configure Alfresco with Active Directory

[imad77]

Hi,

I'm a newbie to use and configure Alfresco. I want to add in Alfresco the users located in our Active Directory.
Can someone help me ? is there an example or samples to use?

Thanks a lot,

Imad

[ssaravanan]

Are you using AD for authentication alone or for syncing user groups from AD to Alfresco….
For syncing user groups might need to use LDAP-AD authentication chain.
http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems

[imad77]

Are you using AD for authentication alone or for syncing user groups from AD to Alfresco….
For syncing user groups might need to use LDAP-AD authentication chain.
http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems

Hi,

If I want to use AD for authentication, is it easy to do? Does it affect the AD performance?

Thanks,

Imad

[ssaravanan]

create the following folders tomcat/shared/classes/alfresco/extension/subsytems/Authenication/passthru/passthru1/
and copy the files tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/passthru/*.properties to the above folder.
Now edit the file tomcat/shared/classes/alfresco/extension/subsytems/Authenication/passthru/passthru1/passthru-authentication-context.properties

passthru.authentication.useLocalServer=false
passthru.authentication.domain=
passthru.authentication.servers=DOMAIN\\192.168.xx.xx
passthru.authentication.guestAccess=false
passthru.authentication.defaultAdministratorUserNames=ssellathurai
#Timeout value when opening a session to an authentication server, in milliseconds
passthru.authentication.connectTimeout=5000
#Offline server check interval in seconds
passthru.authentication.offlineCheckInterval=300
passthru.authentication.protocolOrder=NetBIOS,TCPIP
passthru.authentication.authenticateCIFS=true
passthru.authentication.authenticateFTP=true

Edit tomcat/shared/classes/alfresco-global.properties and change the authentication chain to look something like this,
authentication.chain=alfinst:alfrescoNtlm,passthru1assthru
Hope this helps

[imad77]

create the following folders tomcat/shared/classes/alfresco/extension/subsytems/Authenication/passthru/passthru1/
and copy the files tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/passthru/*.properties to the above folder.
Now edit the file tomcat/shared/classes/alfresco/extension/subsytems/Authenication/passthru/passthru1/passthru-authentication-context.properties

passthru.authentication.useLocalServer=false
passthru.authentication.domain=
passthru.authentication.servers=DOMAIN\\192.168.xx.xx
passthru.authentication.guestAccess=false
passthru.authentication.defaultAdministratorUserNames=ssellathurai
#Timeout value when opening a session to an authentication server, in milliseconds
passthru.authentication.connectTimeout=5000
#Offline server check interval in seconds
passthru.authentication.offlineCheckInterval=300
passthru.authentication.protocolOrder=NetBIOS,TCPIP
passthru.authentication.authenticateCIFS=true
passthru.authentication.authenticateFTP=true

Edit tomcat/shared/classes/alfresco-global.properties and change the authentication chain to look something like this,
authentication.chain=alfinst:alfrescoNtlm,passthru1assthru
Hope this helps

Hi,

tehre is no authentication.chain= in tomcat/shared/classes/alfresco-global.properties.

Have I to add it? and restart the services?

Thanks  a lot,

Imad

[ssaravanan]

You can add it , most often it would be commented which you might need to uncomment.

[imad77]

Hi,

I did, and I restart the Alfresco services and when I try to connect to the Alfresco I get this message:

The remote server may be unavailable or your authentication details have not been recognized.

Here is the configuration file:

/opt/alfresco-3.3.3/tomcat/shared/classes/alfresco/extension/subsystems/Authenication/passthru/passthru1/passthru-authentication-context.properties

passthru.authentication.useLocalServer=false
passthru.authentication.domain=TEV
passthru.authentication.servers=TEV\\192.168.2.11
passthru.authentication.guestAccess=false
passthru.authentication.defaultAdministratorUserNames=adminst
#Timeout value when opening a session to an authentication server, in milliseconds
passthru.authentication.connectTimeout=5000
#Offline server check interval in seconds
passthru.authentication.offlineCheckInterval=300
passthru.authentication.protocolOrder=NetBIOS,TCPIP
passthru.authentication.authenticateCIFS=true
passthru.authentication.authenticateFTP=true

I tried the admin account and adminst but it does not work.

Thanks,
Imad

[mordi33]

Hi,

I have install Alfresco 3.4a and I want use AD for autentication but I don't run.
I have test with your configuration file (with my domain name and ip adress).

In Alfresco Share, I have a lot of errors in My Calendar's Dashboard.

Error Code Information: 500 - An error inside the HTTP server which prevented it from fulfilling the request.‍

Is there another file has edit or I didn't understand.

Best regards,

Cédric

[imad77]

Hi,

I have install Alfresco 3.4a and I want use AD for autentication but I don't run.
I have test with your configuration file (with my domain name and ip adress).

In Alfresco Share, I have a lot of errors in My Calendar's Dashboard.

Error Code Information: 500 - An error inside the HTTP server which prevented it from fulfilling the request.‍

Is there another file has edit or I didn't understand.

Best regards,

Cédric

Hi Cédric,

Sorry, I'm a newbie in Alfresco and I'm not able to integrate AD in my Alfresco. I'm not able to conenct to Alfresco.
I don't know what it is missing in my configuration.

Thanks,

Imad

[ssaravanan]

@imad

passthru.authentication.domain=TEV  (this can be left empty)
passthru.authentication.servers=TEV\\192.168.2.11 (DOMAIN\\192.168.2.11)
passthru.authentication.defaultAdministratorUserNames=adminst (Do you have a user adminst ?)