cancel
Showing results for 
Search instead for 
Did you mean: 

LDAP-AD Not Working

joe_rella1
Champ in-the-making
Champ in-the-making

I am trying to configure LDAP-AD for Alfresco. I added the authenticator "example.com" with the following values:

Format: Default

LDAP server URL: ldap://server.example.com:389

Security: simple

Security Principal Namesvc_alf@example.com

Security: simple

Security Principal Credentials: XXXXX

LDAP Synchronization: Enabled

I configured the User Search Base and Group Search Base using dn consistent with my environment.

I then ran synchronization. Here are the results:

2Example.comLDAP (Active Directory)TrueTrue
1 Group AnalysisStart Time: 25 Jan 2017 14:19:44
End Time: 25 Jan 2017 14:19:44
Successful: 0
Failed: 0
Percent Complete: 100%
Total Results: 0
6 User Creation and AssociationStart Time: 25 Jan 2017 14:21:51
End Time: 25 Jan 2017 14:22:54
Successful: 2
Failed: 0
Percent Complete: Unknown
Total Results: 1

When I try to test, I get the following error:

Authentication Test Result

Test Failed

Authentication Message

00250957 Failed to authenticate, authenticator with name, example.com, not found

Test Diagnostics

Authenticator not found:Failed

Any help would be greatly appreciated!

6 REPLIES 6

afaust
Legendary Innovator
Legendary Innovator

Sounds like you used the Admin Console to set this up. That means you are using Alfresco Enterprise Edition, and any support requests should typically go to Alfresco directly via the support portal (support.alfresco.com).

Did you really setup your LDAP server with the DNS name ldap.example.com? Otherwise this cannot work... On the other hand, you seem to have two users sucessfully synchronised.

joe_rella1
Champ in-the-making
Champ in-the-making

I did use the Admin Console, thank you for the support tip.

No, I did not actually use example.com, lol.

cesarista
World-Class Innovator
World-Class Innovator

Hi:

For confirmation: Did you use "user" as login or "user@example.com" in the ldap test ? You need to put "user" (sAMAccountName) in the login. You may check with "svc_alf" for example.

Regards.

--C.

joe_rella1
Champ in-the-making
Champ in-the-making

I did use a valid sAMAccountName for the test.

What is weird, is that since I posted this, I tested logging into the admin console using an AD account and it was successful. So it would appear that the authentication mech is working, but the "test" feature is not.