nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

LDAP Integration

yogesh_prabhu

Hi,

I am working with alfresco 3.3 enterprise edition..
I referred to many wikis related to LDAP integration in alfresco, but i have still not got a clear idea..
The configuration steps given are too confusing.. :?
Can anyone please help me with a clear description of the steps to follow??
I am stuck on this issue for the past one week..as the days are passing by, it is becoming more and more confusing for me..

Any kind of suggestions would be of great help..

Thanks in advance..!

Find more posts tagged with

Comments

dward

1. Decide what type of LDAP directory you are using. If it is Active Directory you should use the ldap-ad subsystem. Otherwise you should use the ldap subsystem.

2. Put the ldap or ldap-ad subsystem in your authentication chain by adding one of these lines to alfresco-global.properties

authentication.chain=ldap1:ldap-ad # For Active Directory
authentication.chain=ldap1:ldap # For Other Directories‍‍

2. Create a file to hold your customized configuration values

For Active Directory:

mkdir -p $TOMCAT_HOME/shared/classes/alfresco/extension/subsystems/Authentication/ldap-ad/ldap1
cp $TOMCAT_HOME/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/ldap-ad/*.properties $TOMCAT_HOME/shared/classes/alfresco/extension/subsystems/Authentication/ldap-ad/ldap1‍‍

For Other Directories:

mkdir -p $TOMCAT_HOME/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1
cp $TOMCAT_HOME/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/ldap/*.properties $TOMCAT_HOME/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1‍‍

3. Edit $TOMCAT_HOME/shared/classes/alfresco/extension/subsystems/Authentication/ldap-ad/ldap1/ldap-ad-authentication.properties or $TOMCAT_HOME/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1/ldap-authentication.properties so that it is correct for your environment. You won't have to edit many properties, as most have been set up with sensible defaults. The properties you will most likely have to edit are

ldap.authentication.java.naming.provider.url=ldap://openldap.domain.com:389
ldap.synchronization.java.naming.security.principal=cn\=Manager,dc\=company,dc\=com
ldap.synchronization.java.naming.security.credentials=secret
ldap.synchronization.groupSearchBase=ou\=Groups,dc\=company,dc\=com
ldap.synchronization.userSearchBase=ou\=People,dc\=company,dc\=com‍‍‍‍‍

Read the configuration guide at http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#Configuration_2

yogesh_prabhu

Hi dward,

Thanks for your quick reply dward..that was of some great help!!

I followed the steps as suggested by you..
Although i believe now it is connecting to the LDAP server..but i am getting a "Authentication failed" error in the tomcat window.
I am not able to understand the cause of the error..

My error log is as follows:

Caused by: javax.naming.AuthenticationException: [LDAP: error code 49 - cannot b
ind the principalDn.]
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3005)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2951)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2753)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2667)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:287)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175)

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:193
)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.ja
va:136)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.jav
a:66)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:6
67)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:288
)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at javax.naming.InitialContext.init(InitialContext.java:223)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at javax.naming.InitialContext.<init>(InitialContext.java:197)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at javax.naming.directory.InitialDirContext.<init>(InitialDirContext.jav
a:82)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextF
actoryImpl.buildInitialDirContext(LDAPInitialDirContextFactoryImpl.java:105)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; … 50 more
09:36:27,780 User:System WARN&nbsp; [security.sync.ChainingUserRegistrySynchronizer]
Failed initial synchronize with user registries
org.alfresco.repo.security.authentication.AuthenticationException: 07040000 LDAP
 authentication failed.
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextF
actoryImpl.buildInitialDirContext(LDAPInitialDirContextFactoryImpl.java:110)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextF
actoryImpl.getDefaultIntialDirContext(LDAPInitialDirContextFactoryImpl.java:85)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextF
actoryImpl.getDefaultIntialDirContext(LDAPInitialDirContextFactoryImpl.java:76)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry$3.<init>(LDAPUs
erRegistry.java:648)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.getGroups(LDAPU
serRegistry.java:645)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.sync
WithPlugin(ChainingUserRegistrySynchronizer.java:539)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.sync
hronize(ChainingUserRegistrySynchronizer.java:405)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer$5.do
Work(ChainingUserRegistrySynchronizer.java:1373)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(Au
thenticationUtil.java:508)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onBo
otstrap(ChainingUserRegistrySynchronizer.java:1367)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.extensions.surf.util.AbstractLifecycleBean.onAppl
icationEvent(AbstractLifecycleBean.java:56)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.context.event.SimpleApplicationEventMulticaster.m
ulticastEvent(SimpleApplicationEventMulticaster.java:97)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.context.support.AbstractApplicationContext.publis
hEvent(AbstractApplicationContext.java:294)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.context.support.AbstractApplicationContext.finish
Refresh(AbstractApplicationContext.java:858)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.context.support.AbstractApplicationContext.refres
h(AbstractApplicationContext.java:419)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.alfresco.repo.management.subsystems.ChildApplicationContextFactor
y$ApplicationContextState.start(ChildApplicationContextFactory.java:624)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.st
art(AbstractPropertyBackedBean.java:458)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.on
ApplicationEvent(AbstractPropertyBackedBean.java:386)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.context.event.SimpleApplicationEventMulticaster.m
ulticastEvent(SimpleApplicationEventMulticaster.java:97)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicas
tEvent(SafeApplicationEventMulticaster.java:78)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.context.support.AbstractApplicationContext.publis
hEvent(AbstractApplicationContext.java:294)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.context.support.AbstractApplicationContext.finish
Refresh(AbstractApplicationContext.java:858)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.context.support.AbstractApplicationContext.refres
h(AbstractApplicationContext.java:419)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.web.context.ContextLoader.createWebApplicationCon
text(ContextLoader.java:261)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.web.context.ContextLoader.initWebApplicationConte
xt(ContextLoader.java:192)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.springframework.web.context.ContextLoaderListener.contextInitiali
zed(ContextLoaderListener.java:47)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.alfresco.web.app.ContextLoaderListener.contextInitialized(Context
LoaderListener.java:63)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.StandardContext.listenerStart(StandardContex
t.java:3972)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.StandardContext.start(StandardContext.java:4
467)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase
.java:791)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:77
1)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:546)

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.ja
va:637)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.startup.HostConfig.deployDescriptors(HostConfig.j
ava:563)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498
)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1277)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java
:321)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Lifecycl
eSupport.java:119)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1053)

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.StandardHost.start(StandardHost.java:785)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443
)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.StandardService.start(StandardService.java:5
19)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.core.StandardServer.start(StandardServer.java:710
)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.startup.Catalina.start(Catalina.java:581)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at java.lang.reflect.Method.invoke(Method.java:597)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)
Caused by: javax.naming.AuthenticationException: [LDAP: error code 49 - cannot b
ind the principalDn.]
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3005)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2951)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2753)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2667)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:287)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175)

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:193
)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.ja
va:136)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.jav
a:66)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:6
67)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:288
)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at javax.naming.InitialContext.init(InitialContext.java:223)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at javax.naming.InitialContext.<init>(InitialContext.java:197)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at javax.naming.directory.InitialDirContext.<init>(InitialDirContext.jav
a:82)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextF
actoryImpl.buildInitialDirContext(LDAPInitialDirContextFactoryImpl.java:105)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; … 50 more
09:36:27,923&nbsp; INFO&nbsp; [management.subsystems.ChildApplicationContextFactory] Start
up of 'Synchronization' subsystem, ID: [Synchronization, default] complete
09:36:28,383&nbsp; INFO&nbsp; [service.descriptor.DescriptorService] Alfresco JVM - v1.6.0
_11-b03; maximum heap size 998.438MB
09:36:30,989&nbsp; INFO&nbsp; [service.descriptor.DescriptorService] Alfresco license: Ent
erprise - v3.3 granted to Trial User limited to 30 days expiring Wed Sep 01 00:0
0:00 IST 2010 (28 days remaining)
09:36:30,989&nbsp; INFO&nbsp; [service.descriptor.DescriptorService] Alfresco started (Ent
erprise): Current version 3.3.0 (64) schema 4010 - Originally installed version
3.3.0 (64) schema 4010
09:37:16,993&nbsp; INFO&nbsp; [module.vti.VtiServer] Vti server started successfully on po
rt: 7070
09:38:01,208&nbsp; INFO&nbsp; [alfresco.util.OpenOfficeConnectionTester] The OpenOffice co
nnection was re-established.
09:38:25,870 User:System INFO&nbsp; [extensions.webscripts.DeclarativeRegistry] Regis
tered 415 Web Scripts (+0 failed), 661 URLs
09:38:35,380 User:System INFO&nbsp; [extensions.webscripts.DeclarativeRegistry] Regis
tered 2 Package Description Documents (+0 failed)
09:38:35,380 User:System INFO&nbsp; [extensions.webscripts.DeclarativeRegistry] Regis
tered 1 Schema Description Documents (+0 failed)
09:38:35,380 User:System INFO&nbsp; [extensions.webscripts.AbstractRuntimeContainer]
Initialised Repository Web Script Container (in 41135.93ms)
09:38:35,380&nbsp; INFO&nbsp; [extensions.webscripts.TemplateProcessorRegistry] Registered
 template processor freemarker for extension ftl
09:38:35,380&nbsp; INFO&nbsp; [extensions.webscripts.ScriptProcessorRegistry] Registered s
cript processor javascript for extension js
09:38:38,948&nbsp; INFO&nbsp; [management.subsystems.ChildApplicationContextFactory] Start
ing 'wcm_deployment_receiver' subsystem, ID: [wcm_deployment_receiver, default]
09:38:39,137&nbsp; INFO&nbsp; [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading
properties file from class path resource [alfresco/alfresco-shared.properties]
09:38:39,876&nbsp; INFO&nbsp; [management.subsystems.ChildApplicationContextFactory] Start
up of 'wcm_deployment_receiver' subsystem, ID: [wcm_deployment_receiver, default
] complete
Aug 4, 2010 9:38:49 AM org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Deploying configuration descriptor host-manager.xml
Aug 4, 2010 9:38:51 AM org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Deploying configuration descriptor manager.xml
Aug 4, 2010 9:38:53 AM org.apache.catalina.startup.HostConfig deployWAR
INFO: Deploying web application archive share.war
09:39:59,712&nbsp; INFO&nbsp; [extensions.webscripts.DeclarativeRegistry] Registered 270 W
eb Scripts (+0 failed), 278 URLs
09:39:59,712&nbsp; INFO&nbsp; [extensions.webscripts.DeclarativeRegistry] Registered 8 Pac
kage Description Documents (+0 failed)
09:39:59,712&nbsp; INFO&nbsp; [extensions.webscripts.DeclarativeRegistry] Registered 0 Sch
ema Description Documents (+0 failed)
09:39:59,948&nbsp; INFO&nbsp; [extensions.webscripts.AbstractRuntimeContainer] Initialised
 Spring Surf Container Web Script Container (in 6775.0854ms)
09:40:00,136&nbsp; INFO&nbsp; [extensions.webscripts.TemplateProcessorRegistry] Registered
 template processor freemarker for extension ftl
09:40:00,466&nbsp; INFO&nbsp; [extensions.webscripts.ScriptProcessorRegistry] Registered s
cript processor javascript for extension js
09:40:00,701&nbsp; INFO&nbsp; [extensions.webscripts.TemplateProcessorRegistry] Registered
 template processor freemarker for extension ftl
09:40:00,701&nbsp; INFO&nbsp; [extensions.webscripts.ScriptProcessorRegistry] Registered s
cript processor javascript for extension js
09:40:00,890&nbsp; INFO&nbsp; [extensions.webscripts.TemplateProcessorRegistry] Registered
 template processor freemarker for extension ftl
09:40:00,890&nbsp; INFO&nbsp; [extensions.webscripts.ScriptProcessorRegistry] Registered s
cript processor javascript for extension js
Aug 4, 2010 9:40:05 AM org.apache.catalina.startup.HostConfig deployDirectory
INFO: Deploying web application directory docs
Aug 4, 2010 9:40:05 AM org.apache.catalina.startup.HostConfig deployDirectory
INFO: Deploying web application directory examples
Aug 4, 2010 9:40:07 AM org.apache.coyote.http11.Http11Protocol start
INFO: Starting Coyote HTTP/1.1 on http-8080
Aug 4, 2010 9:40:08 AM org.apache.catalina.startup.Catalina start
INFO: Server startup in 503476 ms
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Am i missing something..i believe its something to do with the following properties that is set:

ldap.authentication.java.naming.provider.url=ldap://localhost:10389
ldap.synchronization.java.naming.security.principal=cn\=Manager,dc\=company,dc\=com
ldap.synchronization.java.naming.security.credentials=secret
ldap.synchronization.groupSearchBase=ou\=Groups,dc\=company,dc\=com
ldap.synchronization.userSearchBase=ou\=People,dc\=company,dc\=com‍‍‍‍‍

Any kind of suggestions would be of great help..!!
Thanx in advance..!!

dward

You were supposed to edit the parameters so that they were suitable for your environment. You may need to use an LDAP browser, such as the one from http://www.ldapbrowser.com to work out the correct settings.

ldap.synchronization.java.naming.security.principal

Set this to the DN of a user who can log in to the directory

ldap.synchronization.java.naming.security.credentials

Set this to their password

ldap.synchronization.groupSearchBase

Set this to the root DN of all groups

ldap.synchronization.userSearchBase

Set this to the root DN of all users

ankit_yakkundi

Hi..
Thanks for the steps..it was of great help..very clear!! thanx yogesh for posting this thread..!!
It is working for me ….
Now i want to integrate SSO with ALfresco and LDAP. I am using alfresco 3.3,cas-server-webapp-3.4.2,apache directory studio on windows machine.
The requirement is that

If in login to web-client, then i should be able to access Share with out logging again vice versa.

i have referd

http://wiki.alfresco.com/wiki/Alfresco_With_mod_auth_cas

http://wiki.alfresco.com/wiki/Central_Authentication_Service_Configuration

Thanks in advance..!

yogesh_prabhu

Hi dward,

Its working great..!!!!

Thanx for ur guidance..it was of great help!!!
I am also curious to work on LDAP-SSO..seems to be interesting..would love to have the configuration steps for the same..it will make the process smooth..!!

Thanx in advance..!!!

ankit_yakkundi

Hi Yogesh
Did you found any solution for SSO integration with alfresco?? Can anyone tell me the steps which i need to follow..
What all files i need to change so that both web-client and share works with SSO.

By doing the above changes in webclient,now am i able to get cas login page but i have to login again, but this is not the case with share. when i login for share, share' s page opens..

Any idea or suggestions are welcome

Thanks in advance…

Its urgent..

hosein

Hi all
i want to integrate LDAP and Alfresco Community Edition (portlet of liferay). i integrate liferay and alfresco.liferay was integrated with LDAP and CAS and then i install Alfresco portlet on liferay. it works fine but when i attempt to integrate Alfresco and LDAP following error occurred :

12:01:00,875 ERROR [web.context.ContextLoader] Context initialization failed
org.springframework.beans.factory.BeanDefinitionStoreException: Error registering bean with name 'authenticationComponent' defined in file [C:\apache-tomcat-6.0.18\webapps\alfresco\WEB-INF\classes\alfresco\extension\ldap-authentication-context.xml]: Could not resolve parent bean definition 'authenticationComponentBase'; nested exception is org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean named 'authenticationComponentBase' is defined
org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean named 'authenticationComponentBase' is defined
   at org.springframework.beans.factory.support.DefaultListableBeanFactory.getBeanDefinition(DefaultListableBeanFactory.java:352)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getMergedBeanDefinition(AbstractBeanFactory.java:671)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getMergedBeanDefinition(AbstractBeanFactory.java:703)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getMergedBeanDefinition(AbstractBeanFactory.java:671)
   at org
…
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
   at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
   at java.lang.reflect.Method.invoke(Unknown Source)
   at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:288)
   at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
Aug 24, 2010 12:01:00 PM org.apache.catalina.core.StandardContext listenerStart
SEVERE: Exception sending context initialized event to listener instance of class org.springframework.web.context.ContextLoaderListener
org.springframework.beans.factory.BeanDefinitionStoreException: Error registering bean with name 'authenticationComponent' defined in file [C:\apache-tomcat-6.0.18\webapps\alfresco\WEB-INF\classes\alfresco\extension\ldap-authentication-context.xml]: Could not resolve parent bean definition 'authenticationComponentBase'; nested exception is org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean named 'authenticationComponentBase' is defined
org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean named 'authenticationComponentBase' is defined
   at org.springframework.beans.factory.support.DefaultListableBeanFactory.getBeanDefinition(DefaultListableBeanFactory.java:352)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getMergedBeanDefinition(AbstractBeanFactory.java:671)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getMergedBeanDefinition(AbstractBeanFactory.java:703)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getMergedBeanDefinition(AbstractBeanFactory.java:671)
   at org.springframework.beans.factory.support.DefaultListableBeanFactory.getBeanNamesForType(DefaultListableBeanFactory.java:138)
   at org.s
…
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
   at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
   at java.lang.reflect.Method.invoke(Unknown Source)
   at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:288)
   at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
Aug 24, 2010 12:01:00 PM org.apache.catalina.core.StandardContext listenerStart
SEVERE: Exception sending context initialized event to listener instance of class org.alfresco.web.app.ContextListener
org.springframework.beans.factory.BeanDefinitionStoreException: Error registering bean with name 'authenticationComponent' defined in file [C:\apache-tomcat-6.0.18\webapps\alfresco\WEB-INF\classes\alfresco\extension\ldap-authentication-context.xml]: Could not resolve parent bean definition 'authenticationComponentBase'; nested exception is org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean named 'authenticationComponentBase' is defined
org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean named 'authenticationComponentBase' is defined
   at org.springframework.beans.factory.support.DefaultListableBeanFactory.getBeanDefinition(DefaultListableBeanFactory.java:352)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getMergedBeanDefinition(AbstractBeanFactory.java:671)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getMergedBeanDefinition(AbstractBeanFactory.java:703)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getMergedBeanDefinition(AbstractBeanFactory.java:671)
   at org.springframework.beans.factory.support.DefaultListableBeanFactory.getBeanNamesForType(DefaultListableBeanFactory.java:138)
   at org.springframewo
…
   at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
Aug 24, 2010 12:01:00 PM org.apache.catalina.core.StandardContext start
SEVERE: Error listenerStart
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

please help me
thanks

Regards

ankit_yakkundi

Hi hosein
First you tell me which LDAP server and CAS are you using? and are you integrating LDAP with alfresco or alfresco portlet? Sinc i have no idea how liferay and alfresco is integrated, so if you are integrating LDAP with alfresco portlet then sorry i can't help you, but if you are using alfresco software then i might help…

hosein

i integrate Apache Directory Server and CAS with liferay. then install Alfresco portlet on liferay.

Apache Directory Server : http://directory.apache.org/apacheds/1.5/downloads.html
CAS : http://www.jasig.org/cas_server_3_4_2_1

you should learn about LDAP and its syntax , download jxplorer for create LDAP tree .

you should unzip cas server in webapps of tomcat.

there is some useful links :
http://www.blogjava.net/junky/archive/2007/05/29/120724.html
http://wiki.pentaho.com/display/ServerDoc1x/Integrating+Liferay+with+CAS

after install cas and ldap you should set their configuration in Liferay > Control panel > setting > authentication

hosein

also you can see this : http://www.liferay.com/web/nidhi.singh/blog/-/blogs/liferay-intregation-with-cas-and-ldap?_33_redirect=%2Fweb%2Fnidhi.singh%2Fblog

and you can see Liferay Administration Guide for LDAP configuration

ankit_yakkundi

Hi..
Thanks for the guidance and reply…
Now do you how can i integrate CAS with Alfresco???
Do you ahve any links or documents which can be usefull for me to implement it.

hosein

sorry , i am searching for it too

mwildam

When is the LDAP integration is activated, when now happens a refresh or are the users/groups read on the fly from the LDAP directory?
So basically, when do changes in LDAP take effect in Alfresco?

hosein

i am using Afresco Portlet on Liferay Portal and it might be different.

I integrate Liferay with CAS and LDAP and i can use SSL for authentication . i want to use CAS and LDAP on Alfresco too

How can i integrate LDAP with Alfresco ? i have some problems with ldap-authentication-context.xml when i add this file to extension folder alfresco start up failed !!!

some help please
thanks

fstnboy

Hi hosein,

Can you post your log file and you config file as well?

wyuan

Does anyone know the relationship between x509 and LDAP when using CAS (SSO)? It seems that x509 is related to SSL. Do I need it when I use https to access an application?

Thanks,

hosein

Hello fstnboy

my old errors was fixed , thanks. there is new one :

In my Liferay+Alfresco integration all configuration is working properly except one ! that is Alfresco authentication. Description of exception says "Access Denied" and refer to userhome.
when i sign into liferay by means of CAS the single-sign-on doesn't work and Alfresco Portlets generate exception but if i sign into Alfresco directly (http://localhost:8080/alfresco) and create space for authenticated user and then sign into Liferay via CAS alfresco portlets work fine and no exception occurs.
even after restart tomcat for users who i create space for them via sign into Alfresco directly no exception generate but for others it has exceptions.

Thanks

samudaya

Hi,

If there is any guy who successfully integrated Open-LDAP, please post the steps (configurations and relevant files). It is great help for me.

Environment Condition
Alfresco Community 3.4.d
Ubuntu 10.04 server
Open-LDAP (No authentication required to username and password validation)
LDAP password MD5-CRYPT

Thank you very much …..