Configuring LDAP Microsoft AD with Alfresco

[merryo]

Hi, Folks

I have installed Alfresco community 4.0 edition with all the default settings which are working f9. Now I want to configure microsoft AD with alfresco so that my users can be authenticated and syncronization shall done from microsoft AD. Can anyone help me how to do it. As i had gone through the documentation and did try it but no success. Highly appreciate if detailed configuration guide is shared with me.

Thanks
merryo

[scouil]

Hello,

Can you detail what documentation you used so that we can fix it if something's wrong with it?
Can you tell us what file you've modified? With what changes?
And maybe posting your log file would help.

I'd suggest you to look on the forum for similar issues, it's usually richer in experiences and details than the wiki.
You might wanna start with this one https://forums.alfresco.com/en/viewtopic.php?f=46&t=14737.
Or directly look at the last post https://forums.alfresco.com/en/viewtopic.php?f=46&t=14737&start=15#p116244 (sorry for the egocentric link to my own post). Forget about the rant in the first line of the post and the 3.4 version comment (it's the same system in the 4.0) and start at line4.

Good luck

[ashex]

You'll need to give us more information about the problems you're having for us to help you

Take a look at these resources:

http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#LDAP

http://docs.alfresco.com/4.0/topic/com.alfresco.enterprise.doc/concepts/auth-ldap-intro.html

[unknown-user]

I feel your pain, i spent yesterday afternoon and this morning figuring it out.

append the following to your global properties file (change your specific values, like server name, username etc)

### Authentication ###
authentication.chain=passthru1:passthru,ldap-ad1:ldap-ad
‍‍‍‍

### Passthru Config ###
passthru.authentication.useLocalServer=false
passthru.authentication.domain=
passthru.authentication.servers=DOMAIN\\SERVER1.DOMAIN.COM,DOMAIN\\SERVER2.DOMAIN.COM,SERVER1.DOMAIN.COM
passthru.authentication.guestAccess=false
passthru.authentication.defaultAdministratorUserNames=Administrator,admin
#Timeout value when opening a session to an authentication server, in milliseconds
passthru.authentication.connectTimeout=5000
#Offline server check interval in seconds
passthru.authentication.offlineCheckInterval=300
passthru.authentication.protocolOrder=NetBIOS,TCPIP
passthru.authentication.authenticateCIFS=true
passthru.authentication.authenticateFTP=true
ntlm.uthentication.sso.enabled=false
ntlm.authentication.mapUnknownUserToGuest=false

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

### LDAP-AD Auth ###
ldap.authentication.active=false
ldap.authentication.allowGuestLogin=false
ldap.authentication.userNameFormat=%s@domain
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://server1.domain.com:389
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.defaultAdministratorUserNames=Administrator,admin
‍‍‍‍‍‍‍‍‍‍‍‍

### LDAP-AD Synch ###
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.authentication=simple
ldap.synchronization.java.naming.security.principal=administrator@domain.com
ldap.synchronization.java.naming.security.credentials=your-admin-password
ldap.synchronization.queryBatchSize=1000
ldap.synchronization.attributeBatchSize=1000
ldap.synchronization.groupQuery=(objectclass\=group)
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(modifyTimestamp<\={0})))
ldap.synchronization.personQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp<\={0})))
ldap.synchronization.groupSearchBase=ou\=MyGroups,ou\=MyCompany,dc=domain,dc=com
ldap.synchronization.userSearchBase=ou\=MyUsers,ou\=MyCompany,dc=domain,dc=com
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'
ldap.synchronization.userIdAttributeName=sAMAccountName
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=company
ldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProvider
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupDisplayNameAttributeName=displayName
ldap.synchronization.groupType=group
ldap.synchronization.personType=user
ldap.synchronization.groupMemberAttributeName=member
ldap.synchronization.enableProgressEstimation=true

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

With the above i was able to use passthru authentication against AD and to sync the user information from AD. My problem was understanding the "passthru.authentication.servers" directive as explained in the docs, once i got it, i was able to set it up correctly.

[arunkumar_p]

Hi guys,i am new to Alfresco,i have installed Alfresco community edition 5.0 i am unable to sync with Active Directory.So any one help me to bring the output soon.
Is there a possible to sync with Active directory in Alfresco community edition 5.0?

Regards,
Arunkumar.p

[vignesh_sabapat]

Please provide your configuration to look for issues. Also you can enable debugging and look into log files for the reason for failure.

[olajohn]

Hi Vignesh. Can you please recommend a working signature addon for Alfresco 4.2f. I've spent several hour looking and test, but I could not get any to work. I will also appreciate a link to detail instruction to get such recommended solution working on Alfresco 4.2f (community)

Thanks.

[102020]

https://forums.alfresco.com/forum/installation-upgrades-configuration-integration/installation-upgra...
Just jump to the AD and SSO part. yw