup.Catalina.start(Catalina.java:581) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289) at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)Caused by: java.text.ParseException: Unparseable date: "20110617104849.0Z" at java.text.DateFormat.parse(DateFormat.java:337) at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.mapToNode(LDAPUserRegistry.java:977) … 52 more15:02:02,295 INFO [management.subsystems.ChildApplicationContextFactory] Startup of 'Synchronization' subsystem, ID: [Synchronization, default] completeJe suis un peu perdu …Si vous avez une idée ce serait top!Merci
