authenticatinDAO configuration

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

vycitalr

Hello,

I use either LDAP or NTLM authentication. For these, by using their default configuration, the authenticationDao bean implementation is redefined by either DefaultMutableAuthenticationDao or NullMutableAuthenticationDao. These implementations are however mostly empty. While I understand why methods like createUser are not implemented, why is loadUserByUsername()? Because of this I sometimes run into error thrown from acegi:

     <tr><td><b>500 Description:</b><td> An error inside the HTTP server which prevented it from fulfilling the request.
     <tr><td> 
     <tr><td><b>Message:</b><td>Not implemented
       <tr><td>      
   <tr><td><b>Exception:</b><td>org.alfresco.error.AlfrescoRuntimeException - Not implemented
   <tr><td><td> 
         <tr><td><td>org.alfresco.repo.security.authentication.DefaultMutableAuthenticationDao.loadUserByUsername(DefaultMutableAuthenticationDao.java:410)
         <tr><td><td>net.sf.acegisecurity.providers.dao.DaoAuthenticationProvider.getUserFromBackend(DaoAuthenticationProvider.java:390)
         <tr><td><td>net.sf.acegisecurity.providers.dao.DaoAuthenticationProvider.authenticate(DaoAuthenticationProvider.java:225)
         <tr><td><td>net.sf.acegisecurity.providers.ProviderManager.doAuthentication(ProviderManager.java:159)
         <tr><td><td>net.sf.acegisecurity.AbstractAuthenticationManager.authenticate(AbstractAuthenticationManager.java:49)
         <tr><td><td>net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:372)
         <tr><td><td>net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77)
         <tr><td><td>org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)
         <tr><td><td>org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:49)
         <tr><td><td>org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)
         <tr><td><td>org.alfresco.repo.audit.AuditComponentImpl.audit(AuditComponentImpl.java:241)
         <tr><td><td>org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:69)
         <tr><td><td>org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)
         <tr><td><td>org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)
         <tr><td><td>org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)
         <tr><td><td>org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:210)
         <tr><td><td>$Proxy71.query(Unknown Source)
         <tr><td><td>com.cleverbee.bean.webscript.WorkflowWebScript.fillProcessACLFilter(WorkflowWebScript.java:1755)
         <tr><td><td>com.cleverbee.bean.webscript.WorkflowWebScript.getProcessACLFilter(WorkflowWebScript.java:1737)
         <tr><td><td>com.cleverbee.bean.webscript.WorkflowWebScript.hasRightOnProcessRoot(WorkflowWebScript.java:1191)

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

This happens eg. when one user is logged twice through webscript. This seems to me a common case. What is the recommended way to handle this? Is it safe to have the basic RepositoryAuthenticationDao under different bean name and inject into daoAuthenticationProvider, while the keeping the authenticationDao implemented by the DefaultMutableAuthenticationDao ?

Thanks Robert

acstyxx

Are you still having this problem?  What LDAP server are you using?  Are there any other symptoms?