Alfresco 4.0.a: external user can't login

[evilclown]

Hi,
I'm trying to invite external users to sites. They get the invitation email, but after succesfully using the activation link, the authentication with the username/password combination fails. This problem occurs in /share and /alfresco…
The accounts are activated and they are no differences to manually created accounts. But with manually created accounts the login works. Is there an easy solution?

I'm using

authentication.chain=alfrescoNtlm1:alfrescoNtlm,passthru1:passthru,ldap1:ldap‍

with the following configurations:

alfrescoNtlm1

ntlm.authentication.mapUnknownUserToGuest=false
ntlm.authentication.sso.enabled=false
alfresco.authentication.authenticateCIFS=false
alfresco.authentication.allowGuestLogin=true‍‍‍‍‍

passthru1

passthru.authentication.useLocalServer=false
passthru.authentication.servers=uniko.uni-koblenz.de
ntlm.authentication.sso.enabled=false
passthru.authentication.authenticateCIFS=true
passthru.authentication.authenticateFTP=true
passthru.authentication.guestAccess=true
passthru.authentication.defaultAdministratorUserNames=AD_usernames‍‍‍‍‍‍‍‍

ldap1

ldap.authentication.active=false
ldap.authentication.userNameFormat=uid=%s,ou=people,dc=uni-koblenz,dc=de
ldap.authentication.java.naming.provider.url=ldap://ldap.uni-koblenz.de:389
ldap.authentication.java.naming.security.authentication=simple
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.principal=…
ldap.synchronization.java.naming.security.credentials=…
ldap.synchronization.groupQuery=(objectclass\=groupOfNames)
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=groupOfNames)(!(modifyTimestamp<\={0})))
ldap.synchronization.personQuery=(objectclass\=inetOrgPerson)
ldap.synchronization.personDifferentialQuery=(&(objectclass\=inetOrgPerson)(!(modifyTimestamp<\={0})))
ldap.synchronization.groupSearchBase=ou\=group,dc\=Uni-Koblenz,dc\=de
ldap.synchronization.userSearchBase=ou\=people,dc\=Uni-Koblenz,dc\=de
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'
ldap.synchronization.userIdAttributeName=uid
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=o
ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupType=groupOfNames
ldap.synchronization.personType=inetOrgPerson
ldap.synchronization.groupMemberAttributeName=member‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

[boutch55555]

Same here with alfresco 4.0.b.
I don't have passthru configured, only alfrescoNTLM and ldap.
Resetting the password in explorer interface does NOT fix the problem.
I will continue to search a workaround and will open a bug report if none is found.

Mathieu

[auban]

Same here with alfresco 4.0.b.
I don't have passthru configured, only alfrescoNTLM and ldap.
Resetting the password in explorer interface does NOT fix the problem.
I will continue to search a workaround and will open a bug report if none is found.

Mathieu

Mathieu, did you find anything ?
Experiencing the same problem.

[gmccullough]

Same here with alfresco 4.0.b.
I don't have passthru configured, only alfrescoNTLM and ldap.
Resetting the password in explorer interface does NOT fix the problem.
I will continue to search a workaround and will open a bug report if none is found.

Mathieu

Am experiencing the same here, with ntlm, ldap-ad sync, and pass-thru

any luck?
tia,
gene

[boutch55555]

Bugreport : https://issues.alfresco.com/jira/browse/ALF-12242

I can confirm the issue is still there after a fresh install of 4.0.c in a VM (debian squeeze)

I guess we could try to modify the invite workflow to override the activation of the account (probably somewhere in tomcat/webapps/share/WEB-INF/classes/alfresco/site-webscripts/org/alfresco/components/invite ) with the javascript API to enable the account. I'll try to find time to look at it. It wasn't much of a problem in my case since I only needed to invite 2 users, but if I can help…

Mathieu

[boutch55555]

Well… the bug is marked as resolved, but only for entreprise edition. Can't find a commit related to that problem in the community SVN log. Did someone found a workaround ?
Still isn't working in 4.0.d.
Mathieu

[opoplawski]

My workaround was to add the following to Company Home > Data Dictionary > Scripts as "user status.js":

var sq = { query : "+ASPECT:\"cm:personDisabled\"", language : "lucene" };
sr = search.query(sq);
var result = "";
for each (p in sr){
  result += p.properties["userName"]; 
  people.enableAccount(p.properties["userName"]);
}
result;
‍‍‍‍‍‍‍‍‍‍

You can then run it with:

https://www.yourhost.com/alfresco/command/script/execute?scriptPath=/Company%20Home/Data%20Dictionar...

Replacing yourhost with your server name.

[jeoffrey54]

Hello,

I'm using the community version (4.0d), and this bug is still there !

Can someone post the solution ?