nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Alfresco 4.0.a: external user can't login

evilclown

Hi,
I'm trying to invite external users to sites. They get the invitation email, but after succesfully using the activation link, the authentication with the username/password combination fails. This problem occurs in /share and /alfresco…
The accounts are activated and they are no differences to manually created accounts. But with manually created accounts the login works. Is there an easy solution?

I'm using

authentication.chain=alfrescoNtlm1:alfrescoNtlm,passthru1:passthru,ldap1:ldap‍

with the following configurations:

alfrescoNtlm1

ntlm.authentication.mapUnknownUserToGuest=false
ntlm.authentication.sso.enabled=false
alfresco.authentication.authenticateCIFS=false
alfresco.authentication.allowGuestLogin=true‍‍‍‍‍

passthru1

passthru.authentication.useLocalServer=false
passthru.authentication.servers=uniko.uni-koblenz.de
ntlm.authentication.sso.enabled=false
passthru.authentication.authenticateCIFS=true
passthru.authentication.authenticateFTP=true
passthru.authentication.guestAccess=true
passthru.authentication.defaultAdministratorUserNames=AD_usernames‍‍‍‍‍‍‍‍

ldap1

ldap.authentication.active=false
ldap.authentication.userNameFormat=uid=%s,ou=people,dc=uni-koblenz,dc=de
ldap.authentication.java.naming.provider.url=ldap://ldap.uni-koblenz.de:389
ldap.authentication.java.naming.security.authentication=simple
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.principal=…
ldap.synchronization.java.naming.security.credentials=…
ldap.synchronization.groupQuery=(objectclass\=groupOfNames)
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=groupOfNames)(!(modifyTimestamp<\={0})))
ldap.synchronization.personQuery=(objectclass\=inetOrgPerson)
ldap.synchronization.personDifferentialQuery=(&(objectclass\=inetOrgPerson)(!(modifyTimestamp<\={0})))
ldap.synchronization.groupSearchBase=ou\=group,dc\=Uni-Koblenz,dc\=de
ldap.synchronization.userSearchBase=ou\=people,dc\=Uni-Koblenz,dc\=de
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'
ldap.synchronization.userIdAttributeName=uid
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=o
ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupType=groupOfNames
ldap.synchronization.personType=inetOrgPerson
ldap.synchronization.groupMemberAttributeName=member‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Find more posts tagged with

Comments

boutch55555

Same here with alfresco 4.0.b.
I don't have passthru configured, only alfrescoNTLM and ldap.
Resetting the password in explorer interface does NOT fix the problem.
I will continue to search a workaround and will open a bug report if none is found.

Mathieu

auban

Same here with alfresco 4.0.b.
I don't have passthru configured, only alfrescoNTLM and ldap.
Resetting the password in explorer interface does NOT fix the problem.
I will continue to search a workaround and will open a bug report if none is found.

Mathieu

Mathieu, did you find anything ?
Experiencing the same problem.

gmccullough

Same here with alfresco 4.0.b.
I don't have passthru configured, only alfrescoNTLM and ldap.
Resetting the password in explorer interface does NOT fix the problem.
I will continue to search a workaround and will open a bug report if none is found.

Mathieu

Am experiencing the same here, with ntlm, ldap-ad sync, and pass-thru

any luck?
tia,
gene

boutch55555

Bugreport : https://issues.alfresco.com/jira/browse/ALF-12242

I can confirm the issue is still there after a fresh install of 4.0.c in a VM (debian squeeze)

I guess we could try to modify the invite workflow to override the activation of the account (probably somewhere in tomcat/webapps/share/WEB-INF/classes/alfresco/site-webscripts/org/alfresco/components/invite ) with the javascript API to enable the account. I'll try to find time to look at it. It wasn't much of a problem in my case since I only needed to invite 2 users, but if I can help…

Mathieu

boutch55555

Well… the bug is marked as resolved, but only for entreprise edition. Can't find a commit related to that problem in the community SVN log. Did someone found a workaround ?
Still isn't working in 4.0.d.
Mathieu

jeoffrey54

Hello,

I'm using the community version (4.0d), and this bug is still there !

Can someone post the solution ?

opoplawski

My workaround was to add the following to Company Home > Data Dictionary > Scripts as "user status.js":

var sq = { query : "+ASPECT:\"cm:personDisabled\"", language : "lucene" };
sr = search.query(sq);
var result = "";
for each (p in sr){
  result += p.properties["userName"]; 
  people.enableAccount(p.properties["userName"]);
}
result;
‍‍‍‍‍‍‍‍‍‍

You can then run it with:

https://www.yourhost.com/alfresco/command/script/execute?scriptPath=/Company%20Home/Data%20Dictionary/Scripts/user%20status.js

Replacing yourhost with your server name.