How to implement Azure AD Integration with alfresco community edition 5.2(We are installed alfresco in cloud).

[leela]

Hello Everyone,

       Kindly help to solve this issue, how to integrate Azure AD integration with alfresco community edition 5.2, 

For your reference below i have attached with files(ldap-ap-properties file), if done any mistakes kindly rectify this issue immediately.

ldap.authentication.allowGuestLogin=false
### LDAP-AD Auth ###

ldap.authentication.active=true
ldap.authentication.userNameFormat=%s@xxx.onmicrosoft.com
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://xxxx.onmicrosoft.com:389
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.defaultAdministratorUserNames=administrator, admin

### LDAP-AD Synch ###

ldap.synchronization.active=true
ldap.synchronization.java.naming.security.principal=xxxx@xxx.onmicrosoft.com
ldap.synchronization.java.naming.security.credentials=xxxxx
ldap.synchronization.queryBatchSize=5000
ldap.synchronization.attributeBatchSize=5000
synchronization.synchronizeChangesOnly=false
synchronization.allowDeletions=true
synchronization.syncWhenMissingPeopleLogIn=true
synchronization.import.cron=0 0/15 * * * ?
ldap.synchronization.groupQuery=(objectclass\=group)

ldap.synchronization.personQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))

ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(modifyTimestamp<\={0})))

ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp<\={0})))

ldap.synchronization.groupSearchBase=ou\=Groups,ou\=xxx,dc=xxx,dc=onmicrosoft,dc=com

ldap.synchronization.userSearchBase=ou\=Users,ou\=xxx,dc=xxx,dc=onmicrosoft,dc=com

ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp

ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'

ldap.synchronization.userIdAttributeName=sAMAccountName

ldap.synchronization.userFirstNameAttributeName=givenName

ldap.synchronization.userLastNameAttributeName=sn

ldap.synchronization.userEmailAttributeName=mail

ldap.synchronization.userOrganizationalIdAttributeName=company

ldap.synchronization.groupIdAttributeName=cn

ldap.synchronization.groupDisplayNameAttributeName=displayName

ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider

ldap.synchronization.groupType=group

ldap.synchronization.personType=user

ldap.synchronization.groupMemberAttributeName=member

in global-properties files

######Active Directory#######

### Authentication ###
authentication.chain=alfrescoNtlm1:alfrescoNtlm, ldap1:ldap-ad,ldap2:ldap-ad
ntlm.authentication.sso.enabled=false

authentication.protection.enabled=false

[leela]

i have installed using Ubantu 18.0, but my question is how to implement Azure AD in cloud, Is any other ways are to implement this one, Kindly do needful

[usr]

This may be a really stupid question, but are you sure, you are able to connect to the AD server from this linux instance?

Did you try

telnet xxx.onmicrosoft.com 389

What is the result?

[leela]

yes...sir, but i didn't get ans....

[usr]

This means, the problem has nothing to do with Alfresco. If your Linux is not able to contact the AD-server, then the setup is wrong. 

To use the Azure AD with Alfresco you will need an App like Alfresco (Link) as far as I know. 

That's why we are still using On-Premises AD. Then we don't need such Apps.

Someone from Microsoft agreed it would be difficult to integrate Alfresco into Azure AD without commercial support (like using this App and commercial Alfresco license).

[heiko_robert]

unfortunately the interesting part in your error stack is missing: Unable to connect to LDAP Serve$

you should try to connect the AD from servers command line independant from alfresco

trying:

telnet xxx.onmicrosoft.com 389

do you get a blinking prompt or just nothing/timeout? I guess MS does not give you access on port 389 from this machine.

try to query AD using ldapsearch from the command line.

[leela]

Thanks for your response,

          I don't know how to use command line, can you share link to implement to connect the AD from servers command line.

[leela]

Here is my result.

 root@APP-DB:/# telnet xxx.onmicrosoft.com 389
telnet: could not resolve xxx.onmicrosoft.com/389: No address associated with hostname
root@APP-DB:/#

[heiko_robert]

Hi Leela,

now you have everything you need to solve the problem for yourself

[heiko_robert]

sudo apt update && sudo apt -y install ldap-utils manpages
man ldapsearch‍‍