Company dedicated to web development, graphic design, photography and web hosting.

Blog

1. Add to the file ${ALFRESCO_DIR}/tomcat/shared/classes/alfresco-global.properties the next line:
   
   1

   authentication.chain=alfrescoNtlm1:alfrescoNtlm,ldap1:ldap

1. Create the file ldap-authentication.properties the path ${ALFRESCO_DIR}/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1/
   

1. Add the next line to the file ldap-authentication.properties to activate authentication:
   1

   ldap.authentication.active=true
2. Add the next lines to the file ldap-authentication.properties to add the LDAP server:
   12345678

   # Base DN containing users

   ldap.authentication.userNameFormat=uid=%s,ou=Users,dc=ochounos,dc=com

   # The URL to connect to the LDAP server

   ldap.authentication.java.naming.provider.url=ldap://${LDAP_SERVER_HOST}:${LDAP_SERVER_PORT}

   # The authentication mechanism to use

   ldap.authentication.java.naming.security.authentication=simple

1. Add the next line to the file ldap-authentication.properties to activate synchronization:
   1

   ldap.synchronization.active=true
2. Add the next lines to the file ldap-authentication.properties defining user and password for access:
   12345

   # The default principal to use (only used for LDAP sync)

   ldap.synchronization.java.naming.security.principal=${LDAP_ADMIN}

   # The password for the default principal (only used for LDAP sync)

   ldap.synchronization.java.naming.security.credentials=${LDAP_PASSWORD}
3. Add the next lines to the file ldap-authentication.properties to configure queries:
   1234567891011121314151617181920212223

   # The query to select all objects that represent the groups to import.

   ldap.synchronization.groupQuery=(objectclass\=groupOfNames)

   # The query to select objects that represent the groups to import that have changed since a certain time.

   ldap.synchronization.groupDifferentialQuery=(&(objectclass\=groupOfNames)(!(modifyTimestamp<\={0})))

   # The query to select all objects that represent the users to import.

   ldap.synchronization.personQuery=(objectclass\=inetOrgPerson)

   # The query to select objects that represent the users to import that have changed since a certain time.

   ldap.synchronization.personDifferentialQuery=(&(objectclass\=inetOrgPerson)(!(modifyTimestamp<\={0})))

   # The group search base restricts the LDAP group query to a sub section of tree on the LDAP server.

   ldap.synchronization.groupSearchBase=ou\=Groups,dc\=ochounos,dc\=com

   # The user search base restricts the LDAP user query to a sub section of tree on the LDAP server.

   ldap.synchronization.userSearchBase=ou\=Users,dc\=ochounos,dc\=com

   # The name of the operational attribute recording the last update time for a group or user.

   ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp

   # The timestamp format. Unfortunately, this varies between directory servers.

   ldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'
4. Add the next lines to the file ldap-authentication.properties to map ldap fields:
   1234567891011121314151617181920212223242526272829

   # The attribute name on people objects found in LDAP to use as the uid in Alfresco

   ldap.synchronization.userIdAttributeName=uid

   # The attribute on person objects in LDAP to map to the first name property in Alfresco

   ldap.synchronization.userFirstNameAttributeName=givenName

   # The attribute on person objects in LDAP to map to the last name property in Alfresco

   ldap.synchronization.userLastNameAttributeName=sn

   # The attribute on person objects in LDAP to map to the email property in Alfresco

   #ldap.synchronization.userEmailAttributeName=mail

   # The attribute on person objects in LDAP to map to the organizational id property in Alfresco

   ldap.synchronization.userOrganizationalIdAttributeName=o

   # The default home folder provider to use for people created via LDAP import

   ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider

   # The attribute on LDAP group objects to map to the gid property in Alfrecso

   ldap.synchronization.groupIdAttributeName=cn

   # The group type in LDAP

   ldap.synchronization.groupType=groupOfNames

   # The person type in LDAP

   ldap.synchronization.personType=inetOrgPerson

   # The attribute in LDAP on group objects that defines the DN for its members

   ldap.synchronization.groupMemberAttributeName=member