11-14-2016 04:03 PM
Hello Friends,
I need to configure Alfresco with my Active Directory and with my email accounts but I cannot find the way to open Admin Console.
In the documentation says that I have to enter in the next url:
127.0.0.1:8080/alfresco/service/enterprise/admin
But, it doesn´t work.
¿Admin Console only works on Entreprise Edition? ¿There is some way to configure Active Directory and email settings in the Community Edition?
Thanks in advance.
Regards,
Geovanny C
Pd: I'm using Alfreesco Comunity version 5.1.0 (r127059-b7)
11-15-2016 02:53 AM
I would say that the usage depends on the skill level. If you are configuring sync the first time, the admin console allows you to quickly test settings and configurations. My approach would be to test the configuration this way and transfer the changed properties in the background to your alfresco-global.properties file...
Nevertheless, the community version has no functionality in the admin console to do that, so you have to change it in the alfresco-global.properties file...
Thanks
Jens
11-14-2016 04:19 PM
Hi
The link you use is only for entreprise yes. By the way configuring sync or other subsystem using the admin console is not a good idea because the settings are saved in the database overriding the alfresco-global.properties files.
You will need to configure the sync and authentication using the global properties files.
Read this http://docs.alfresco.com/community/concepts/auth-intro.html
This will help you to configure authentication and synchronization.
Yann
11-15-2016 02:53 AM
I would say that the usage depends on the skill level. If you are configuring sync the first time, the admin console allows you to quickly test settings and configurations. My approach would be to test the configuration this way and transfer the changed properties in the background to your alfresco-global.properties file...
Nevertheless, the community version has no functionality in the admin console to do that, so you have to change it in the alfresco-global.properties file...
Thanks
Jens
11-15-2016 12:07 PM
Thanks Jens,
That is what I have done!
Regards!
11-17-2016 04:25 PM
Hi Geovanny,
I use a configuration that looks similar to this:
It assumes of course that you have an Alfresco group or two (AlfrescoAdmins and AlfrescoUsers) added in Active Directory and then in those groups you put all your users that you want to access Alfresco.
### AD authentication only ###
authentication.chain=alfrescoNtlm1:alfrescoNtlm,ldap-ad1:ldap-ad
ldap.authentication.active=true
ldap.authentication.allowGuestLogin=true
ldap.authentication.userNameFormat=%s@example.foo # my example domain name in AD
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://example.foo:389 # resolvable hostname for my AD server ... an ip address works as well
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.defaultAdministratorUserNames=Administrator
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.principal=administrator@example.foo
ldap.synchronization.java.naming.security.credentials=Alfr3sc0
ldap.synchronization.queryBatchSize=1000
ldap.synchronization.attributeBatchSize=1000
synchronization.synchronizeChangesOnly=false
synchronization.allowDeletions=true
synchronization.syncWhenMissingPeopleLogIn=true
ldap.synchronization.groupQuery=objectclass\=group
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(modifyTimestamp<\={0})))
ldap.synchronization.personQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(|(memberOf=cn\=AlfrescoAdmins,ou=alfresco,dc=example,dc=foo)(memberOf=cn\=AlfrescoUsers,ou=alfresco,dc=example,dc=foo)))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(|(memberOf=cn\=AlfrescoAdmins,ou=alfresco,dc=example,dc=foo)(memberOf=cn\=AlfrescoUsers,ou=alfresco,dc=example,dc=foo))(!(modifyTimestamp<\={0})))
ldap.synchronization.groupSearchBase=ou\=alfresco,dc\=example,dc\=foo
ldap.synchronization.userSearchBase=dc\=example,dc\=foo
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'
ldap.synchronization.userIdAttributeName=sAMAccountName
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=company
ldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProvider
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupDisplayNameAttributeName=displayName
ldap.synchronization.groupType=group
ldap.synchronization.personType=user
ldap.synchronization.groupMemberAttributeName=member
ldap.synchronization.enableProgressEstimation=true
11-17-2016 04:40 PM
Thanks a lot for your help!.
I have like 20 groups of users in my Active Directory with a lot of users in each one and I nee to sync all them with my Alfresco.
Regards!
11-17-2016 04:53 PM
Instead of over-thinking it, I would advise you to create two groups (as I have in my example though you can name them whatever you like). Add the users that you want to be in Alfresco to those groups and then do a sync. That would be a good best practice.
Tags
Find what you came for
We want to make your experience in Hyland Connect as valuable as possible, so we put together some helpful links.