nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Sync LDAP and Alfresco Passwords

athrawn17

I am using Alfresco 3.3
I would love to use SSO with NTLM v2 for authentication.
From the documentation:

This basic use of NTLM requires Alfresco to store its own copies of your MD4 password hash, which means your user ID and password must be the same in both Alfresco and your Windows domain.

I have turned on LDAP-AD synchronization which imported all my users, but…it didn't import the passwords (nor am I sure that it can).

So, my question is this, can I sync the alfresco and LDAP password so I can use NTLM to authenticate SSO and LDAP to sync?

Find more posts tagged with

Comments

richard_im

Authentication and synchronization are treated as two separate things. So, you should set up ntlm passthru authentication to the windows domain server, but use LDAP sync to import users and groups.

athrawn17

… So, you should set up ntlm passthru authentication to the windows domain server, but use LDAP sync to import users and groups.

Unfortunately this doesn't work since passthru only supports NTLM v1. Unless there is something I'm overlooking from reading the documentation.

richard_im

tradeoffs…

why not do kerberos?

athrawn17

why not do kerberos?

Alas, Kerberos is not available for us. We technically could invest the time and money to set it all up, but if there was a way to sync the LDAP passwords with alfresco's internal storage then we wouldn't have to.

As of now we have the authentication happening against the Active Directory LDAP system, but the SSO isn't possible since Alfresco doesn't know about the user's passwords. As much as I like Alfresco, I'm worried that this is going to be a deal killer for using it.

$Photo of fracat71$ fracat71

Hi,
i have the same error.
How do you solve it?

Thanks