LDAP Authentication gets in the way of 'new user'

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

arnieaustin

I've been reading the forums and manuals and getting really confused.

I want to use LDAP for authentication ONLY. I don't want to sync anything, I don't want to use an AD Domain for authentication or pass through or anything else.

I have LDAP connected and working just fine - but now that it is working - I cannot add any more users to Alfresco:

Failed to create Person due to error: 07300003 Unable to create authentication as there is no suitable authentication service.

This has got to be a wrong error message for the situation. How can there NOT be a "suitable authentication service" when I used LDAP to get into the system in the first place?!?!

I want to be able to add users to Alfresco MANUALLY but they will need to authenticate via LDAP no matter the client - web, share, cifs.

Is this setup not possible? My configuration settings follow:

#authentication.chain=alfrescoNtlm1:alfrescoNtlm
# authentication.chain=alfrescoNtlm1:alfrescoNtlm,passthru1:passthru,ldap1:ldap
authentication.chain=ldap1:ldap

#ntlm.authentication.sso.enabled=false
#ntlm.authentication.mapUnknownUserToGuest=false
alfresco.authentication.authenticateCIFS=true

#passthru.authentication.authenticateCIFS=false
#passthru.authentication.userLocalServer=false
#passthru.authentication.domain=tagad
#passthru.authentication.authenticateFTP=true
#passthru.authentication.guestAccess=false

ldap.authentication.active=true
ldap.synchronization.active=false

alfresco.authentication.allowGuestLogin=false

ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://idv1.oag.state.tx.us:389
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.java.naming.security.principal=portalsystem
ldap.authentication.java.naming.security.credentials=portalsystem
ldap.authentication.userNameFormat=cn=%s,ou=al,ou=employees,ou=people,o=idv
ldap.authentication.allowGuestLogin=false
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

arnieaustin

I've been toying with the settings and can now authenticate with the Alfresco DB password and the LDAP password. FTP is working and I can authenticate using LDAP there; CIFS "seems" to be running but the Alfresco server isn't accessible via \\AlfrescoLab. My new settings are:

#
# The default authentication chain
# To configure external authentication subsystems see:
# http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems
#————-
#authentication.chain=alfrescoNtlm1:alfrescoNtlm
authentication.chain=alfrescoNtlm1:alfrescoNtlm,passthru1:passthru,ldap1:ldap
#authentication.chain=ldap1:ldap

ntlm.authentication.sso.enabled=false
ntlm.authentication.mapUnknownUserToGuest=false
alfresco.authentication.authenticateCIFS=true

passthru.authentication.sso.enabled=false
passthru.authentication.authenticateCIFS=true
passthru.authentication.userLocalServer=false
passthru.authentication.domain=tagad
passthru.authentication.authenticateFTP=true
passthru.authentication.guestAccess=false

ldap.authentication.active=true
ldap.synchronization.active=false

alfresco.authentication.allowGuestLogin=false

ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://idv1.oag.state.tx.us:389
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.java.naming.security.principal=portalsystem
ldap.authentication.java.naming.security.credentials=portalsystem
ldap.authentication.userNameFormat=cn=%s,ou=al,ou=employees,ou=people,o=idv
ldap.authentication.allowGuestLogin=false
#ldap.authentication.java.naming.factory.initial=
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.defaultAdministratorUserNames=acm3,cec3,dao
#
ldap.synchronization.java.naming.security.principal=cn=portalsystem,ou=apps,ou=people,o=idv
ldap.synchronization.java.naming.security.credentials=portalsystem
ldap.synchronization.groupSearchBase=ou=groups,o=idv
ldap.synchronization.userSearchBase=ou=employees,ou=people,o=idv
ldap.synchronization.groupType=groupOfNames
ldap.synchronization.personType=inetOrgPerson
ldap.synchronization.groupMemberAttributeName=member
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍