cancel
Showing results for 
Search instead for 
Did you mean: 

OpenLDAP authentication

uesnet
Champ in-the-making
Champ in-the-making
Hi everyone, I have looked through the posts and googled this problem without any luck. This is my first installation of Alfresco, am using the  Stable 3labs version on linux and trying to use Openldap for user authentication. I edited the ldap-authentication.properties.xml and ldap-authentication-context.xml files, and enabled loging for LDAP within tomcat. I keep getting this error in the logs "LDAP server does not fall back to anonymous bind for a simple dn and password at ldap://IPSmiley Tongueort.

I also enabled logging on my LDAP server, and check looking for a user using ldapsearch which worked fine and compared that with the messages alfersco is generating in the same log:
LDAPsearch log on  OpenLDAP
conn=28 op=0 BIND dn="" method=128
Mar 19 13:40:59 campus slapd[10047]: conn=28 op=0 RESULT tag=97 err=0 text=
Mar 19 13:40:59 campus slapd[10047]: conn=28 op=1 SRCH base="dc=one,dc=test,dc=com" scope=2 deref=0 filter="(uid=eric)"
Mar 19 13:40:59 campus slapd[10047]: conn=28 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=

Alfresco log on OpenLDAP
conn=22 op=0 BIND dn="" method=128
Mar 19 08:10:44 campus slapd[10047]: conn=22 op=0 RESULT tag=97 err=49 text=
Mar 19 08:10:44 campus slapd[10047]: conn=22 fd=13 closed (connection lost)
Mar 19 08:10:45 campus slapd[10047]: conn=19 op=1 UNBIND

The only difference I can see is that ldapsearch uses the search base, I don't see where I can specify a searchbase for LDAP searches on Alfresco config files.
Any help would be greatly appreciated.
Thanks in advance,
Eric.
10 REPLIES 10

ssandruchi
Champ in-the-making
Champ in-the-making
Hello,

   I had same problem in Alfresco 3.0 and I solved this adding following parent bean:

    <bean id="authenticationComponent" class="org.alfresco.repo.security.authentication.ldap.LDAPAuthenticationComponentImpl" parent="authenticationComponentBase">

  See following wiki:
          http://wiki.alfresco.com/wiki/Enterprise_Security_and_Authentication_Configuration#LDAP

   Regards,
      Sandra