Hyland Community
Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Ldap problem

Go to answer
willi78400
Confirmed Champ
Confirmed Champ

‎12-14-2017 06:01 AM

Bonjour tout le monde !

Hello everyone ! (english version of my problem below)

 

Alors je pose une question ici car j'ai un souci avec la mise en place de l'AD sur alfresco community 5.2. Ayant cherché la doc et des réponses sur les forums, je viens ici après ne pas avoir réussi à le mettre en place.

Donc dans les forums j'ai vu que pour mettre en place l'ad il suffisait de rajouter ces lignes dans alfresco-global.properties :

 

authentication.chain=alfinst:alfrescoNtlm,ldap1:ldap-ad

 

ntlm.authentication.sso.enabled=false

 

ldap.authentication.allowGuestLogin=false
ldap.authentication.userNameFormat=%s@[nom-du-domaine]
ldap.authentication.java.naming.provider.url=ldap://[ip du serveur ldap]:389
ldap.authentication.defaultAdministratorUserNames= [noms des comptes à definir en tant qu'admin]
ldap.synchronization.java.naming.security.principal=WEBINFO@solicia.fr (user que j'ai créé pour alfresco)
ldap.synchronization.java.naming.security.credentials=mdp du compte ci-dessus
ldap.synchronization.groupSearchBase=ou=Solicia,dc=solicia,dc=fr (dans mon cas)

 

ldap.synchronization.userSearchBase=ou=Solicia,dc=solicia,dc=fr (dans mon cas)

 

malgré ça, après le redémarrage de mon serveur tomcat, alfresco ne prend toujours pas en compte l'ad ...

Ai-je loupé une étape ou ai-je mal configuré le fichier alfresco-global.properties ?

Merci par avance de votre aide !

 

William.

 

[English version]

 

So I came here because I got some problems with setting up AD on alfresco community 5.2. Founding any good documentation for that wasn't easy so I searched all the answers on forums. The thing is I still didn't make it 😕

So in forums people told that I had to add these lines to turn on ad on  alfresco :

 

authentication.chain=alfinst:alfrescoNtlm,ldap1:ldap-ad

 

ntlm.authentication.sso.enabled=false

 

ldap.authentication.allowGuestLogin=false
ldap.authentication.userNameFormat=%s@[domain-name]
ldap.authentication.java.naming.provider.url=ldap://[server ad ip's]:389
ldap.authentication.defaultAdministratorUserNames= [accounts name that I want as admin]
ldap.synchronization.java.naming.security.principal=WEBINFO@solicia.fr (user I created for alfresco)
ldap.synchronization.java.naming.security.credentials=[password for the account WEBINFO)
ldap.synchronization.groupSearchBase=ou=Solicia,dc=solicia,dc=fr (in my case)

 

ldap.synchronization.userSearchBase=ou=Solicia,dc=solicia,dc=fr (in my case)

 

Even after restarting tomcat server's the AD function isn't working so I don't know if the problem comes from something I forgot or I made some mistakes in my config file 😕

 

Thank you for the help,

 

William.

Labels:
0 Kudos
1 ACCEPTED ANSWER

Go to answer
douglascrp
World-Class Innovator
World-Class Innovator
In response to willi78400

‎01-03-2018 08:49 AM

That is completely wrong.

Your file should be inside the C:\alfresco-community\tomcat\shared\classes folder.

You should never change the content of the war files or the share/alfresco expanded folders inside the tomcat\webapps folder.

Move all your configuration to the existing file inside the folder I mentioned (..shared/classes) and restart Alfresco.

If everything is ok, you will see something like the following in the log files:

2017-12-22 13:58:57,445 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'Authentication' subsystem, ID: [Authentication, managed, alfrescoNtlm1]

2017-12-22 13:58:57,586 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'Authentication' subsystem, ID: [Authentication, managed, ldap1]

View answer in original post

22 REPLIES 22

Go to answer
willi78400
Confirmed Champ
Confirmed Champ
In response to douglascrp

‎01-03-2018 09:04 AM

Ok now I see in the logs LDAP even if there are some errors. I'll try to modify the alfresco-global.properties file to make it running otherwise I'll comback to you ! Thanks anyway for the big help you gave to me

0 Kudos

Go to answer
willi78400
Confirmed Champ
Confirmed Champ
In response to douglascrp

‎01-03-2018 10:02 AM

Ok it finally worked I can connect with AD thank you so much Douglas and Amit for all the time you gave to help me Smiley Happy Have a good day and a happy new year Smiley Happy

Go to answer
willi78400
Confirmed Champ
Confirmed Champ
In response to douglascrp

‎01-03-2018 09:22 AM

2018-01-03 15:04:41,209 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronizing users and groups with user registry 'ldap-ad1'
2018-01-03 15:04:41,268 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Retrieving all groups from user registry 'ldap-ad1'
2018-01-03 15:04:42,648 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap-ad1,id2=1 Group Analysis: Commencing batch of 39 entries
2018-01-03 15:04:42,758 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap-ad1,id2=1 Group Analysis: Processed 39 entries out of 39. 100 % complete. Rate: 354 per second. 0 failures detected.
2018-01-03 15:04:42,759 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap-ad1,id2=1 Group Analysis: Completed batch of 39 entries
2018-01-03 15:04:42,808 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap-ad1,id2=3 Group Creation and Association Deletion: Commencing batch of 39 entries
2018-01-03 15:04:45,906 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap-ad1,id2=3 Group Creation and Association Deletion: Processed 39 entries out of 39. 100 % complete. Rate: 12 per second. 0 failures detected.
2018-01-03 15:04:45,906 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap-ad1,id2=3 Group Creation and Association Deletion: Completed batch of 39 entries
2018-01-03 15:04:45,906 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Retrieving all users from user registry 'ldap-ad1'
2018-01-03 15:04:46,047 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap-ad1,id2=6 User Creation and Association: Commencing batch of 0 entries
2018-01-03 15:04:46,047 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap-ad1,id2=6 User Creation and Association: Completed batch of 0 entries
2018-01-03 15:04:46,047 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap-ad1,id2=4 Group Association Creation: Commencing batch of 2 entries
2018-01-03 15:04:46,158 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap-ad1,id2=4 Group Association Creation: Processed 2 entries out of 2. 100 % complete. Rate: 18 per second. 0 failures detected.
2018-01-03 15:04:46,158 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap-ad1,id2=4 Group Association Creation: Completed batch of 2 entries
2018-01-03 15:04:46,158 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap-ad1,id2=5 User Association: Commencing batch of 104 entries
2018-01-03 15:04:46,172 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap-ad1,id2=5 User Association: Processed 100 entries out of 104. 96 % complete. Rate: 7142 per second. 0 failures detected.
2018-01-03 15:04:46,172 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap-ad1,id2=5 User Association: Processed 104 entries out of 104. 100 % complete. Rate: 7428 per second. 0 failures detected.
2018-01-03 15:04:46,172 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap-ad1,id2=5 User Association: Completed batch of 104 entries
2018-01-03 15:04:46,218 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Finished synchronizing users and groups with user registry 'ldap-ad1'
2018-01-03 15:04:46,218 INFO  [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] 0 utilisateur(s) et 39 groupe(s) traité(s)

Thanks a lot Douglas Alfresco finally synchronized with AD ! The next problem is ... that I can't access to http://localhost:8080/alfresco/share anymore and I can't find the reason in the log files 😕 is it because I touched the webapp directory ?

0 Kudos
Getting started

Explore our Alfresco products with the links below. Use labels to filter content by product module.

Copyright © 2024 Khoros, LLC