Multiple LDAP domains

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

zkirby

I work for a company that has more than 1 LDAP domain.  Currently, users on separate domains are directed to separate intranet domain names (for example, intranet.foo.com and intranet.bar.com).  I'm curious to know how Alfresco would handle this (or if it could at all).  Does Alfresco handle the authentication process, or does it just grant authorization to previously authenticated users?

jbarmash

I work for a company that has more than 1 LDAP domain. Currently, users on separate domains are directed to separate intranet domain names (for example, intranet.foo.com and intranet.bar.com). I'm curious to know how Alfresco would handle this (or if it could at all). Does Alfresco handle the authentication process, or does it just grant authorization to previously authenticated users?

When properly configured to authenticate against LDAP, Alfresco defers the authentication to LDAP.   For several domains, you could chain several LDAP authentication domains together, and it will try each in sequence until either it finds a domain that can authenticate, or it goes through all of them and thenfails.

More detail at:
   http://wiki.alfresco.com/wiki/Enterprise_Security_and_Authentication_Configuration

For chaining example, In the extension directory, take a look at:

chaining-authentication-context.xml.sample