Integrating existing Alfresco with LDAP

[ashwini]

Currently we are using Alfresco 3.4 with inbuilt Authentication functionality(users and groups created using alfresco's admin account) but now we want to integrate existing alfresco environment with LDAP(Microsoft Active Directory).

1.Can I integrated existing Alfresco environment with LDAP.
2.Is there any impact on existing user's and groups in Alfresco.


Thank You in advance!!

[mrogers]

1. yes
2. no

I suggest you read some documentation starting with the installation guide.

[bensewell]

I got this working quickly using these settings

add these to your global config file and then restart your alfresco services and then it should work with ad.  Your Alfresco admin account can set the correct permissions to the AD accounts once the users have logged in.

### Authentication chain settings###
authentication.chain=ldap1:ldap,alfrescoNtlm1:alfrescoNtlm
ldap.authentication.active=true
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.userNameFormat=%s@YOUR DOMAIN NAME e.g. %s@adomain.net
ldap.authentication.allowGuestLogin=false
ldap.authentication.java.naming.provider.url=YOUR LDAP SERVER e.g. ldap://ad1.a.net:389
###ldap.authentication.defaultAdministratorUserNames=YOUR AD USER ACCOUNT TO LOOKUP AD e.g.  alfresco
ldap.synchronization.active=false

[ashwini]

1. yes
2. no

I suggest you read some documentation starting with the installation guide.

Thank You mrogers !!
If there is any specific documentation then can you please suggest it by providing link .. ?

[ashwini]

Thank you bensewell!!
It will definitely help me while configuring LDAP ..

[bensewell]

### Authentication chain settings###
authentication.chain=ldap1:ldap,alfrescoNtlm1:alfrescoNtlm
ldap.authentication.active=true
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.userNameFormat=%s@YOUR DOMAIN NAME e.g. %s@adomain.net
ldap.authentication.allowGuestLogin=false
ldap.authentication.java.naming.provider.url=YOUR LDAP SERVER e.g. ldap://ad1.a.net:389
###ldap.authentication.defaultAdministratorUserNames=YOUR AD USER ACCOUNT TO LOOKUP AD e.g. alfresco
ldap.synchronization.active=false

Just make sure it is exactly as above.

the tricky thing I learnt here was the ldap.authentication.userNameFormat=%s@YOUR DOMAIN NAME e.g. %s@adomain.net

You need to leave the %s@ in or it doesnt like it so for example if your domain name was alfresco.net it would be ldap.authentication.userNameFormat=%s@alfresco.net