Configurer une connexion LDAP pour Alfresco 3.4

[sar]

Voici ce que j'ai fait chez moi avec une version 3.4c

J'ai configuré alfresco pour une connexion LDAP et une synchronisation des utilisateurs et des groupes LDAP.

Pour l'Authentification :
Modifiez

[/u01/alfresco-3.4.c/tomcat/shared/classes/alfresco-global.properties]
…
authentication.chain=alfrescoNtlm:alfrescoNtlm,ldap1:ldap
…
‍‍‍‍‍‍

Créer le repertoire

tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1
‍‍‍

Chemin déclaré à l'envers dans authentication.chain

Copier les fichiers

cp tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/ldap/ldap-authentication-context.xml tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1/ldap-authentication-context.xml

cp tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/ldap/default-authentication.properties tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1/ldap-authentication.properties
‍‍‍‍‍

Configurez
tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1/ldap-authentication.properties
Toutes les valeurs entre crochet sont à adapter à votre configuration

ldap.authentication.active=true
ldap.authentication.userNameFormat=uid\=%s,ou\=people,dc\=[xxx],dc\=[xx]
ldap.authentication.java.naming.provider.url=ldap://[serveur]:389
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.defaultAdministratorUserNames=sandrine.rivoire
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.principal=ou\=[xxx],dc\=[xxx],dc\=[xx]
ldap.synchronization.java.naming.security.credentials=[passwd]
ldap.synchronization.queryBatchSize=1000
ldap.synchronization.attributeBatchSize=0
ldap.synchronization.groupQuery=(cn\=*)
ldap.synchronization.groupDifferentialQuery=(cn\=*)
ldap.synchronization.personQuery=(&((eduPersonAffiliation\=member)(eduPersonAffiliation\=employee)))
ldap.synchronization.personDifferentialQuery=(&((eduPersonAffiliation\=member)(eduPersonAffiliation\=employee)))
ldap.synchronization.groupSearchBase=ou\=groups,dc\=[xxx],dc\=[xx]
ldap.synchronization.userSearchBase=ou\=people,dc\=u-psud,dc\=fr
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'
ldap.synchronization.userIdAttributeName=uid
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=o
ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupDisplayNameAttributeName=description
ldap.synchronization.groupType=groupOfNames
ldap.synchronization.personType=inetOrgPerson
ldap.synchronization.groupMemberAttributeName=member
ldap.synchronization.enableProgressEstimation=true
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Pour la Synchronisation :
Copier les fichiers

cp tomcat//webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Synchronization/default/default-synchronization-context.xml tomcat/shared/classes/alfresco/extension/subsystems/Synchronization/ldap/ldap1/ldap-synchronization-context.xml
cp tomcat//webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Synchronization/default/default-synchronization.properties tomcat/shared/classes/alfresco/extension/subsystems/Synchronization/ldap/ldap1/ldap-synchronization.properties
‍‍‍‍

Copier

cp tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1/ldap-authentication.properties
 tomcat/shared/classes/alfresco/extension/subsystems/Synchronization/ldap/ldap1/ldap-authentication.properties‍‍

Configurez pour mise à jour des utilisateurs et des groupes
[/u01/alfresco-3.4.c/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1/ ldap-synchronization.properties]
A adapter à vos besoins

synchronization.synchronizeChangesOnly=true
synchronization.import.cron=0 0 0 * * ?
synchronization.syncWhenMissingPeopleLogIn=true
synchronization.syncOnStartup=true
synchronization.autoCreatePeopleOnLogin=true
synchronization.loggingInterval=100
synchronization.workerThreads=2
‍‍‍‍‍‍‍‍‍

Enfin, redémarrer le serveur