cancel
Showing results for 
Search instead for 
Did you mean: 

getting override chaining files working in 3.2

jriker1
Champ in-the-making
Champ in-the-making
As some of you may have seen from my other posts, I basically have 3.2 working with the latest nightly build using Alfresco authentication.  I also have successfully got LDAP authentication working, but not the right way.  This is the last part of the puzzle and I can't figure it out.  Read the latest WIKI and believe I've followed it but no joy.  Basically if I edit directly the file in:

/srv/tomcat6/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/ldap/ldap-authentication.properties

it works.  If I do what I think I am supposed to for setting an authentication.chain value in the global properties file in the shared/classes folder, of ldap1:ldap and set the custom values in the below:

/srv/tomcat6/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1

in a file called ldap-authentication.properties or mychanges.properties it is not read in.  I know this because the logs show errors connecting to openldap.domain.com:389 which is in the WEB-INF ldap-authentication.properties file, not mine.  I even tried creating a default folder for ldap under the shared area per the WIKI but no joy.  If I could get this last piece working correctly it would be the final piece of the puzzle.

Thanks.

JR
16 REPLIES 16

jriker1
Champ in-the-making
Champ in-the-making
Figured this one sat long enough unanswered.  Should I assume no answer means the new subsystem is not working right when you want to extend it and that I'm doing everything right it just don't work?

JR

carbs
Champ in-the-making
Champ in-the-making
I'm having the same problem, it just never seems to work.

I followed the guide and the wiki (which is the same), I don't know if I'm missing something (I probably am) but I can't figure it out.

mikef
Champ in-the-making
Champ in-the-making
It looks like you've been trying this with a nightly/svn 3.2 build. Firstly, I'd recommend you move to the official 3.2 Community release http://wiki.alfresco.com/wiki/Community_Edition_file_list

The authentication and chaining has be re-factored into subsystems for 3.2. I suggest you take a look at http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems which provides details on how to configure using the new alfresco-global.properties file introduced with 3.2. This allows you to configure and chain your authentication subsystems using a single property file.

carbs
Champ in-the-making
Champ in-the-making
I'm pretty sure I have the release version of 3.2, I get the following at start-up.


Alfresco started (Community): Current version 3.2.0 (2039) schema 2019 - Installed version 3.2.0 (2039) schema 2019

I have done a clean install, but it doesn't matter as by adding all the custom options I want into alfresco-global.properties and that seems to work fine.

Now I just have to sort out the LDAP sync, which was working in 3.0 but now doesn't with the same options (moved into alfresco-global.properties), but that is for another post  Smiley Very Happy

carbs
Champ in-the-making
Champ in-the-making
Actually this is now a problem for me I need to customise the fileServer subsystem and it just doesn't work.

I used the linux tomcat bundle of 3.2 with a fresh install from scratch, any customisations I make, for example in tomcat/shared/classes/alfresco/extension/subsystems/fileServers/default/default/custom-file-servers-context.xml (as per the example in the manual/wiki) just get ignored and the defaults from the war file are used.  I just want to add some extra cifs "shares" to particular spaces.

Is the bug refered to above in the version I am using (see above also) or am I just doing it wrong?

Thanks,
Mark

gronfelt
Champ in-the-making
Champ in-the-making
I have the same issue. The alfresco.log file tells me this:

18:53:18,757 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'Authentication' subsystem, ID: [managed, ldap1]
18:53:18,763 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
18:53:18,764 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'Authentication' subsystem, ID: [managed, ldap1] complete
18:53:18,764 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'Authentication' subsystem, ID: [managed, ldap2]
18:53:18,769 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
18:53:18,770 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'Authentication' subsystem, ID: [managed, ldap2] complete

But no authentication seems to work.

lueders
Champ in-the-making
Champ in-the-making
Hi all,

indeed the override doesn't seem to work…

if you rename the /tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/ldap/ldap-authentication.properties
and customize your own /tomcat/shared/classes/alfresco/subsystems/Authentication/ldap/ldap-authentication.properties
ldap auth works great.

doing the same with the properties files in /data/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/passthru
will get CIFS working.

Since I got a Zimbra openldap server, my next goal is to get sync working again. In Alfresco Labs 3.1, I added all extra Zimbra attributes (postal address, company, etc) to the xml & properties files and got them sync'd too!

hmmm… I wonder whether there is an alfresco-shared.properties file for sync control …

regards
Ralf

gronfelt
Champ in-the-making
Champ in-the-making
The suggestion above will unfortunately not help me, since I need to chain several ldap configurations authenticating against different domains.

Apparantly either this functionality or the documentation is broken. I've filed an issue report in the JIRA and I hope that someone from Alfresco will be able to confirm whether this is a bug or not.

lueders
Champ in-the-making
Champ in-the-making
ok.. you want a chain like ldap1:ldap,ldap2:ldap,ldap3:ldap 

I didn't try that.
Do you have a hint for me how to enable auth/sync debugging in log4j.properties?

Thanks
Ralf