LDAP-AD Not Working

cancel
Showing results for 
Search instead for 
Did you mean: 
joe_rella1
Member II

LDAP-AD Not Working

I am trying to configure LDAP-AD for Alfresco. I added the authenticator "example.com" with the following values:

Format: Default

LDAP server URL: ldap://server.example.com:389

Security: simple

Security Principal Namesvc_alf@example.com

Security: simple

Security Principal Credentials: XXXXX

LDAP Synchronization: Enabled

I configured the User Search Base and Group Search Base using dn consistent with my environment.

I then ran synchronization. Here are the results:

2Example.comLDAP (Active Directory)TrueTrue
1 Group AnalysisStart Time: 25 Jan 2017 14:19:44
End Time: 25 Jan 2017 14:19:44
Successful: 0
Failed: 0
Percent Complete: 100%
Total Results: 0
6 User Creation and AssociationStart Time: 25 Jan 2017 14:21:51
End Time: 25 Jan 2017 14:22:54
Successful: 2
Failed: 0
Percent Complete: Unknown
Total Results: 1

When I try to test, I get the following error:

Authentication Test Result

Test Failed

Authentication Message

00250957 Failed to authenticate, authenticator with name, example.com, not found

Test Diagnostics

Authenticator not found:Failed

Any help would be greatly appreciated!

6 Replies
afaust
Master

Re: LDAP-AD Not Working

Sounds like you used the Admin Console to set this up. That means you are using Alfresco Enterprise Edition, and any support requests should typically go to Alfresco directly via the support portal (support.alfresco.com).

Did you really setup your LDAP server with the DNS name ldap.example.com? Otherwise this cannot work... On the other hand, you seem to have two users sucessfully synchronised.

joe_rella1
Member II

Re: LDAP-AD Not Working

I did use the Admin Console, thank you for the support tip.

No, I did not actually use example.com, lol.

cesarista
Customer

Re: LDAP-AD Not Working

Hi:

For confirmation: Did you use "user" as login or "user@example.com" in the ldap test ? You need to put "user" (sAMAccountName) in the login. You may check with "svc_alf" for example.

Regards.

--C.

joe_rella1
Member II

Re: LDAP-AD Not Working

I did use a valid sAMAccountName for the test.

What is weird, is that since I posted this, I tested logging into the admin console using an AD account and it was successful. So it would appear that the authentication mech is working, but the "test" feature is not.

cesarista
Customer

Re: LDAP-AD Not Working

Mmmm.. it sounds a little bit strange, although better in that direction.

Maybe you have passthu authentication subsystem enabled too (pointing to the same domain server), and ldap-ad authentication disabled (while ldap-ad is only used for sync users). May be the case ?

Regards.

--C.

joe_rella1
Member II

Re: LDAP-AD Not Working

So that is weird... I left it alone, came back this morning, tested again.... and it worked!