cancel
Showing results for 
Search instead for 
Did you mean: 

Setup of ldap-ad in alfresco

enr
Champ on-the-rise
Champ on-the-rise
Dear all,

I have many problems on setting up a working ldap-ad configuration in alfresco. I already tried several solutions proposed in other posts but they didn't work at all.
Here my  configuration:

repository.properties

authentication.chain=ldap-ad1:ldap-ad

ldap-ad-authentication.properties

ldap.authentication.active=true
ldap.authentication.allowGuestLogin=false
ldap.authentication.userNameFormat=%s@example.org
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://xxx.xxx.xxx.xxx
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.principal=username@example.org
ldap.synchronization.java.naming.security.credentials=mypassword
ldap.synchronization.queryBatchSize=1000
ldap.synchronization.groupQuery=(objectclass\=group)




This is the error tomcat report on catalina.out:


13:58:32,848  INFO  [management.subsystems.ChildApplicationContextFactory] Startup of 'Authentication' subsystem, ID: [Authentication, managed, ldap-ad1] complete
13:58:32,902  INFO  [management.subsystems.ChildApplicationContextFactory] Startup of 'fileServers' subsystem, ID: [fileServers, default] complete
13:58:32,903  INFO  [management.subsystems.ChildApplicationContextFactory] Starting 'imap' subsystem, ID: [imap, default]
13:58:32,908  ERROR [org.alfresco.fileserver] [FTP] FTP Socket error : java.net.BindException: Permission denied
13:58:32,912  ERROR [org.alfresco.fileserver] java.net.BindException: Permission denied
13:58:32,912  ERROR [org.alfresco.fileserver]   at java.net.PlainSocketImpl.socketBind(Native Method)
13:58:32,912  ERROR [org.alfresco.fileserver]   at java.net.PlainSocketImpl.bind(PlainSocketImpl.java:365)
13:58:32,912  ERROR [org.alfresco.fileserver]   at java.net.ServerSocket.bind(ServerSocket.java:319)
13:58:32,912  ERROR [org.alfresco.fileserver]   at java.net.ServerSocket.<init>(ServerSocket.java:185)



Please, could anyone tell me what it's wrong? It seems to be a credential problem but I tried to connect with an LDAP browser with the same credentials and it works.

Thank you very much.
12 REPLIES 12

nvir
Champ in-the-making
Champ in-the-making
Hello,

I have some parameters which are not taken from the properties file (from alfresco-global.prop… , share/…/subsystem/…), I had to set them with jconsole through JMX. This is annoying…

Greetings

enr
Champ on-the-rise
Champ on-the-rise
Hello,

I already followed the guides in:
http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#Configuring_the_Authentication_Chai...
http://wiki.alfresco.com/wiki/Alfresco_Subsystems#Configuring_Subsystems

I read there was a problem on the override of Subsystems for the alfresco 3.2 release but it should be had been fixed:
http://forums.alfresco.com/en/viewtopic.php?f=8&t=20069
https://issues.alfresco.com/jira/browse/ETHREEOH-2478?page=com.atlassian.jira.plugin.system.issuetab...

I am quite sure to have a working configuration of my alfresco system because renaming the files in
/srv/www/tomcat55/base/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/ldap-ad
the files in
/srv/www/tomcat55/base/shared/classes/alfresco/extension/subsystems/Authentication/ldap-ad/ldap-ad1
begin to be read by the system.

Did anyone know what was the specific problem for the subsystem override in Alfresco's 3.2 community edition and if it was really fixed for Alfresco 3.2r2?

Thank you in advance,
Enrico

enr
Champ on-the-rise
Champ on-the-rise
Hi all,

I figured out how to make all working, now the override is working in the right way.
I deleted the directory alfresco and I restart the tomcat service and the override works fine. I think that probably I previously changed some files in a wrong way.

Thank you all for the support you gave me.
Bye,
Enrico