Multiple OU Ldap Authentication

[samudaya]

Hi friends,

I'm currently using Alfresco Community 3.4.d on Ubuntu 10.04 server. And run Open-LDAP (v3) on separate server. I only want to do LDAP authentication (no synchronizations).

(/opt/alfresco/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1/ldap-authentication.properties)
ldap.authentication.userNameFormat=uid=%s,ou=abc,dc=xyz,dc=com
When I configured as above only abc users can login to the system.

ldap.authentication.userNameFormat=uid=%s,dc=xyz,dc=com
When I configured as above nobody can login to the system.

There are Multiple OUs. So how should I configure to login all the ous?

My LDAP Structure as follows;

com(DC)
|
|—xyz(DC)
|—-|—–abc(OU)
|—-||—-|
|—-||—-|—–uid="user1"
|—-||—-|—–uid="user2"
|—-|       
|—-|—–def(OU)
|—-||—-|
|—-||—-|—–uid="user3"
|—-||—-|—–uid="user4"
|—-|       
|—-|—–ghi(OU)
|—-|—–|
|—-|—–|—–ghi-1(OU)
|—-|—–||—-|
|—-|—–||—-|—–uid="user5"
|—-|—–||—-|—–uid="user6"                   
|—-|—–|
|—-|—–|—–ghi-2(OU)
|—-|—–||—-|
|—-|—–||—-|—–uid="user7"
                       
               

Thank you very much…….

[loftux]

Try leaving the userNameFormat blank, it will do a search using the personQuery. Read more http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#Configuration_2

[sydwellz]

The way I got my multiple context working was to duplicate
this directory structure

ldap1/ldap-authentication.properties‍

as

ldap2/ldap-authentication.properties‍

And configure the second context in this file

The alfresco-global.properties setting should also be updated to include both files

authentication.chain=ldap1:ldap,ldap2:ldap‍

[samudaya]

Thanks friends.

Hi Loftux,

Can you please explain more about your solution

Thanks
Sam

[loftux]

Not more than the docs I linked to. If you read it(!), under the entry for ldap.authentication.userNameFormat it is all explained. Have you tried it and it didn't work?

[samudaya]

Thanks all for your contribution to solve the issue. Finally I solve the problem with chaining mechanism.

Thanks
Samudaya