alfresco ldap integration issue-help?

[smkhawaja]

Hi guys,

I am using alfresco-community-war-3.2r2 with tomcat6 on Centos5.4. Alfresco is working fine as war file on tomcat but when I try to integrate it with our existing ldap server its not working.

I need to ask two things?

1. I cant find any alfresco.log fine. Should it be created by default ?

2. May be my configuration files are not in right place. When I was installing alfresco I had to move "alfresco-global.properties"
/opt/tomcat/shared/classes/alfresco/extension/alfresco-global.properties    to       /opt/tomcat/lib/alfresco-global.properties

When I moved into /opt/tomcat/lib it worked.

I read from few forums and again I created a soft link of /opt/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems in /opt/tomcat/shared/classes/alfresco/extension/subsystems

# ll /opt/tomcat/shared/classes/alfresco/extension/subsystems
lrwxrwxrwx 1 alfresco alfresco 64 Feb 22 11:05 /opt/tomcat/shared/classes/alfresco/extension/subsystems -> /opt/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems


Here is my ldap-authentication.properties configuration
# cat /opt/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap-authentication.properties

ldap.authentication.active=true

ldap.authentication.userNameFormat=%s                 
## cn=redinet, ou=producer, ou=oxford circus, dc=dare, dc=local

ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://192.168.8.10:389

ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.defaultAdministratorUserNames=SVC_ALF

## I created a new user SVC_ALF in ldap and trying to login with that user I have tried (SVC_ALF, and SVC_ALF@companydomain.com) but both dont work.

ldap.synchronization.active=false
ldap.synchronization.java.naming.security.principal=SVC_ALF                # I dont know whether this line needed or not
ldap.synchronization.java.naming.security.credentials=abc123               # I dont know whether this line needed or not

Note: this file "ldap-authentication.properties" had other lines for ldap.synchronization which I commented.

###############

Now tomcat comes up with alfresco but I can see these errors in catalina.out and I cant login to ldap server.

12:05:38,374  INFO  [management.subsystems.ChildApplicationContextFactory] Starting 'Authentication' subsystem, ID: [Authentication, managed, alfrescoNtlm1]
12:05:38,400  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
12:05:38,515  INFO  [management.subsystems.ChildApplicationContextFactory] Startup of 'Authentication' subsystem, ID: [Authentication, managed, alfrescoNtlm1] complete
12:05:43,653  ERROR [org.alfresco.fileserver] Failed to get local domain/workgroup name, using default of WORKGROUP
12:05:43,653  ERROR [org.alfresco.fileserver] (This may be due to firewall settings or incorrect <broadcast> setting)
12:05:43,697  INFO  [management.subsystems.ChildApplicationContextFactory] Startup of 'fileServers' subsystem, ID: [fileServers, default] complete
12:05:43,697  INFO  [management.subsystems.ChildApplicationContextFactory] Starting 'imap' subsystem, ID: [imap, default]
12:05:43,708  ERROR [org.alfresco.fileserver] [SMB] Server error : org.alfresco.jlan.server.config.InvalidConfigurationException: Error initializing TCP-IP SMB session handler, Permission denied
12:05:43,709  ERROR [org.alfresco.fileserver] org.alfresco.jlan.server.config.InvalidConfigurationException: Error initializing TCP-IP SMB session handler, Permission denied
12:05:43,709  ERROR [org.alfresco.fileserver]   at org.alfresco.jlan.smb.server.nio.NIOCifsConnectionsHandler.initializeHandler(NIOCifsConnectionsHandler.java:265)
12:05:43,710  ERROR [org.alfresco.fileserver]   at org.alfresco.jlan.smb.server.SMBServer.run(SMBServer.java:478)
12:05:43,710  ERROR [org.alfresco.fileserver]   at java.lang.Thread.run(Thread.java:619)
12:05:43,730  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
12:05:43,763  ERROR [org.alfresco.fileserver] [FTP] FTP Socket error : java.net.BindException: Permission denied
12:05:43,795  ERROR [org.alfresco.fileserver] java.net.BindException: Permission denied
12:05:43,795  ERROR [org.alfresco.fileserver]   at java.net.PlainSocketImpl.socketBind(Native Method)
12:05:43,795  ERROR [org.alfresco.fileserver]   at java.net.PlainSocketImpl.bind(PlainSocketImpl.java:365)
12:05:43,795  ERROR [org.alfresco.fileserver]   at java.net.ServerSocket.bind(ServerSocket.java:319)
12:05:43,795  ERROR [org.alfresco.fileserver]   at java.net.ServerSocket.<init>(ServerSocket.java:185)
12:05:43,795  ERROR [org.alfresco.fileserver]   at java.net.ServerSocket.<init>(ServerSocket.java:141)
12:05:43,795  ERROR [org.alfresco.fileserver]   at org.alfresco.jlan.ftp.FTPServer.run(FTPServer.java:561)
12:05:43,795  ERROR [org.alfresco.fileserver]   at java.lang.Thread.run(Thread.java:619)



I will really appreciate for any suggestions please.

Many thanks.

Soh

[smkhawaja]

Lets take in this way to troubleshoot where exactly the issue is ??

I have disabled the following in "/opt/alfresco/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1/ldap-authentication.properties" file
ldap.synchronization.active=false


For me I think when tomcat restart it loads the same file and get the Authentication complete messages.

11:47:13,020  INFO  [alfresco.config.JndiPropertiesFactoryBean] Loading properties file from file [/opt/alfresco/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1/ldap-authentication.properties]
11:47:24,653  INFO  [domain.schema.SchemaBootstrap] Schema managed by database dialect org.hibernate.dialect.MySQLInnoDBDialect.


11:47:31,892 Userystem INFO  [management.subsystems.ChildApplicationContextFactory] Starting 'Authentication' subsystem, ID: [Authentication, managed, ldap1]
11:47:31,915 Userystem INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
11:47:31,974 Userystem INFO  [management.subsystems.ChildApplicationContextFactory] Startup of 'Authentication' subsystem, ID: [Authentication, managed, ldap1] complete
11:47:31,974 Userystem INFO  [management.subsystems.ChildApplicationContextFactory] Starting 'Authentication' subsystem, ID: [Authentication, managed, alfrescoNtlm1]
11:47:31,995 Userystem INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
11:47:32,098 Userystem INFO  [management.subsystems.ChildApplicationContextFactory] Startup of 'Authentication' subsystem, ID: [Authentication, managed, alfrescoNtlm1] complete
11:47:32,105  INFO  [management.subsystems.ChildApplicationContextFactory] Startup of 'Synchronization' subsystem, ID: [Synchronization, default] complete
11:47:32,278  INFO  [service.descriptor.DescriptorService] Alfresco JVM - v1.6.0_18-b07; maximum heap size 1979.750MB
11:47:32,278  INFO  [service.descriptor.DescriptorService] Alfresco started (Community): Current version 3.2.0 (r2 2440) schema 3300 - Originally installed version 3.2.0 (r2 2440) schema 3300


When I stop tomcat I see the following messages in log

12:02:19,160  INFO  [management.subsystems.ChildApplicationContextFactory] Stopping 'Authentication' subsystem, ID: [Authentication, managed, ldap1]
12:02:19,160  INFO  [management.subsystems.ChildApplicationContextFactory] Stopped 'Authentication' subsystem, ID: [Authentication, managed, ldap1]

Is there a way  I can get debug log like when i enter user-name/password in alfresco home page what happens exactly? Can we configure a log like that? I have seen many comments on alfresco.log but in my system I can't find alfresco.log. Any help with this?

Any idea to solve this issue will highly be appreciated.

Soh

[smkhawaja]

After reading different question/answers on alfresco forums so far I have tried the following options but no luck 😞

#ldap.authentication.userNameFormat=uid\=%s
#ldap.authentication.userNameFormat=uid\=%s@companyname.local
#ldap.authentication.userNameFormat=uid\=%s,ou\=alfresco,dc\=companyname,dc\=local
ldap.authentication.userNameFormat=CN=tlr\%s,ou\=alfresco,dc\=companyname,dc\=local


Any help??

[smkhawaja]

I have fixed it with

ldap.authentication.userNameFormat=CN=%s,ou=alfresco,dc=dare,dc=local

Thanks to all