How to configure AD authentication users in Alfresco 5.0.a?

[psouza]

I'm New to Alfresco and follow various scripts to configure authentication and sicnronização of users and groups from AD, but none worked.
Can someone send me a step-by-step how to configure AD authentication users in Alfresco 5.0.a?


Thank you!

[ja79]

To authentication by ldap ad You must add couple lines in alfresco-global.properties


authentication.chain=alfinst:alfrescoNtlm,ldap1:ldap-ad
#You can login by bulidin alfresco authentication system and ldap

ntlm.authentication.sso.enabled=false

ldap.authentication.allowGuestLogin=false
#do not allow guest logon

ldap.authentication.userNameFormat=%s@your_domain.com
#your login is the same like user name in windows

ldap.authentication.java.naming.provider.url=ldap://your_ldap_server.your_domain.com:389
#adres of ldap server
ldap.authentication.defaultAdministratorUserNames=admin,administrator,bob
#users with admin rights
ldap.synchronization.java.naming.security.principal=ldap_admin@yourdomain.com
#account ldap administrator on your server
ldap.synchronization.java.naming.security.credentials=Au34ao11
#password to ldap_admin@yourdomain.com
ldap.synchronization.groupSearchBase=cn=Security_Groups,ou=Alfresco,dc=your_domain,dc=com
#groups for alfresco, cn=Security_Groups,ou=Alfresco,dc=your_domain,dc=com must exist in Your ldap
ldap.synchronization.userSearchBase=cn=User_Accounts,ou=Alfresco,dc=your_domain,dc=com
#users for alfresco, cn=User_Accounts,ou=Alfresco,dc=your_domain,dc=com must exist in Your ldap

=================
thats all
authentication  work for me
synchronisation not, if someone know what to do, please let me know.
sorry for my english
ja79

[psouza]

Thanks for the help, I managed to authenticate via AD, now missing sync all users, if someone can help me, I'd be grateful.

Note: My English is google translator


Thank you!

[lauvanya]

Hi, Did you connect the AD with Alfresco and users were able to login? I am new to Alfresco, Could you guide me with the steps you performed and file you shared?

[mtrento]

be carefull of the ldap syntax.
the following string will not work :cn=User_Accounts,ou=Alfresco,dc=your_domain,dc=com
you must add backslash before the =  example : cn\=User_Accounts,ou\=Alfresco,dc\=your_domain,dc\=com

To be sure to use the right ldap terms, go to your active directory users and computers snappin and click properties on the node you want to target your ldap search. now go on the attribute editor and look at attribue distinguishedName.
if it's an organisation unit the first term start with OU\= but not CN\=

Good luck.

[kimberlydeborah]

For authentication purpose, alfresco can be configured with AD, LDAP, Kerberos, alfrescoNtlm or other external servers. You can configure alfresco to authenticate from a number of systems - this is known as Authentication Chain.

[eswbitto]

Syncing all users will determine what you have for your user and group. Example:

# The group search base restricts the LDAP group query to a sub section of tree on the LDAP server.
#ldap.synchronization.groupSearchBase=ou\=Security Groups,ou\=Alfresco,dc=domain
ldap.synchronization.groupSearchBase=OU\=PEOPLE,DC\=domain name,DC\=domain name

# The user search base restricts the LDAP user query to a sub section of tree on the LDAP server.
#ldap.synchronization.userSearchBase=ou\=User Accounts,ou=\Alfresco,dc=domain

[kmanickam]

Hi,

Any one help me how to configure zimbra (8.0.5) ldap for alfresco 5.0.c my os cent OS

Pls guide me step-by-step

[sharifu]

I have problem with my ldap synchro. on 5.0.b the groups are all there however all the users within the groups are missing. never had this issue with previous version of alfresco

[gnyce]

maybe you need to specify what ldap property is used to determine what a "user" object is within your LDAP backend?  for example, when I sync'd with Zimbra, I had to identify what a users and groups were with these two lines:
  ldap.synchronization.groupQuery=(objectclass\=zimbraDistributionList)
  ldap.synchronization.personQuery=(objectclass\=zimbraAccount)