nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

LDAP authentication 3.4.d with AD

docjay

Running:
Alfresco 3.4.d
Windows Server 2003

Hello all,

I am new to Alfresco and LDAP AD and I am trying to get Alfresco 3.4.d Community edition to authenticate to my AD server. I have read the wiki http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems and I cannot get Alfresco to authenticate to my AD. Is there a log that I can look at for some clues? How does one know if thier site uses UPN or DN authentication? I have tried both of these with no luck..I am sure that it is just something that I am misconfiguring on my end, but I would like to at least to look at some logs to get a clue.

For starters, I have gone into the subsystem

D:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\ldap-ad‍

and edited the copy of 'ldap-ad-authentication.properties' to match setting for my site and yes authentication is enabled here

ldap.authentication.active=true‍

Is there any other place to enable ldap authentication? After I make a change to the ldap-ad-autehntication.properties file I always restart tomcat. Is that right thing to do or do not have to do this?

Also, if someone could lead me to any type of logging so that I am able to see what errors I am getting or if it even thinks that authentication is turned on I would really appreciate it!

I did find one log in tomcat\logs named: stdout_20110316.log and this could be the log that I need…in it I found:

20:12:22,374  INFO  [management.subsystems.ChildApplicationContextFactory] Starting 'Authentication' subsystem, ID: [Authentication, managed, alfrescoNtlm1]‍

does this mean that it is not even trying to use ldap-ad authentication?

thanks again

Jamie

Find more posts tagged with

Comments

mrogers

Don't ever hack files below WEB-INF.

Your config goes into alfresco-global.properties or the shared folder.

docjay

thanks - I should have read the wiki more closely and noticed only to modify the alfresco-global.properties file…

so I think I might have ldap-ap setup right, but I still can't authenticate:

#————-
authentication.chain=ldap1:ldap-ad
ldap.authentication.active=true
ldap.authentication.java.naming.security.authentication=DIGEST-MD5
ldap.authentication.userNameformat=%s@mydomain.com
ldap.authentication.java.naming.provider.url=ldap://server.mydomain.com:389‍‍‍‍‍‍

and in the log I found this:

10:01:24,405  INFO  [management.subsystems.ChildApplicationContextFactory] Startup of 'Authentication' subsystem, ID: [Authentication, managed, ldap1] complete‍

When I go to login I still get an error message: 'the remote server may be unabailable or your authentication details have not been recognized'

I am logging in with just my sAMAccountName as our UPN is sAMAccountName@mydomain.com

any ideas?

thank you for all of your help with this!

docjay

does anyone have any ideas that I can try?

thanks

muralie39

HI,
add the default user name & password

ldap.authentication.defaultAdministratorUserNames=admin
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.principal=admin
ldap.synchronization.java.naming.security.credentials=<password>

try it…