Authentication with OpenLDAP

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

tico

Hi there,

I have Open-xchange (OX) installed on a Linux box (FC5), using an OpenLDAP server on the same host for authentication.

I have installed Alfresco, and would like to share accounts and groups from (OX) through OpenLDAP. Unfortunately, until now I failed to authenticate…

OX uses MD5, SHA, or plain text encryption mechanism… thus I believe I have to configure Alfresco to use etheir DIGEST-MD5 or simple mechanism…



I tried several combination for the userNameFormat, but nothing works… Any help is very welcome !!

Thansk,

Eric.
Here is an extract of an ldif file from my OpenLDAP server :

dn: dc=localdomain
objectClass: dcObject
objectClass: organization
dc: localdomain
o: XProject
structuralObjectClass: organization
entryUUID: ab0d60c2-a766-102a-9881-6f99fee6dc50
creatorsName: uid=mailadmin,dc=localdomain
modifiersName: uid=mailadmin,dc=localdomain
createTimestamp: 20060714092709Z
modifyTimestamp: 20060714092709Z
entryCSN: 20060714092709Z#000000#00#000000

dn: ou=OxObjects,dc=localdomain
objectClass: top
objectClass: organizationalUnit
ou: OxObjects
structuralObjectClass: organizationalUnit
entryUUID: ab0da546-a766-102a-9882-6f99fee6dc50
creatorsName: uid=mailadmin,dc=localdomain
modifiersName: uid=mailadmin,dc=localdomain
createTimestamp: 20060714092709Z
modifyTimestamp: 20060714092709Z
entryCSN: 20060714092709Z#000001#00#000000

dn: ou=Users,ou=OxObjects,dc=localdomain
objectClass: top
objectClass: organizationalUnit
ou: Users
structuralObjectClass: organizationalUnit
entryUUID: ab0dedee-a766-102a-9883-6f99fee6dc50
creatorsName: uid=mailadmin,dc=localdomain
modifiersName: uid=mailadmin,dc=localdomain
createTimestamp: 20060714092709Z
modifyTimestamp: 20060714092709Z
entryCSN: 20060714092709Z#000002#00#000000

…

dn: uid=e.grammatico,ou=Users,ou=OxObjects,dc=localdomain
objectClass: top
objectClass: shadowAccount
objectClass: posixAccount
objectClass: person
objectClass: inetOrgPerson
objectClass: OXUserObject
shadowMin: 0
shadowMax: 9999
shadowWarning: 7
shadowExpire: 0
uidNumber: 1002
gidNumber: 500
homeDirectory: /home/e.grammatico/
loginShell: /bin/bash

 …

mailEnabled: OK
lnetMailAccess: TRUE
OXGroupID: 500
structuralObjectClass: inetOrgPerson
entryUUID: 89912786-aab2-102a-811c-2b781a005e83
creatorsName: uid=mailadmin,dc=localdomain
createTimestamp: 20060718140748Z

…

userPassword:: ***
entryCSN: 20060914072836Z#000000#00#000000
modifiersName: uid=e.grammatico,ou=Users,ou=OxObjects,dc=localdomain
modifyTimestamp: 20060914072836Z
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

rivetlogic

Hi,

Assuming you're using simple authentication; if you can use ldapsearch to view the relevant objects in your ldap server, then the Distinguished Name binddn (-D option) you use  must be the same string formatted in the userNameFormat property.

Hope this helps,

–Aladdin