AD integration - Alfresco won't let AD user login

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

applening

Alfresco 3.4d

This is what I did to integrate AD:

In alfresco.global.properties file (C:\Alfresco\tomcat\shared\classes) added line:

authentication.chain=alfrescoNtlm1:alfrescoNtlm,ldap1:ldap-ad‍

In ldap-ad-aduthentication.properties file (C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\ldap-ad) edited these lines to according parameters for our AD server:

ldap.authentication.java.naming.provider.url=ldap://domaincontroller.company.com:389
ldap.synchronization.java.naming.security.principal=USERNAME@COMPANY.COM
ldap.synchronization.java.naming.security.credentials=SECRET
ldap.synchronization.groupSearchBase=ou\=Groups,dc\=company,dc\=com
ldap.synchronization.userSearchBase=ou\=People,dc\=company,dc\=com‍‍‍‍‍

There were no errors on Tomcat startup. The system log says Authentication and Synchronization subsystems complete. All users were created in Alfresco and I can see them through searching for users.

But none of the AD users can log in and got the message "The remote server may be unavailable or your authentication details have not been recognized." Am I missing something here?

Thanks in advance.

applening

So I ran WireShark and found out what the problem was.

To answer my own question, yes, there was one more thing in the ldap-ad-aduthentication.properties file.

ldap.authentication.userNameFormat=%s@domain‍

@domain needed to change to our domain controller name e.g. @company.com. As an AD and Alfresco rookie, I was not aware of that. Glad to finally got it working though. Hope this can help someone as well.