Alfresco with OpenLDAP(Simple Authentication) version 3.1.

Alfresco with OpenLDAP(Simple Authentication)

version 3.1.1

2008/10/28
mryoshio

1/10
Alfresco with OpenLDAP(Simple Authentication) version 3.1.1

Index
Index..................................................................................................................................................... 2
Summary...............................................................................................................................................3
Notice ..............................................................................................................................................3
System Environment............................................................................................................................ 4
Software........................................................................................................................................... 4
LDAP Entries....................................................................................................................................... 5
Tree.................................................................................................................................................. 5
Properties......................................................................................................................................... 6
Alfresco Configuration For LDAP....................................................................................................... 8
Authentication..................................................................................................................................8
Synchronization............................................................................................................................... 9
Check it works.................................................................................................................................... 10

2/10
Alfresco with OpenLDAP(Simple Authentication) version 3.1.1

Summary
This report shows how to configure your Alfresco in using LDAP for authentication by simple
authentication. Add special settings if you use other ways for authentication.

Notice
Configuration(e.g. mryoshio) is for sample settings. So you have to change them for your
environment.

3/10
Alfresco with OpenLDAP(Simple Authentication) version 3.1.1

System Environment

Software
Alfresco Enterprise 3.1.1
OpenLDAP 2.3.35
MySQL 5.1.36
OS Mac OS X(10.5.8)

4/10
Alfresco with OpenLDAP(Simple Authentication) version 3.1.1

LDAP Entries

Tree1

dc=sample,dc=com

ou=people,dc=sample,dc=com inetOrgPerson

cn=Manager,ou=people,dc=sample,dc=com
cn=admin,ou=people,dc=sample,dc=com

cn=guest,ou=people,dc=sample,dc=com

cn=mryoshio,ou=people,dc=sample,dc=com

ou=groups,dc=sample,dc=com groupOfUniqueNames

cn=firstGroup,ou=groups,dc=sample,dc=com
cn=secondGroup,ou=groups,dc=sample,dc=com

cn=thirdGroup,ou=groups,dc=sample,dc=com

1 LDAP entries of admin and guest are not needed if you use chaining of alfresco and LDAP.

5/10
Alfresco with OpenLDAP(Simple Authentication) version 3.1.1

Properties
# dc=sample,dc=com
Attribute Description Version
objectClass dcObject
objectClass organization
dc sample
o sample

# ou=people,dc=sample,dc=com
Attribute Description Version
objectClass organizationalUnit
objectClass top
ou people

6/10
Alfresco with OpenLDAP(Simple Authentication) version 3.1.1

# cn=mryoshio,ou=people,dc=sample,dc=com
Attribute Description Version
objectClass inetOrgPerson
objectClass organizationalPerson
objectClass person
objectClass top
cn mryoshio
sn YAMADA
givenName Taro
mail taro.yamada@sample.com
o sample
userPassword <Plain Text Password>

# cn=firstGroup,ou=groups,dc=sample,dc=com
Attribute Description Version
objectClass groupOfUniqueNames
objectClass top
uniqueMember cn=admin,ou=people,dc=sample,dc=com
uniqueMember cn=mryoshio,ou=people,dc=sample,dc=com
description first group of sample

7/10
Alfresco with OpenLDAP(Simple Authentication) version 3.1.1

Alfresco Configuration For LDAP

Authentication
# ldap-authentication.properties

ldap.authentication.userNameFormat=cn=%s,ou=people,dc=sample,dc=com
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactor
ldap.authentication.java.naming.provider.url=ldap://127.0.0.1:389
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.java.naming.security.principal=cn=Manager,ou=people,dc=sample,dc=com
ldap.authentication.java.naming.security.credentials=managerpassword
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false

8/10
Alfresco with OpenLDAP(Simple Authentication) version 3.1.1

Synchronization
# ldap-synchronisation.properties

ldap.synchronisation.personQuery=(objectclass=inetOrgPerson)
ldap.synchronisation.personSearchBase=ou=people,dc=sample,dc=com
ldap.synchronisation.userIdAttributeName=cn
ldap.synchronisation.userFirstNameAttributeName=givenName
ldap.synchronisation.userLastNameAttributeName=sn
ldap.synchronisation.userEmailAttributeName=mail
ldap.synchronisation.userOrganizationalIdAttributeName=o
ldap.synchronisation.defaultHomeFolderProvider=userHomesHomeFolderProvider
ldap.synchronisation.groupQuery=(objectclass=groupOfUniqueNames)
ldap.synchronisation.groupSearchBase=ou=groups,dc=sample,dc=com
ldap.synchronisation.groupIdAttributeName=cn
ldap.synchronisation.groupType=groupOfUniqueNames
ldap.synchronisation.personType=inetOrgPerson
ldap.synchronisation.groupMemberAttributeName=uniqueMember
ldap.synchronisation.import.person.cron=0 0 * * * ?
ldap.synchronisation.import.group.cron=0 30 * * * ?
ldap.synchronisation.import.group.clearAllChildren=false

9/10
Alfresco with OpenLDAP(Simple Authentication) version 3.1.1

Check it works
Now you start Alfresco and could login using LDAP information.

10/10