Authentication with OpenLDAP

[tico]

Hi there,

I have Open-xchange (OX) installed on a Linux box (FC5), using an OpenLDAP server on the same host for authentication.

I have installed Alfresco, and would like to share accounts and groups from (OX) through OpenLDAP. Unfortunately, until now I failed to authenticate…

OX uses MD5, SHA, or plain text encryption mechanism… thus I believe I have to configure Alfresco to use etheir DIGEST-MD5 or simple mechanism…



I tried several combination for the userNameFormat, but nothing works… Any help is very welcome !!

Thansk,

Eric.
Here is an extract of an ldif file from my OpenLDAP server :

dn: dc=localdomain
objectClass: dcObject
objectClass: organization
dc: localdomain
o: XProject
structuralObjectClass: organization
entryUUID: ab0d60c2-a766-102a-9881-6f99fee6dc50
creatorsName: uid=mailadmin,dc=localdomain
modifiersName: uid=mailadmin,dc=localdomain
createTimestamp: 20060714092709Z
modifyTimestamp: 20060714092709Z
entryCSN: 20060714092709Z#000000#00#000000

dn: ou=OxObjects,dc=localdomain
objectClass: top
objectClass: organizationalUnit
ou: OxObjects
structuralObjectClass: organizationalUnit
entryUUID: ab0da546-a766-102a-9882-6f99fee6dc50
creatorsName: uid=mailadmin,dc=localdomain
modifiersName: uid=mailadmin,dc=localdomain
createTimestamp: 20060714092709Z
modifyTimestamp: 20060714092709Z
entryCSN: 20060714092709Z#000001#00#000000

dn: ou=Users,ou=OxObjects,dc=localdomain
objectClass: top
objectClass: organizationalUnit
ou: Users
structuralObjectClass: organizationalUnit
entryUUID: ab0dedee-a766-102a-9883-6f99fee6dc50
creatorsName: uid=mailadmin,dc=localdomain
modifiersName: uid=mailadmin,dc=localdomain
createTimestamp: 20060714092709Z
modifyTimestamp: 20060714092709Z
entryCSN: 20060714092709Z#000002#00#000000

…

dn: uid=e.grammatico,ou=Users,ou=OxObjects,dc=localdomain
objectClass: top
objectClass: shadowAccount
objectClass: posixAccount
objectClass: person
objectClass: inetOrgPerson
objectClass: OXUserObject
shadowMin: 0
shadowMax: 9999
shadowWarning: 7
shadowExpire: 0
uidNumber: 1002
gidNumber: 500
homeDirectory: /home/e.grammatico/
loginShell: /bin/bash

 …

mailEnabled: OK
lnetMailAccess: TRUE
OXGroupID: 500
structuralObjectClass: inetOrgPerson
entryUUID: 89912786-aab2-102a-811c-2b781a005e83
creatorsName: uid=mailadmin,dc=localdomain
createTimestamp: 20060718140748Z

…

userPassword:: ***
entryCSN: 20060914072836Z#000000#00#000000
modifiersName: uid=e.grammatico,ou=Users,ou=OxObjects,dc=localdomain
modifyTimestamp: 20060914072836Z
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

[rivetlogic]

Hi,

Assuming you're using simple authentication; if you can use ldapsearch to view the relevant objects in your ldap server, then the Distinguished Name binddn (-D option) you use  must be the same string formatted in the userNameFormat property.

Hope this helps,

–Aladdin