RE: Ldap Configuration in Liferay 6.1 EE

[Maruthi Kumari J N，修改在11 年前。]

hi,


I am using Liferay 6.1 EE. There is no admin portlet. how we can configure ldap in Liferay UI with out admin portlet. I am using Apache directory server
Any Ideas.......................................................... help me

Regards,
Maruthi

[Jignesh Vachhani，修改在11 年前。]

Hi Maruthi,
You can configure LDAP from liferayUI control panel section.

[Maruthi Kumari J N，修改在11 年前。]

hi,

In Liferay 6.1 EE ControlPanel where exactly i have to do.
help me..........................

Regards,
Maruthi

[Jignesh Vachhani，修改在11 年前。]

you can see below attached screenshots :

[Mayur Soneta，修改在11 年前。]

Were you able to get Maruthi. I was able to successfully set with Apache.

[Hitoshi Ozawa，修改在11 年前。]

The link is no longer valid. It's point to developing with web content.

Additional note to the steps is, the page shown is accessed by "Go to" -> "Control Panel" -> "Portal Settings". You have to be an administrator.

[Maruthi Kumari J N，修改在11 年前。]

hi,

I am facing issue to test ldap user in liferay. user is there in the ldap. i have entered all values which are required. but see the attached screen shot. it is not coming.

11:33:44,883 ERROR [PortalLDAPImporterImpl:672] Unable to import user uid=testuser: null:null:No attributes
com.liferay.portal.UserScreenNameException: Screen name cannot be null for
at com.liferay.portal.security.ldap.DefaultLDAPToPortalConverter.importLDAPUser(DefaultLDAPToPortalConverter.java:117)
at com.liferay.portal.security.ldap.PortalLDAPImporterImpl.importUser(PortalLDAPImporterImpl.java:861)
at com.liferay.portal.security.ldap.PortalLDAPImporterImpl.importFromLDAPByUser(PortalLDAPImporterImpl.java:662)
at com.liferay.portal.security.ldap.PortalLDAPImporterImpl.importFromLDAP(PortalLDAPImporterImpl.java:189)
at com.liferay.portal.security.ldap.PortalLDAPImporterImpl.importFromLDAP(PortalLDAPImporterImpl.java:128)
at com.liferay.portal.security.ldap.PortalLDAPImporterImpl.importFromLDAP(PortalLDAPImporterImpl.java:95)
at com.liferay.portal.security.ldap.PortalLDAPImporterUtil.importFromLDAP(PortalLDAPImporterUtil.java:30)
at com.liferay.portlet.admin.messaging.LDAPImportMessageListener.doReceive(LDAPImportMessageListener.java:28)
at com.liferay.portal.kernel.messaging.BaseMessageListener.receive(BaseMessageListener.java:25)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.liferay.portal.kernel.bean.ClassLoaderBeanHandler.invoke(ClassLoaderBeanHandler.java:54)
at $Proxy279.receive(Unknown Source)
at com.liferay.portal.kernel.scheduler.messaging.SchedulerEventMessageListenerWrapper.receive(SchedulerEventMessageListenerWrapper.java:77)
at com.liferay.portal.kernel.messaging.InvokerMessageListener.receive(InvokerMessageListener.java:63)
at com.liferay.portal.kernel.messaging.ParallelDestination$1.run(ParallelDestination.java:108)
at com.liferay.portal.kernel.concurrent.ThreadPoolExecutor$WorkerTask._runTask(ThreadPoolExecutor.java:669)
at com.liferay.portal.kernel.concurrent.ThreadPoolExecutor$WorkerTask.run(ThreadPoolExecutor.java:580)
at java.lang.Thread.run(Thread.java:619)

help me........................................


Regards,
Maruthi

[Hitoshi Ozawa，修改在11 年前。]

Looking at the messages, values are being set to null. It seems there is errors in your settings.

[Jignesh Vachhani，修改在11 年前。]

Which user search filter you have applied in text box ?
Could you please provide some screen shot of settings ?

[Maruthi Kumari J N，修改在11 年前。]

hi,

I have attached the screen shots.
help me to resolve this. i have a dead line.

Regards,
Maruthi

[Maruthi Kumari J N，修改在11 年前。]

hi,

I have attached the screen shots.
help me to resolve this. i have a dead line.

Regards,
Maruthi

[Jignesh Vachhani，修改在11 年前。]

Try to Use Object class in user filer as : inetOrgPerson

[Amit Doshi，修改在11 年前。]

Hi,

Please find image for the configuration of LDAP with Liferay.

You had done wrong configuration setting. Actually you need to map with the Attributes of the LDAP in Liferay, not with their values.

That's the reason you are not getting any results.

Hope it helps,

Thanks & Regards,
Amit Doshi

[Maruthi Kumari J N，修改在11 年前。]

hi,

Thanks!

I got the user now. I am trying to login with the ldap user. but it is failing. the below is my configuration settings in portal-ext.properties.

#Ldap Settings
ldap.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.referral=follow
ldap.base.provider.url.0=ldap://localhost:10389
ldap.base.dn.0=ou=users,ou=system
ldap.security.principal.0=uid=admin,ou=system
ldap.security.credentials.0=secret


ldap.auth.enabled=true
ldap.auth.required=false
ldap.import.method=user
ldap.auth.password.encryption.algorithm.types=SSHA
ldap.auth.search.filter.0=(mail=@email_address@)

ldap.import.user.search.filter.0=(objectClass=Person)


ldap.user.mappings.0=screenName=uid\npassword=userPassword\nemailAddress=mail\nfirstName=cn\nlastName=sn\njobTitle=title\ngroup=memberOf\nfullName=cn
ldap.import.user.password.default=secret


#ldap.group.mappings=groupName=cn\ndescription=description\nuser=member

is there any thing wrong in my config? please help me...........................

Regards,
Maruthi

[Jignesh Vachhani，修改在11 年前。]

Set ldap.auth.required=false to true and try once again

[Amit Doshi，修改在11 年前。]

Hi Maruthi,

Why you are making all the things together, either do LDAP Settings from Liferay Control panel or use portal-ext.properties.

If you use both of them then you will get confused and also like to add that among both of them portal-ext.properties changes will be overridden by ldap settings from control panel that you have done.

My Suggestion is that if you are using LDAP Settings from Liferay Control panel then add only that properties that you can't able to add with GUI or else do full configuration with portal-ext.properties.

As per jignesh suggestion check the entry in the portletprefrence table whether the ldap.auth.required=false is true or false and if it is false then make it true.

Thanks & Regards,
Amit Doshi

[David H Nebinger，修改在11 年前。]

Amit Doshi:

Why you are making all the things together, either do LDAP Settings from Liferay Control panel or use portal-ext.properties.

Setting them in portal-ext.properties is valuable for instance setup, and these settings are only used the first time Liferay starts.

After Liferay has started, you must manage all changes in the control panel, because portal-ext.properties is not referenced for LDAP settings after initial startup.

[Prasanna Raj，修改在11 年前。]

I configured LDAP using the control panel , and after I logged out, due to a configuration error, I'm unable to login into the portal at all.
Can I update portal-ext.properties file to disable the configurations I made using control panel and try logging in? Will that work?
If control panel configurations takes precedence over properties file, how do I revert back to previous config?

Apologies for my beginner-level questions.
Thanks.

[Milan Kostoláni，修改在11 年前。]

You have probably checked the mark LDAP required for login and you are trying to log with someone who is not in LDAP such as Test (if you havent done export)

or just check if your ldap server is online.

Solution, check your ldap server and try to add the test user manually.

[Prasanna Raj，修改在11 年前。]

Thats Right! I had enabled the required checkbox , but since I couldn't log into Liferay using my credentials,
I changed the preference in my PORTALPREFERENCES table and disabled the required checkbox pref, Restarted my server. Now I could login using my user credentials.
However, I have a new issue now.

I added this line in my portal-ext.properties file

users.screen.name.validator=com.liferay.portal.security.auth.LiberalScreenNameValidator

to enable liferay to allow usernames with underscores or hyphens.

However, even after this change, liferay doesn't seem to accept usernames with underscores or hyphens.
Since the uids in my LDAP are all in fn_sn format, I'm now unable to import users from LDAP. Am I missing anything? I'm using LR 6.1 CE.

Thanks.