As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.
Hi All,
I am getting errors while configuring LDAP with my SDK 3.0 after changing alfresco-global-properties file.
As i am new towards administrating Alfresco topic. I am following documentation example given. Please find the image of error occuring while running SDK 3.0.
Thanks,
Piyush
Hi @piyush48,
Take a look at this thread, it might be of help.
HTH
You are not effectively overriding default Alfresco ldap-ad properties, as the logs state it is trying to connect to ldap://domaincontroller.company.com:389, which is the default value for ldap.authentication.java.naming.provider.url, as you can see here: https://github.com/Alfresco/alfresco-repository/blob/3752edb6d69fe5ff4c47bbce4909193bd2db9a97/src/main/resources/alfresco/subsystems/Authentication/ldap-ad/ldap-ad-authentication.properties#L20
Check your ldap-ad configuration properties.
I have tried following the code presented on link you have share but still having error with connection of LDAP.
Please look at my alfresco-global.properties file
authentication.chain=alfrescoNtlm1:alfrescoNtlm,ldap-ad1:ldap-adldap.authentication.active=trueldap.authentication.allowGuestLogin=trueldap.authentication.userNameFormat=%s@alfresco.comldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactoryldap.authentication.java.naming.provider.url=ldap://alfresco.com:389ldap.authentication.java.naming.security.authentication=simpleldap.authentication.escapeCommasInBind=falseldap.authentication.escapeCommasInUid=falseldap.authentication.defaultAdministratorUserNames=Administrator
ldap.synchronization.active=trueldap.synchronization.java.naming.security.principal=administrator@alfresco.comldap.synchronization.java.naming.security.credentials=secretldap.synchronization.queryBatchSize=1000ldap.synchronization.attributeBatchSize=1000synchronization.synchronizeChangesOnly=falsesynchronization.allowDeletions=truesynchronization.syncWhenMissingPeopleLogIn=true
ldap.synchronization.groupQuery=objectclass\=groupldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(modifyTimestamp<\={0})))
ldap.synchronization.personQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(|(ou=alfresco=alfresco,dc=com)(ou=alfresco,dc=alfresco,dc=com)))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(|(ou=alfresco,dc=alfresco,dc=com)(ou=alfresco,dc=alfresco,dc=com))(!(modifyTimestamp<\={0})))
ldap.synchronization.groupSearchBase=ou\=alfresco,dc\=alfresco,dc\=com
ldap.synchronization.userSearchBase=dc\=alfresco,dc\=com
ldap.synchronization.modifyTimestampAttributeName=modifyTimestampldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'ldap.synchronization.userIdAttributeName=sAMAccountNameldap.synchronization.userFirstNameAttributeName=givenNameldap.synchronization.userEmailAttributeName=mailldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProviderldap.synchronization.groupDisplayNameAttributeName=displayNameldap.synchronization.groupType=groupldap.synchronization.personType=userldap.synchronization.groupMemberAttributeName=memberldap.synchronization.enableProgressEstimation=true
Please suggest me changes to this file to solve error.
Also Eddie i have done changes as posted in your thread. i have provided my alfresco-global properties file above please go through and suggest.
Looking at some of the values you are using, these are the default values - these need replacing with your equivalents. For example,
ldap.authentication.userNameFormat=%s@alfresco.com
@alfresco.com should be replaced with your own domain.
Similarly,
ldap.authentication.java.naming.provider.url=ldap://alfresco.com:389 .... ldap.synchronization.java.naming.security.principal=administrator@alfresco.com
need changing - the 1st is looking to alfresco.com when it should be referring to the URL to connect to your own LDAP server.
This is probably the primary reason it says it's unable to connect to the LDAP server.
