nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

LDAP Authentication AD by EMail

mugger

Hello!

How i can do authentification by email?
Now work by "cn", but users want by email!

Please, help!

Find more posts tagged with

Comments

mrogers

You need to change your ldap.synchronization.userIdAttributeName property from uid to the property name of of the email address in ldap. Probably 'mail'

mugger

Thanks, but unfortunately does not work

My config:

ldap.authentication.active=true
ldap.authentication.allowGuestLogin=true
ldap.authentication.userNameFormat=%s
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://usr.local:3268
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.defaultAdministratorUserNames=admin
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.authentication=simple
ldap.synchronization.java.naming.security.principal=CN=ad.connect,ou=ServiceAccounts,ou=Domain Users,dc=usr,dc=local
ldap.synchronization.java.naming.security.credentials=XXXX
ldap.synchronization.queryBatchSize=1000
ldap.synchronization.attributeBatchSize=1000
ldap.synchronization.groupQuery=(objectclass\=group)
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(whenChanged<\={0})))
ldap.synchronization.personQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(whenChanged<\={0})))
ldap.synchronization.groupSearchBase=ou=Domain Users,dc=usr,dc=local
ldap.synchronization.userSearchBase=ou=Domain Users,dc=usr,dc=local
ldap.synchronization.modifyTimestampAttributeName=whenChanged
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'
ldap.synchronization.userIdAttributeName=mail
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=company
ldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProvider
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupDisplayNameAttributeName=displayName
ldap.synchronization.groupType=group
ldap.synchronization.personType=user
ldap.synchronization.groupMemberAttributeName=member
ldap.synchronization.enableProgressEstimation=true
ldap.authentication.java.naming.read.timeout=0
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

ranajitjana

Please find that I am able to find the user but when i try to login it does not allow me.

AlfrescoUserSearch.png

ranajitjana

As i have marked in my other post for alfresco LDAP setup is also important as afresco directly look at the dn. Please find the changes i have done to login via email

ldap.authentication.userNameFormat=mail=%s,ou=people,dc=org,dc=com
ldap.synchronization.userIdAttributeName=mail

But look at the screenshot carefully , I am able to login only if my dn is identified by the email (find the attachement) so i could login only via hello@liferay.com

LdapChanges.png

ranajitjana

Follow this post http://stackoverflow.com/questions/6428283/redirect-loop-problem-for-web-policy-agent/30373181#30373181