LDAP implementation on Alfresco 1.1.2 and Linux

[simon]

Hi,

We would like to enable LDAP support on our Alfresco Enterprise Network v1.1.2 system (Linux) but I would like to check some things first. I started from this document in the WIKI where I found a Java example on how to implement LDAP support.

Changing the configuration in the authentication-services-context.xml file and restarting the Alfresco server gave me the following error in the alfresco.log file:

749 ERROR [org.springframework.web.context.ContextLoader] Context initialization failed
org.springframework.beans.factory.BeanDefinitionStoreException: Error registering bean with name 'authenticationComponentImpl' defined in class path resource [alfresco/authentication-services-context.xml]: Bean class [org.alfresco.repo.security.authentication.LDAPAuthenticationComponentImpl] not found; nested exception is java.lang.ClassNotFoundException: org.alfresco.repo.security.authentication.LDAPAuthenticationComponentImpl
java.lang.ClassNotFoundException: org.alfresco.repo.security.authentication.LDAPAuthenticationComponentImpl …
‍‍‍‍

This means that I have to adjust the Java example with our settings (which would make sense), compile the Java class and add it in some JAR or WAR archive.

First of all I don’t really understand why this Java class isn’t precompiled by Alfresco with an extra XML file where I just have to change the parameters, why would I put this parameters (LDAP host, connection string,…) hard coded in the system? Or is this a like a preview of some functionallity Alfresco is working on?

Second question: where do I add this class? Somewhere in the “…/lib/enterprise.jar” or “…/lib/repository.jar” archives (that's where I found some links to the org.alfresco.repo.security.authentication package)?

[andy]

Hi

This is my fault for leaving the entry in the configuration for running the example as discussed on the Wiki. It has proved misleading.

The example is just that, it is not really how LDAP authentication would be done for real. For a start, it would send plain text passwords over the wire and there are many more configuration options. The example is about what you would have to do to write your own AuthenticationComponent using the most basic LDAP authentication as an example.

LDAP support will be in the enterprise 1.2 release.

You could add this file anywhere on the class path and configure which class to find in the xml configuration. There is a lot more required for full LDAP integration and a number of issues.

Regards

Andy

[simon]

Thanks Andy!

So… when we would like LDAP support at this point I'll have to implement it myself. I don't see a source folder (Alfresco Enterprise 1.1.2) so what steps do I take to develop custom classes?

Do I have to request the source code for the Enterprise version or can I download it (I assume the source code available on the Alfresco website is not the same as the source code of the Enterprise version and I don't like to break my system by using the wrong code before I even started). Is the Developer Guide the only documentation on how to write custom code?

Documentation, or the lack thereof, is definitely one of the weak points of Alfresco but I don't think I'm telling something new here…

Other option is to wait for the 1.2 release.

[steve]

Hi,

V1.2 should be out at the end of this month / early Feb at the latest, if you can wait that long.

Steve

[simon]

Indeed, it's better to wait for the next release in February but I meant it more general. What if I need to develop some custom classes?

[yschluchter]

Hi,

Will the LDAP support in the version 1.2 be only for the Enterprise version or also for the open source one?

Thanks!

[simon]

LDAP support is for the Enterprise version only:

1.3 Enterprise Version
All of the above plus
LDAP Support - This provides the ability to authenticate against LDAP services and access LDAP directory services for roles and group information. (1.2)

Look in the WIKI: http://www.alfresco.org/mediawiki/index.php/Roadmap