cancel
Showing results for 
Search instead for 
Did you mean: 

LDAP configuration

fsaintma
Champ in-the-making
Champ in-the-making
I have two problems with Alfresco Smiley Sad
Can you help me ?

1?)  I configured successfully Alfresco (1.2.1 version on Linux) to use LDAP simple authentication.
Code :

    <property name="userNameFormat">
          <value>uid=%s,ou=people,dc=xxxx,dc=fr</value>
    </property>

    <entry key="java.naming.provider.url">
                        <value>ldap://xxxx.xxxx.fr:389/</value>
    </entry>


Now I want to authentify user with user id = ldap attribute xxxxLogin (not uid)
You can see my LDAP entry as following :

    dn: uid=fsain00C,ou=people,dc=xxxx,dc=fr
    mail: Frederic.xxxx@xxxx.fr
    objectClass: top
    objectClass: person
    objectClass: organizationalPerson
    objectClass: inetOrgPerson
    objectClass: xxxxPerson
    cn: xxxx Frederic
    sn: xxxx
    xxxxLogin: fsaintma
    givenName: Frederic
    uid: fsain00C


So I see JDNI documentation and I want to specify a LDAP URL with a filter :

    <entry key="java.naming.provider.url">
                        <value>ldap://xxxx.xxxx.fr:389/ou=people,dc=xxxx,dc=fr?xxxxLogin</value>
    </entry>


I have the following error in the Alfresco web :

    javax.faces.FacesException: Error calling action method of component with id loginForm:submit

    caused by:
    javax.faces.el.EvaluationException: Exception while invoking expression #{LoginBean.login}

    caused by:
    java.lang.NullPointerException


2?)  When I activate the ldap authentification, the local user database is unavailable. For example, I can't login with
account admin/admin. Can I have at the same time LDAP user database and local user database ?
1 REPLY 1

andy
Champ on-the-rise
Champ on-the-rise
Hi

I don't think you can specify the filter in this way.

Your magic id has to be in the DN or you can not use simple authentication.
OpenLDAP could be configured to use digest-md5 authentication using any attribute to find the user.

You can have more than one authentication system in version 1.3.

Regards

Andy