Open Source Document Management System | OpenKM

PostPosted:**Mon May 10, 2010 9:04 am**

Hi Sir,

who can kindly tell me how to install OpenKM 4.1.
I have downloaded java 1.6.20 and openkm4.1 software and unzip to complete. I do not know the next steps are?
There are other settings, we should pay attention to the place?
In addition, I view the java-version is 1.6.16 how to update into 1.6.20
After installation is complete, the user account part of the authentication required by Active Directory Service
I have to join the subscriber and also have account password
Is an example of web page changes, ready to use it yet.
Or other parts can work together to set up to tell me

Or e-mail to me. my e-mail address is eva4182@yahoo.com.tw

Thanks for everyone help me to build it
Eva

PostPosted:**Mon May 10, 2010 9:52 am**

Let's do installation in phases, becasue I'm lost:
1- take a look at wiki.openkm.com at quick install guide -> First stage is get OpenKM default configuration running

Do you've got in running ? You authenticate with okmAdmin user etc... all ok at this point ?

After it we'll considering the second

PostPosted:**Tue May 11, 2010 2:19 am**

Dear everyone,
I've install openkm. When I login with user okmAdmin and password "admin", the page displayed only contain
"okm:home"
"Go to login page" ---> link
When I click "Go to login page" link, it displayed login page again.
Why can't the application desktop displayed?
Is there something that I must set?

Give me any guidance please. Thank you so much

PostPosted:**Tue May 11, 2010 8:18 pm**

This error means a error in the repository creation. Stop JBoss, remove $JBOSS_HOME/repository folder and start JBoss again. A new empty repository will be generated.

PostPosted:**Wed May 12, 2010 6:16 am**

To:Jllort

I can use okmAdmin / admin access to the system
And to add two different users of 002001 and 002002
Well, the password is also set
They are userrole
In my Active Directory have their accounts in
But success can not be verified
I have modified the OpenKM.cfg and login.xml
I use openkm account into the Active Directory system
It is also a domain admin account manager
This account into the Active Directory system, no problem
Will also need to change the other place?

PostPosted:**Wed May 12, 2010 10:33 am**

Hi jllort ,

After I retry config but still have some error message,fail to login message is "Authentication error" ,please to help see the problem.

server.log

Code: Select all

[root@openkm ~]# tail -f $JBOSS_HOME/server/default/log/server.log
2010-05-12 18:35:35,447 DEBUG [org.jboss.deployment.scanner.URLDeploymentScanner] Watch URL for: file:/opt/4.1/server/default/deploy/jmx-console.war/ -> file:/opt/4.1/server/default/deploy/jmx-console.war/WEB-INF/web.xml
2010-05-12 18:35:35,452 DEBUG [org.jboss.deployment.scanner.AbstractDeploymentScanner$ScannerThread] Notified that enabled: true
2010-05-12 18:35:35,454 DEBUG [org.jboss.deployment.scanner.URLDeploymentScanner] Started jboss.deployment:type=DeploymentScanner,flavor=URL
2010-05-12 18:35:35,464 DEBUG [org.jboss.system.ServiceController] Starting dependent components for: jboss.deployment:type=DeploymentScanner,flavor=URL dependent components: []
2010-05-12 18:35:35,584 DEBUG [org.jboss.deployment.MainDeployer] End deployment start on package: jboss-service.xml
2010-05-12 18:35:35,584 DEBUG [org.jboss.deployment.MainDeployer] Deployed package: file:/opt/4.1/server/default/conf/jboss-service.xml
2010-05-12 18:35:35,585 DEBUG [org.jboss.web.tomcat.service.JBossWeb] Saw org.jboss.system.server.started notification, starting connectors
2010-05-12 18:35:35,596 INFO  [org.apache.coyote.http11.Http11Protocol] Starting Coyote HTTP/1.1 on http-0.0.0.0-80
2010-05-12 18:35:35,635 INFO  [org.apache.coyote.ajp.AjpProtocol] Starting Coyote AJP/1.3 on ajp-0.0.0.0-8009
2010-05-12 18:35:35,666 INFO  [org.jboss.system.server.Server] JBoss (MX MicroKernel) [4.2.3.GA (build: SVNTag=JBoss_4_2_3_GA date=200807181439)] Started in 54s:784ms

[root@openkm ~]#

after ./run.sh

Code: Select all

=========================================================================

  JBoss Bootstrap Environment

  JBOSS_HOME: /opt/4.1

  JAVA: /usr/java/jdk1.6.0_20/bin/java

  JAVA_OPTS: -Dprogram.name=run.sh -server -Xms256m -Xmx1024m -XX:PermSize=64m -XX:MaxPermSize=128m -Djava.awt.headless=true -Djava.net.preferIPv4Stack=true

  CLASSPATH: /opt/4.1/bin/run.jar:/usr/java/jdk1.6.0_20/lib/tools.jar

=========================================================================

18:34:40,872 INFO  [Server] Starting JBoss (MX MicroKernel)...
18:34:40,874 INFO  [Server] Release ID: JBoss [Trinity] 4.2.3.GA (build: SVNTag=JBoss_4_2_3_GA date=200807181439)
18:34:40,876 INFO  [Server] Home Dir: /opt/4.1
18:34:40,876 INFO  [Server] Home URL: file:/opt/4.1/
18:34:40,877 INFO  [Server] Patch URL: null
18:34:40,878 INFO  [Server] Server Name: default
18:34:40,878 INFO  [Server] Server Home Dir: /opt/4.1/server/default
18:34:40,878 INFO  [Server] Server Home URL: file:/opt/4.1/server/default/
18:34:40,878 INFO  [Server] Server Log Dir: /opt/4.1/server/default/log
18:34:40,878 INFO  [Server] Server Temp Dir: /opt/4.1/server/default/tmp
18:34:40,879 INFO  [Server] Root Deployment Filename: jboss-service.xml
18:34:41,610 INFO  [ServerInfo] Java version: 1.6.0_20,Sun Microsystems Inc.
18:34:41,611 INFO  [ServerInfo] Java VM: Java HotSpot(TM) Server VM 16.3-b01,Sun Microsystems Inc.
18:34:41,611 INFO  [ServerInfo] OS-System: Linux 2.6.18-164.el5,i386
18:34:42,375 INFO  [Server] Core system initialized
18:34:46,363 INFO  [WebService] Using RMI server codebase: http://openkm:8083/
18:34:46,365 INFO  [Log4jService$URLWatchTimerTask] Configuring from URL: resource:jboss-log4j.xml
18:34:51,717 INFO  [EJB3Deployer] Starting java:comp multiplexer
18:34:55,364 INFO  [NativeServerConfig] JBoss Web Services - Native
18:34:55,365 INFO  [NativeServerConfig] jbossws-3.0.1-native-2.0.4.GA (build=200803312044)
18:34:56,736 INFO  [Embedded] Catalina naming disabled
18:34:57,008 INFO  [AprLifecycleListener] The Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: /usr/java/jdk1.6.0_20/jre/lib/i386/server:/usr/java/jdk1.6.0_20/jre/lib/i386:/usr/java/jdk1.6.0_20/jre/../lib/i386:/usr/java/jdk1.6.0_20/jre/lib/i386:/usr/java/packages/lib/i386:/lib:/usr/lib
18:34:57,119 INFO  [Http11Protocol] Initializing Coyote HTTP/1.1 on http-0.0.0.0-80
18:34:57,120 INFO  [AjpProtocol] Initializing Coyote AJP/1.3 on ajp-0.0.0.0-8009
18:34:57,120 INFO  [Catalina] Initialization processed in 384 ms
18:34:57,121 INFO  [StandardService] Starting service jboss.web
18:34:57,125 INFO  [StandardEngine] Starting Servlet Engine: JBossWeb/2.0.1.GA
18:34:57,215 INFO  [Catalina] Server startup in 94 ms
18:34:57,370 INFO  [TomcatDeployer] deploy, ctxPath=/, warUrl=.../deploy/jboss-web.deployer/ROOT.war/
18:34:58,318 INFO  [TomcatDeployer] deploy, ctxPath=/invoker, warUrl=.../deploy/http-invoker.sar/invoker.war/
18:34:58,504 INFO  [TomcatDeployer] deploy, ctxPath=/jbossws, warUrl=.../deploy/jbossws.sar/jbossws-context.war/
18:34:58,658 INFO  [TomcatDeployer] deploy, ctxPath=/jbossmq-httpil, warUrl=.../deploy/jms/jbossmq-httpil.sar/jbossmq-httpil.war/
18:35:00,044 INFO  [TomcatDeployer] deploy, ctxPath=/web-console, warUrl=.../deploy/management/console-mgr.sar/web-console.war/
18:35:01,001 INFO  [MailService] Mail Service bound to java:/Mail
18:35:01,006 INFO  [MailService] Mail Service bound to java:/mail/OpenKM
18:35:01,218 INFO  [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/jboss-ha-local-jdbc.rar
18:35:01,289 INFO  [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/jboss-ha-xa-jdbc.rar
18:35:01,528 INFO  [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/jboss-local-jdbc.rar
18:35:01,593 INFO  [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/jboss-xa-jdbc.rar
18:35:01,695 INFO  [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/jms/jms-ra.rar
18:35:01,755 INFO  [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/mail-ra.rar
18:35:01,832 INFO  [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/quartz-ra.rar
18:35:01,851 INFO  [QuartzResourceAdapter] start quartz!!!
18:35:01,995 INFO  [SimpleThreadPool] Job execution threads will use class loader of thread: main
18:35:02,030 INFO  [QuartzScheduler] Quartz Scheduler v.1.5.2 created.
18:35:02,033 INFO  [RAMJobStore] RAMJobStore initialized.
18:35:02,034 INFO  [StdSchedulerFactory] Quartz scheduler 'DefaultQuartzScheduler' initialized from default resource file in Quartz package: 'quartz.properties'
18:35:02,034 INFO  [StdSchedulerFactory] Quartz scheduler version: 1.5.2
18:35:02,034 INFO  [QuartzScheduler] Scheduler DefaultQuartzScheduler_$_NON_CLUSTERED started.
18:35:02,968 INFO  [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=DataSourceBinding,name=DefaultDS' to JNDI name 'java:DefaultDS'
18:35:03,344 INFO  [A] Bound to JNDI name: queue/A
18:35:03,347 INFO  [B] Bound to JNDI name: queue/B
18:35:03,349 INFO  [C] Bound to JNDI name: queue/C
18:35:03,352 INFO  [D] Bound to JNDI name: queue/D
18:35:03,362 INFO  [ex] Bound to JNDI name: queue/ex
18:35:03,399 INFO  [testTopic] Bound to JNDI name: topic/testTopic
18:35:03,403 INFO  [securedTopic] Bound to JNDI name: topic/securedTopic
18:35:03,405 INFO  [testDurableTopic] Bound to JNDI name: topic/testDurableTopic
18:35:03,410 INFO  [testQueue] Bound to JNDI name: queue/testQueue
18:35:03,470 INFO  [UILServerILService] JBossMQ UIL service available at : /0.0.0.0:8093
18:35:03,521 INFO  [DLQ] Bound to JNDI name: queue/DLQ
18:35:03,705 INFO  [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=ConnectionFactoryBinding,name=JmsXA' to JNDI name 'java:JmsXA'
18:35:06,098 INFO  [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=DataSourceBinding,name=OKMActivityDS' to JNDI name 'java:OKMActivityDS'
18:35:06,210 INFO  [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=DataSourceBinding,name=OKMAuthDS' to JNDI name 'java:OKMAuthDS'
18:35:06,238 INFO  [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=DataSourceBinding,name=OKMDashboardStatsDS' to JNDI name 'java:OKMDashboardStatsDS'
18:35:06,311 INFO  [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=DataSourceBinding,name=OKMWorkflowDS' to JNDI name 'java:OKMWorkflowDS'
18:35:11,282 INFO  [DefaultEndpointRegistry] register: jboss.ws:context=OpenKM,endpoint=OKMMail
18:35:11,285 INFO  [DefaultEndpointRegistry] register: jboss.ws:context=OpenKM,endpoint=OKMDocument
18:35:11,287 INFO  [DefaultEndpointRegistry] register: jboss.ws:context=OpenKM,endpoint=OKMSearch
18:35:11,289 INFO  [DefaultEndpointRegistry] register: jboss.ws:context=OpenKM,endpoint=OKMPropertyGroup
18:35:11,291 INFO  [DefaultEndpointRegistry] register: jboss.ws:context=OpenKM,endpoint=OKMTest
18:35:11,296 INFO  [DefaultEndpointRegistry] register: jboss.ws:context=OpenKM,endpoint=OKMRepository
18:35:11,299 INFO  [DefaultEndpointRegistry] register: jboss.ws:context=OpenKM,endpoint=OKMFolder
18:35:11,302 INFO  [DefaultEndpointRegistry] register: jboss.ws:context=OpenKM,endpoint=OKMNotification
18:35:11,305 INFO  [DefaultEndpointRegistry] register: jboss.ws:context=OpenKM,endpoint=OKMAuth
18:35:11,426 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.servlet.RepositoryStartupServlet
18:35:11,426 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.servlet.WebdavServlet
18:35:11,426 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: org.jbpm.web.ProcessUploadServlet
18:35:11,426 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMWorkspaceServlet
18:35:11,427 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMDocumentServlet
18:35:11,427 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMAuthServlet
18:35:11,427 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMRepositoryServlet
18:35:11,427 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMFolderServlet
18:35:11,427 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMPropertyGroupServlet
18:35:11,428 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMDownloadServlet
18:35:11,428 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMDashboardServlet
18:35:11,428 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMGeneralServlet
18:35:11,428 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMNotifyServlet
18:35:11,429 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMWorkflowServlet
18:35:11,429 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMSearchServlet
18:35:11,429 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMFileUploadServlet
18:35:11,429 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMBookmarkServlet
18:35:11,429 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMMailServlet
18:35:11,430 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMPropertyGroupServletAdmin
18:35:11,430 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMWorkflowServletAdmin
18:35:11,430 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMReportServletAdmin
18:35:11,430 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMRepositoryServletAdmin
18:35:11,430 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMStatsServletAdmin
18:35:11,431 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMStatsGraphServletAdmin
18:35:11,431 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMSearchServletAdmin
18:35:11,431 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMGeneralUtilsServletAdmin
18:35:11,431 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMUserServletAdmin
18:35:11,432 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMWorkflowUploadServletAdmin
18:35:11,432 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMWorkflowViewServletAdmin
18:35:11,432 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMFolderServletAdmin
18:35:11,433 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.servlet.TestServlet
18:35:11,499 INFO  [TomcatDeployer] deploy, ctxPath=/OpenKM, warUrl=.../tmp/deploy/tmp4602297508409429878OpenKM-exp.war/
18:35:12,780 INFO  [RepositoryImpl] Starting repository...
18:35:12,839 INFO  [LocalFileSystem] LocalFileSystem initialized at path /opt/4.1/repository/repository
18:35:13,561 INFO  [LocalFileSystem] LocalFileSystem initialized at path /opt/4.1/repository/version
18:35:15,253 INFO  [ConnectionRecoveryManager] Database: Apache Derby / 10.2.1.6 - (452058)
18:35:15,253 INFO  [ConnectionRecoveryManager] Driver: Apache Derby Embedded JDBC Driver / 10.2.1.6 - (452058)
18:35:16,416 INFO  [RepositoryImpl] initializing workspace 'default'...
18:35:16,416 INFO  [LocalFileSystem] LocalFileSystem initialized at path /opt/4.1/repository/workspaces/default
18:35:16,503 INFO  [ConnectionRecoveryManager] Database: Apache Derby / 10.2.1.6 - (452058)
18:35:16,503 INFO  [ConnectionRecoveryManager] Driver: Apache Derby Embedded JDBC Driver / 10.2.1.6 - (452058)
18:35:16,911 INFO  [RepositoryImpl] workspace 'default' initialized
18:35:17,284 INFO  [LocalFileSystem] LocalFileSystem initialized at path /opt/4.1/repository/workspaces/default/index
18:35:17,668 INFO  [SearchIndex] Index initialized: /opt/4.1/repository/workspaces/default/index Version: 2
18:35:17,668 INFO  [RepositoryImpl] Repository started
18:35:25,426 INFO  [SimpleWebdavServlet] resource-path-prefix = '/repository'
18:35:25,426 INFO  [SimpleWebdavServlet] WWW-Authenticate header = 'Basic realm="OpenKM Webdav Server"'
18:35:34,285 INFO  [WSDLFilePublisher] WSDL published to: file:/opt/4.1/server/default/data/wsdl/OpenKM.war/OKMMailService8425926123279037339.wsdl
18:35:34,333 INFO  [WSDLFilePublisher] WSDL published to: file:/opt/4.1/server/default/data/wsdl/OpenKM.war/OKMDocumentService2831207533487046546.wsdl
18:35:34,365 INFO  [WSDLFilePublisher] WSDL published to: file:/opt/4.1/server/default/data/wsdl/OpenKM.war/OKMSearchService988228627831396906.wsdl
18:35:34,391 INFO  [WSDLFilePublisher] WSDL published to: file:/opt/4.1/server/default/data/wsdl/OpenKM.war/OKMPropertyGroupService6840970767615740314.wsdl
18:35:34,415 INFO  [WSDLFilePublisher] WSDL published to: file:/opt/4.1/server/default/data/wsdl/OpenKM.war/OKMTestService8404476975664452982.wsdl
18:35:34,426 INFO  [WSDLFilePublisher] WSDL published to: file:/opt/4.1/server/default/data/wsdl/OpenKM.war/OKMRepositoryService7176927352755127947.wsdl
18:35:34,451 INFO  [WSDLFilePublisher] WSDL published to: file:/opt/4.1/server/default/data/wsdl/OpenKM.war/OKMFolderService1018484486328706125.wsdl
18:35:34,474 INFO  [WSDLFilePublisher] WSDL published to: file:/opt/4.1/server/default/data/wsdl/OpenKM.war/OKMNotificationService8461360285830713531.wsdl
18:35:34,516 INFO  [WSDLFilePublisher] WSDL published to: file:/opt/4.1/server/default/data/wsdl/OpenKM.war/OKMAuthService1152085023224637866.wsdl
18:35:35,140 INFO  [TomcatDeployer] deploy, ctxPath=/jmx-console, warUrl=.../deploy/jmx-console.war/
18:35:35,596 INFO  [Http11Protocol] Starting Coyote HTTP/1.1 on http-0.0.0.0-80
18:35:35,635 INFO  [AjpProtocol] Starting Coyote AJP/1.3 on ajp-0.0.0.0-8009
18:35:35,666 INFO  [Server] JBoss (MX MicroKernel) [4.2.3.GA (build: SVNTag=JBoss_4_2_3_GA date=200807181439)] Started in 54s:784ms

openkm.cfg

Code: Select all

repository.config=repository.xml
 repository.home=repository
# system.user=system
# default.user.role=UserRol
# default.admin.role=AdminRol
principal.adapter=com.openkm.core.UsersRolesPrincipalAdapter
principal.adapter=es.git.openkm.principal.LdapPrincipalAdapter
principal.ldap.server=ldap://xx.xx.xx.xx
principal.ldap.security.principal=CN=openkm,cn=users,dc=xxxx,dc=xxxx
principal.ldap.security.credentials=password
principal.ldap.user.search.base=cn=users,dc=xxxx,dc=xxxx
principal.ldap.user.search.filter=(&(objectclass=user)(memberOf=CN=UserRole,CN=users,DC=xxxx,DC=xxxx))
principal.ldap.user.atribute=cn
principal.ldap.role.search.base=cn=users,dc=xxxx,dc=xxxx
principal.ldap.role.search.filter=(&(objectclass=group)(memberOf=CN=OpenKM,CN=Users,DC=xxxx,DC=xxxxx))
principal.ldap.role.atribute=cn
principal.ldap.mail.search.base=cn={0},cn=users,dc=xxxx,dc=xxxx
principal.ldap.mail.search.filter=(objectclass=person)
principal.ldap.mail.atribute=mail
system.login.lowercase=on
 max.file.size=150
 max.search.results=2000
# system.demo=off
# update.info=off
# system.ocr=/usr/bin/tesseract
  system.openoffice=on
  system.pdf2swf=/usr/bin/pdf2swf
# system.readonly=off
# system.antivir=/usr/bin/clamscan
#restrict.file.mime=off
#restrict.file.extension=*~,*.bak,._*
notify.message.subject=OpenKM - NOTIFICATION - $documentName
notify.message.body=<b>Document: </b><a href=\"$documentUrl\">$documentPath</a><br/><b>User: </b>$userId<br/><b>Message: </b>$notificationMessage<br/> 
subscription.message.subject=OpenKM - $eventType - $documentPath 
subscription.message.body=<b>Document: </b><a href=\"$documentUrl\">$documentPath</a><br/><b>User: </b>$userId<br/><b>Event: </b>$eventType<br/><b>Comment: </b>$subscriptionComment<br/>
application.url=http://xx.xx.xx.xx/OpenKM/es.git.openkm.frontend.Main/index.jsp

login.xml

Code: Select all

    <!-- OpenKM -->
    <application-policy name = "OpenKM">
       <authentication>
         <login-module code="org.jboss.security.auth.spi.LdapExtLoginModule" flag="required" >
<module-option name="java.naming.provider.url">ldap://xx.xx.xx.xx</module-option>
<module-option name="bindDN">CN=openkm,cn=users,dc=xxxx,dc=xxxx</module-option>
<module-option name="java.naming.security.authentication">simple</module-option>
<module-option name="bindCredential">password</module-option>
<module-option name="baseCtxDN">cn=users,dc=xxxx,dc=xxxx</module-option>
<module-option name="baseFilter">(&(sAMAccountName={0})(memberOf=CN=UserRole,CN=xxxx,DC=ccad,DC=xxxx))</module-option>
<module-option name="rolesCtxDN">cn=users,dc=xxxx,dc=xxxx</module-option>
<module-option name="roleFilter">(member={1})</module-option>
<module-option name="roleAttributeID">cn</module-option>
<module-option name="roleAttributeIsDN">false</module-option>
<module-option name="roleRecursion">2</module-option>
<module-option name="searchScope">ONELEVEL_SCOPE</module-option>
<module-option name="allowEmptyPasswords">false</module-option>   
        
</login-module>
       </authentication>
    </application-policy>

PostPosted:**Wed May 12, 2010 7:31 pm**

You can not got both, only the second it's ok to ldap

Code: Select all

principal.adapter=com.openkm.core.UsersRolesPrincipalAdapter
principal.adapter=es.git.openkm.principal.LdapPrincipalAdapter

To autentication we need pay attention on login-config.xml ( not in OpenKM.cfg , that's used to get user, roles, etc... )

in login-config.xml try with

Code: Select all

<module-option name="baseFilter">(sAMAccountName={0})</module-option>

it's CN=openkm a valid user to connecting to ldap ?

and put it too

Code: Select all

<module-option name="defaultRole">UserRole</module-option>

When it'll run we'll try restoring baseFilter and removing UserRole

In windows there's something curious too, all username are in lower case, put system.login.lowercase=on into OpenKM.cfg ( remember restarting )

That's the only <application-policy name = "OpenKM"> in your login-config.xml no ?

PostPosted:**Fri May 14, 2010 3:30 am**

Hi jllort ,

My OS is CentOS5.4
Based on your suggestions,I remove OpenKM.cfg of principal.adapter=com.openkm.core.UsersRolesPrincipalAdapter
And increase login.xml of<module-option name="baseFilter">(sAMAccountName={0})</module-option>
Yes,in login.xml just only one police name OpenKM
And after re-boot execution. / Run.sh . Still received "Authentication error"
too bad

my OpenKM.cfg is below

Code: Select all

# Default configuration values
#
 repository.config=repository.xml
 repository.home=repository
# system.user=system
# default.user.role=UserRol
# default.admin.role=AdminRol
principal.adapter=es.git.openkm.principal.LdapPrincipalAdapter
principal.ldap.server=ldap://xx.xx.xx.xx
principal.ldap.security.principal=CN=openkm,cn=users,dc=xxxx,dc=xxxx
principal.ldap.security.credentials=password
principal.ldap.user.search.base=cn=users,dc=xxxx,dc=xxxx
principal.ldap.user.search.filter=(&(objectclass=user)(memberOf=CN=UserRole,CN=users,DC=xxxx,DC=xxxx))
principal.ldap.user.atribute=cn
principal.ldap.role.search.base=cn=users,dc=xxxx,dc=xxxx
principal.ldap.role.search.filter=(&(objectclass=group)(memberOf=CN=OpenKM,CN=Users,DC=xxxx,DC=xxxx))
principal.ldap.role.atribute=cn
principal.ldap.mail.search.base=cn={0},cn=users,dc=xxxx,dc=xxxx
principal.ldap.mail.search.filter=(objectclass=person)
principal.ldap.mail.atribute=mail
system.login.lowercase=on
 max.file.size=150
 max.search.results=2000
# system.demo=off
# update.info=off
# system.ocr=/usr/bin/tesseract
  system.openoffice=on
  system.pdf2swf=/usr/bin/pdf2swf
# system.readonly=off
# system.antivir=/usr/bin/clamscan
#restrict.file.mime=off
#restrict.file.extension=*~,*.bak,._*
notify.message.subject=OpenKM - NOTIFICATION - $documentName
notify.message.body=<b>Document: </b><a href=\"$documentUrl\">$documentPath</a><br/><b>User: </b>$userId<br/><b>Message: </b>$notificationMessage<br/> 
subscription.message.subject=OpenKM - $eventType - $documentPath 
subscription.message.body=<b>Document: </b><a href=\"$documentUrl\">$documentPath</a><br/><b>User: </b>$userId<br/><b>Event: </b>$eventType<br/><b>Comment: </b>$subscriptionComment<br/>
application.url=http://xx.xx.xx.xx/OpenKM/es.git.openkm.frontend.Main/index.jsp

login.xml is below

Code: Select all

<?xml version='1.0'?>
<!DOCTYPE policy PUBLIC
      "-//JBoss//DTD JBOSS Security Config 3.0//EN"
      "http://www.jboss.org/j2ee/dtd/security_config.dtd">

<!-- The XML based JAAS login configuration read by the
org.jboss.security.auth.login.XMLLoginConfig mbean. Add
an application-policy element for each security domain.

The outline of the application-policy is:
<application-policy name="security-domain-name">
  <authentication>
    <login-module code="login.module1.class.name" flag="control_flag">
      <module-option name = "option1-name">option1-value</module-option>
      <module-option name = "option2-name">option2-value</module-option>
      ...
    </login-module>

    <login-module code="login.module2.class.name" flag="control_flag">
      ...
    </login-module>
    ...
  </authentication>
</application-policy>

$Revision: 64598 $
-->

<policy>
    <!-- Used by clients within the application server VM such as
    mbeans and servlets that access EJBs.
    -->
    <application-policy name = "client-login">
       <authentication>
          <login-module code = "org.jboss.security.ClientLoginModule"
             flag = "required">
             <!-- Any existing security context will be restored on logout -->
             <module-option name="restore-login-identity">true</module-option>
          </login-module>
       </authentication>
    </application-policy>

    <!-- Security domain for JBossMQ -->
    <application-policy name = "jbossmq">
       <authentication>
          <login-module code = "org.jboss.security.auth.spi.DatabaseServerLoginModule"
             flag = "required">
             <module-option name = "unauthenticatedIdentity">guest</module-option>
             <module-option name = "dsJndiName">java:/DefaultDS</module-option>
             <module-option name = "principalsQuery">SELECT PASSWD FROM JMS_USERS WHERE USERID=?</module-option>
             <module-option name = "rolesQuery">SELECT ROLEID, 'Roles' FROM JMS_ROLES WHERE USERID=?</module-option>
          </login-module>
       </authentication>
    </application-policy>

    <!-- Security domain for JBossMQ when using file-state-service.xml
    <application-policy name = "jbossmq">
       <authentication>
          <login-module code = "org.jboss.mq.sm.file.DynamicLoginModule"
             flag = "required">
             <module-option name = "unauthenticatedIdentity">guest</module-option>
             <module-option name = "sm.objectname">jboss.mq:service=StateManager</module-option>
          </login-module>
       </authentication>
    </application-policy>
    -->

    <!-- Security domains for testing new jca framework -->
    <application-policy name = "HsqlDbRealm">
       <authentication>
          <login-module code = "org.jboss.resource.security.ConfiguredIdentityLoginModule"
             flag = "required">
             <module-option name = "principal">sa</module-option>
             <module-option name = "userName">sa</module-option>
             <module-option name = "password"></module-option>
             <module-option name = "managedConnectionFactoryName">jboss.jca:service=LocalTxCM,name=DefaultDS</module-option>
          </login-module>
       </authentication>
    </application-policy>

    <application-policy name = "JmsXARealm">
       <authentication>
          <login-module code = "org.jboss.resource.security.ConfiguredIdentityLoginModule"
             flag = "required">
             <module-option name = "principal">guest</module-option>
             <module-option name = "userName">guest</module-option>
             <module-option name = "password">guest</module-option>
             <module-option name = "managedConnectionFactoryName">jboss.jca:service=TxCM,name=JmsXA</module-option>
          </login-module>
       </authentication>
    </application-policy>

    <!-- A template configuration for the jmx-console web application. This
      defaults to the UsersRolesLoginModule the same as other and should be
      changed to a stronger authentication mechanism as required.
    -->
    <application-policy name = "jmx-console">
       <authentication>
          <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule"
             flag = "required">
           <module-option name="usersProperties">props/jmx-console-users.properties</module-option>
           <module-option name="rolesProperties">props/jmx-console-roles.properties</module-option>
          </login-module>
       </authentication>
    </application-policy>

    <!-- A template configuration for the web-console web application. This
      defaults to the UsersRolesLoginModule the same as other and should be
      changed to a stronger authentication mechanism as required.
    -->
    <application-policy name = "web-console">
       <authentication>
          <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule"
             flag = "required">
             <module-option name="usersProperties">web-console-users.properties</module-option>
             <module-option name="rolesProperties">web-console-roles.properties</module-option>
          </login-module>
       </authentication>
    </application-policy>

    <!--
      A template configuration for the JBossWS security domain.
      This defaults to the UsersRolesLoginModule the same as other and should be
      changed to a stronger authentication mechanism as required.
    -->
    <application-policy name="JBossWS">
      <authentication>
        <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule"
          flag="required">
          <module-option name="usersProperties">props/jbossws-users.properties</module-option>
          <module-option name="rolesProperties">props/jbossws-roles.properties</module-option>
          <module-option name="unauthenticatedIdentity">anonymous</module-option>
        </login-module>
      </authentication>
    </application-policy>

    <!-- OpenKM -->
    <application-policy name = "OpenKM">
       <authentication>
         <login-module code="org.jboss.security.auth.spi.LdapExtLoginModule" flag="required" >
<module-option name="java.naming.provider.url">ldap://xx.xx.xx.xx</module-option>
<module-option name="bindDN">CN=openkm,cn=users,dc=xxxx,dc=xxxx</module-option>
<module-option name="java.naming.security.authentication">simple</module-option>
<module-option name="bindCredential">password</module-option>
<module-option name="baseCtxDN">cn=users,dc=xxxx,dc=xxxx</module-option>
<module-option name="baseFilter">(&(sAMAccountName={0})</module-option>
<module-option name="rolesCtxDN">cn=users,dc=xxxx,dc=xxxx</module-option>
<module-option name="roleFilter">(member={1})</module-option>
<module-option name="roleAttributeID">cn</module-option>
<module-option name="roleAttributeIsDN">false</module-option>
<module-option name="roleRecursion">2</module-option>
<module-option name="searchScope">ONELEVEL_SCOPE</module-option>
<module-option name="allowEmptyPasswords">false</module-option>   
 <module-option name="defaultRole">UserRole</module-option>       
</login-module>
       </authentication>
    </application-policy>

    <!-- The default login configuration used by any security domain that
    does not have a application-policy entry with a matching name
    -->
    <application-policy name = "other">
       <!-- A simple server login module, which can be used when the number
       of users is relatively small. It uses two properties files:
       users.properties, which holds users (key) and their password (value).
       roles.properties, which holds users (key) and a comma-separated list of
       their roles (value).
       The unauthenticatedIdentity property defines the name of the principal
       that will be used when a null username and password are presented as is
       the case for an unuathenticated web client or MDB. If you want to
       allow such users to be authenticated add the property, e.g.,
       unauthenticatedIdentity="nobody"
       -->
       <authentication>
          <login-module code = "org.jboss.security.auth.spi.UsersRolesLoginModule"
             flag = "required" />
       </authentication>
    </application-policy>

</policy>

start log is below

Code: Select all

=========================================================================

  JBoss Bootstrap Environment

  JBOSS_HOME: /opt/4.1

  JAVA: /usr/java/jdk1.6.0_20/bin/java

  JAVA_OPTS: -Dprogram.name=run.sh -server -Xms256m -Xmx1024m -XX:PermSize=64m -XX:MaxPermSize=128m -Djava.awt.headless=true -Djava.net.preferIPv4Stack=true

  CLASSPATH: /opt/4.1/bin/run.jar:/usr/java/jdk1.6.0_20/lib/tools.jar

=========================================================================

11:18:18,177 INFO  [Server] Starting JBoss (MX MicroKernel)...
11:18:18,180 INFO  [Server] Release ID: JBoss [Trinity] 4.2.3.GA (build: SVNTag=JBoss_4_2_3_GA date=200807181439)
11:18:18,182 INFO  [Server] Home Dir: /opt/4.1
11:18:18,182 INFO  [Server] Home URL: file:/opt/4.1/
11:18:18,183 INFO  [Server] Patch URL: null
11:18:18,183 INFO  [Server] Server Name: default
11:18:18,183 INFO  [Server] Server Home Dir: /opt/4.1/server/default
11:18:18,184 INFO  [Server] Server Home URL: file:/opt/4.1/server/default/
11:18:18,184 INFO  [Server] Server Log Dir: /opt/4.1/server/default/log
11:18:18,184 INFO  [Server] Server Temp Dir: /opt/4.1/server/default/tmp
11:18:18,184 INFO  [Server] Root Deployment Filename: jboss-service.xml
11:18:18,916 INFO  [ServerInfo] Java version: 1.6.0_20,Sun Microsystems Inc.
11:18:18,916 INFO  [ServerInfo] Java VM: Java HotSpot(TM) Server VM 16.3-b01,Sun Microsystems Inc.
11:18:18,916 INFO  [ServerInfo] OS-System: Linux 2.6.18-164.el5,i386
11:18:19,697 INFO  [Server] Core system initialized
11:18:23,739 INFO  [WebService] Using RMI server codebase: http://openkm:8083/
11:18:23,742 INFO  [Log4jService$URLWatchTimerTask] Configuring from URL: resource:jboss-log4j.xml
11:18:29,199 INFO  [EJB3Deployer] Starting java:comp multiplexer
11:18:32,833 INFO  [NativeServerConfig] JBoss Web Services - Native
11:18:32,833 INFO  [NativeServerConfig] jbossws-3.0.1-native-2.0.4.GA (build=200803312044)
11:18:34,167 INFO  [Embedded] Catalina naming disabled
11:18:34,449 INFO  [AprLifecycleListener] The Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: /usr/java/jdk1.6.0_20/jre/lib/i386/server:/usr/java/jdk1.6.0_20/jre/lib/i386:/usr/java/jdk1.6.0_20/jre/../lib/i386:/usr/java/jdk1.6.0_20/jre/lib/i386:/usr/java/packages/lib/i386:/lib:/usr/lib
11:18:34,668 INFO  [Http11Protocol] Initializing Coyote HTTP/1.1 on http-0.0.0.0-80
11:18:34,669 INFO  [AjpProtocol] Initializing Coyote AJP/1.3 on ajp-0.0.0.0-8009
11:18:34,670 INFO  [Catalina] Initialization processed in 502 ms
11:18:34,670 INFO  [StandardService] Starting service jboss.web
11:18:34,674 INFO  [StandardEngine] Starting Servlet Engine: JBossWeb/2.0.1.GA
11:18:34,744 INFO  [Catalina] Server startup in 73 ms
11:18:34,906 INFO  [TomcatDeployer] deploy, ctxPath=/, warUrl=.../deploy/jboss-web.deployer/ROOT.war/
11:18:35,937 INFO  [TomcatDeployer] deploy, ctxPath=/invoker, warUrl=.../deploy/http-invoker.sar/invoker.war/
11:18:36,134 INFO  [TomcatDeployer] deploy, ctxPath=/jbossws, warUrl=.../deploy/jbossws.sar/jbossws-context.war/
11:18:36,280 INFO  [TomcatDeployer] deploy, ctxPath=/jbossmq-httpil, warUrl=.../deploy/jms/jbossmq-httpil.sar/jbossmq-httpil.war/
11:18:37,763 INFO  [TomcatDeployer] deploy, ctxPath=/web-console, warUrl=.../deploy/management/console-mgr.sar/web-console.war/
11:18:38,619 INFO  [MailService] Mail Service bound to java:/Mail
11:18:38,628 INFO  [MailService] Mail Service bound to java:/mail/OpenKM
[color=#808000]11:18:38,849 INFO  [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/jboss-ha-local-jdbc.rar
11:18:39,081 INFO  [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/jboss-ha-xa-jdbc.rar
11:18:39,150 INFO  [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/jboss-local-jdbc.rar
11:18:39,213 INFO  [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/jboss-xa-jdbc.rar
11:18:39,392 INFO  [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/jms/jms-ra.rar
11:18:39,435 INFO  [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/mail-ra.rar
11:18:39,489 INFO  [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/quartz-ra.rar[/color]
11:18:39,499 INFO  [QuartzResourceAdapter] start quartz!!!
11:18:39,584 INFO  [SimpleThreadPool] Job execution threads will use class loader of thread: main
11:18:39,613 INFO  [QuartzScheduler] Quartz Scheduler v.1.5.2 created.
11:18:39,617 INFO  [RAMJobStore] RAMJobStore initialized.
11:18:39,617 INFO  [StdSchedulerFactory] Quartz scheduler 'DefaultQuartzScheduler' initialized from default resource file in Quartz package: 'quartz.properties'
11:18:39,617 INFO  [StdSchedulerFactory] Quartz scheduler version: 1.5.2
11:18:39,618 INFO  [QuartzScheduler] Scheduler DefaultQuartzScheduler_$_NON_CLUSTERED started.
11:18:40,533 INFO  [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=DataSourceBinding,name=DefaultDS' to JNDI name 'java:DefaultDS'
11:18:40,930 INFO  [A] Bound to JNDI name: queue/A
11:18:40,933 INFO  [B] Bound to JNDI name: queue/B
11:18:40,936 INFO  [C] Bound to JNDI name: queue/C
11:18:40,939 INFO  [D] Bound to JNDI name: queue/D
11:18:40,942 INFO  [ex] Bound to JNDI name: queue/ex
11:18:40,973 INFO  [testTopic] Bound to JNDI name: topic/testTopic
11:18:40,977 INFO  [securedTopic] Bound to JNDI name: topic/securedTopic
11:18:40,981 INFO  [testDurableTopic] Bound to JNDI name: topic/testDurableTopic
11:18:40,989 INFO  [testQueue] Bound to JNDI name: queue/testQueue
11:18:41,049 INFO  [UILServerILService] JBossMQ UIL service available at : /0.0.0.0:8093
11:18:41,110 INFO  [DLQ] Bound to JNDI name: queue/DLQ
11:18:41,319 INFO  [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=ConnectionFactoryBinding,name=JmsXA' to JNDI name 'java:JmsXA'
11:18:43,653 INFO  [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=DataSourceBinding,name=OKMActivityDS' to JNDI name 'java:OKMActivityDS'
11:18:43,698 INFO  [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=DataSourceBinding,name=OKMAuthDS' to JNDI name 'java:OKMAuthDS'
11:18:43,773 INFO  [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=DataSourceBinding,name=OKMDashboardStatsDS' to JNDI name 'java:OKMDashboardStatsDS'
11:18:43,859 INFO  [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=DataSourceBinding,name=OKMWorkflowDS' to JNDI name 'java:OKMWorkflowDS'
11:18:48,993 INFO  [DefaultEndpointRegistry] register: jboss.ws:context=OpenKM,endpoint=OKMMail
11:18:48,996 INFO  [DefaultEndpointRegistry] register: jboss.ws:context=OpenKM,endpoint=OKMDocument
11:18:48,998 INFO  [DefaultEndpointRegistry] register: jboss.ws:context=OpenKM,endpoint=OKMSearch
11:18:49,001 INFO  [DefaultEndpointRegistry] register: jboss.ws:context=OpenKM,endpoint=OKMPropertyGroup
11:18:49,004 INFO  [DefaultEndpointRegistry] register: jboss.ws:context=OpenKM,endpoint=OKMTest
11:18:49,008 INFO  [DefaultEndpointRegistry] register: jboss.ws:context=OpenKM,endpoint=OKMRepository
11:18:49,010 INFO  [DefaultEndpointRegistry] register: jboss.ws:context=OpenKM,endpoint=OKMFolder
11:18:49,012 INFO  [DefaultEndpointRegistry] register: jboss.ws:context=OpenKM,endpoint=OKMNotification
11:18:49,015 INFO  [DefaultEndpointRegistry] register: jboss.ws:context=OpenKM,endpoint=OKMAuth
11:18:49,239 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.servlet.RepositoryStartupServlet
11:18:49,239 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.servlet.WebdavServlet
11:18:49,239 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: org.jbpm.web.ProcessUploadServlet
11:18:49,239 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMWorkspaceServlet
11:18:49,240 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMDocumentServlet
11:18:49,240 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMAuthServlet
11:18:49,240 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMRepositoryServlet
11:18:49,240 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMFolderServlet
11:18:49,240 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMPropertyGroupServlet
11:18:49,240 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMDownloadServlet
11:18:49,241 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMDashboardServlet
11:18:49,241 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMGeneralServlet
11:18:49,241 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMNotifyServlet
11:18:49,241 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMWorkflowServlet
11:18:49,241 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMSearchServlet
11:18:49,242 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMFileUploadServlet
11:18:49,242 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMBookmarkServlet
11:18:49,242 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.frontend.server.OKMMailServlet
11:18:49,242 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMPropertyGroupServletAdmin
11:18:49,242 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMWorkflowServletAdmin
11:18:49,243 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMReportServletAdmin
11:18:49,243 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMRepositoryServletAdmin
11:18:49,243 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMStatsServletAdmin
11:18:49,243 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMStatsGraphServletAdmin
11:18:49,243 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMSearchServletAdmin
11:18:49,244 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMGeneralUtilsServletAdmin
11:18:49,244 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMUserServletAdmin
11:18:49,244 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMWorkflowUploadServletAdmin
11:18:49,244 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMWorkflowViewServletAdmin
11:18:49,244 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.backend.server.OKMFolderServletAdmin
11:18:49,245 INFO  [DefaultWebAppDesciptorModifierImpl] Ignore servlet: es.git.openkm.servlet.TestServlet
11:18:49,293 INFO  [TomcatDeployer] deploy, ctxPath=/OpenKM, warUrl=.../tmp/deploy/tmp2233247642642218138OpenKM-exp.war/
11:18:50,673 INFO  [RepositoryImpl] Starting repository...
11:18:50,787 INFO  [LocalFileSystem] LocalFileSystem initialized at path /opt/4.1/repository/repository
11:18:51,420 INFO  [LocalFileSystem] LocalFileSystem initialized at path /opt/4.1/repository/version
11:18:52,694 INFO  [ConnectionRecoveryManager] Database: Apache Derby / 10.2.1.6 - (452058)
11:18:52,695 INFO  [ConnectionRecoveryManager] Driver: Apache Derby Embedded JDBC Driver / 10.2.1.6 - (452058)
11:18:53,906 INFO  [RepositoryImpl] initializing workspace 'default'...
11:18:53,906 INFO  [LocalFileSystem] LocalFileSystem initialized at path /opt/4.1/repository/workspaces/default
11:18:53,983 INFO  [ConnectionRecoveryManager] Database: Apache Derby / 10.2.1.6 - (452058)
11:18:53,983 INFO  [ConnectionRecoveryManager] Driver: Apache Derby Embedded JDBC Driver / 10.2.1.6 - (452058)
11:18:54,378 INFO  [RepositoryImpl] workspace 'default' initialized
11:18:54,744 INFO  [LocalFileSystem] LocalFileSystem initialized at path /opt/4.1/repository/workspaces/default/index
11:18:55,098 INFO  [SearchIndex] Index initialized: /opt/4.1/repository/workspaces/default/index Version: 2
11:18:55,098 INFO  [RepositoryImpl] Repository started
11:19:03,400 INFO  [SimpleWebdavServlet] resource-path-prefix = '/repository'
11:19:03,400 INFO  [SimpleWebdavServlet] WWW-Authenticate header = 'Basic realm="OpenKM Webdav Server"'
11:19:12,022 INFO  [WSDLFilePublisher] WSDL published to: file:/opt/4.1/server/default/data/wsdl/OpenKM.war/OKMMailService5483983515833463861.wsdl
11:19:12,092 INFO  [WSDLFilePublisher] WSDL published to: file:/opt/4.1/server/default/data/wsdl/OpenKM.war/OKMDocumentService2971419057886780481.wsdl
11:19:12,124 INFO  [WSDLFilePublisher] WSDL published to: file:/opt/4.1/server/default/data/wsdl/OpenKM.war/OKMSearchService7756889654242507248.wsdl
11:19:12,170 INFO  [WSDLFilePublisher] WSDL published to: file:/opt/4.1/server/default/data/wsdl/OpenKM.war/OKMPropertyGroupService3011407534287807487.wsdl
11:19:12,176 INFO  [WSDLFilePublisher] WSDL published to: file:/opt/4.1/server/default/data/wsdl/OpenKM.war/OKMTestService6324937424407817267.wsdl
11:19:12,182 INFO  [WSDLFilePublisher] WSDL published to: file:/opt/4.1/server/default/data/wsdl/OpenKM.war/OKMRepositoryService8704893529726516889.wsdl
11:19:12,207 INFO  [WSDLFilePublisher] WSDL published to: file:/opt/4.1/server/default/data/wsdl/OpenKM.war/OKMFolderService9007503981538004995.wsdl
11:19:12,214 INFO  [WSDLFilePublisher] WSDL published to: file:/opt/4.1/server/default/data/wsdl/OpenKM.war/OKMNotificationService6936066262448840479.wsdl
11:19:12,224 INFO  [WSDLFilePublisher] WSDL published to: file:/opt/4.1/server/default/data/wsdl/OpenKM.war/OKMAuthService8440923040367806750.wsdl
11:19:12,719 INFO  [TomcatDeployer] deploy, ctxPath=/jmx-console, warUrl=.../deploy/jmx-console.war/
11:19:13,166 INFO  [Http11Protocol] Starting Coyote HTTP/1.1 on http-0.0.0.0-80
11:19:13,207 INFO  [AjpProtocol] Starting Coyote AJP/1.3 on ajp-0.0.0.0-8009
11:19:13,242 INFO  [Server] JBoss (MX MicroKernel) [4.2.3.GA (build: SVNTag=JBoss_4_2_3_GA date=200807181439)] Started in 55s:55ms

PostPosted:**Fri May 14, 2010 7:09 am**

Try put in your jboss-log4j.xml

<category name="org.jboss.security">
<priority value="DEBUG"/>
</category>

there's some error in you login-config.xml or some problem connecting OpenKM server to ldap server ( it's an active directoy - microsoft ) or other kind of ldap ?

PostPosted:**Fri May 14, 2010 12:23 pm**

To:Jllort

Yes,I use active directoy - microsoft
I have a little good news is when I use openkm account login to OpenKM system is working.
but it look that only have User Competence.
Just only openkm account can login to system. Other accounts are not working.

OpenKM.cfg

Code: Select all

# Default configuration values
#
 repository.config=repository.xml
 repository.home=repository
#system.user=system
#default.user.role=UserRol
#default.admin.role=AdminRol
principal.adapter=es.git.openkm.principal.LdapPrincipalAdapter
principal.ldap.server=ldap://10.86.11.19
principal.ldap.security.principal=CN=openkm,cn=users,dc=xxxx,dc=xxxx
principal.ldap.security.credentials=password
principal.ldap.user.search.base=cn=users,dc=xxxx,dc=xxxx
principal.ldap.user.search.filter=(objectclass=person)
principal.ldap.user.atribute=cn
principal.ldap.role.search.base=cn=users,dc=xxxx,dc=xxxx
principal.ldap.role.search.filter=(objectclass=group)
principal.ldap.role.atribute=cn
principal.ldap.mail.search.base=cn={0},cn=users,dc=xxxx,dc=xxxx
principal.ldap.mail.search.filter=(objectclass=person)
principal.ldap.mail.atribute=mail
system.login.lowercase=on
max.file.size=150
 max.search.results=2000
# system.demo=off
# update.info=off
# system.ocr=/usr/bin/tesseract
  system.openoffice=on
  system.pdf2swf=/usr/bin/pdf2swf
# system.readonly=off
# system.antivir=/usr/bin/clamscan
#restrict.file.mime=off
#restrict.file.extension=*~,*.bak,._*
notify.message.subject=OpenKM - NOTIFICATION - $documentName
notify.message.body=<b>Document: </b><a href=\"$documentUrl\">$documentPath</a><br/><b>User: </b>$userId<br/><b>Message: </b>$notificationMessage<br/> 
subscription.message.subject=OpenKM - $eventType - $documentPath 
subscription.message.body=<b>Document: </b><a href=\"$documentUrl\">$documentPath</a><br/><b>User: </b>$userId<br/><b>Event: </b>$eventType<br/><b>Comment: </b>$subscriptionComment<br/>
application.url=http://xxxxxxxxxx/OpenKM/es.git.openkm.frontend.Main/index.jsp

login.xml

Code: Select all

  <!-- OpenKM -->
    <application-policy name = "OpenKM">
       <authentication>
         <login-module code="org.jboss.security.auth.spi.LdapExtLoginModule" flag="required" >
<module-option name="java.naming.provider.url">ldap://xx.xx.xx.xx</module-option>
<module-option name="bindDN">CN=openkm,cn=users,dc=xxxx,dc=xxxx</module-option>
<module-option name="java.naming.security.authentication">simple</module-option>
<module-option name="bindCredential">password</module-option>
<module-option name="baseCtxDN">cn=users,dc=xxxx,dc=xxxx</module-option>
<module-option name="baseFilter">(sAMAccountName={0})</module-option>
<module-option name="defaultRole">UserRole</module-option>
<module-option name="rolesCtxDN">cn=users,dc=xxxx,dc=xxxx</module-option>
<module-option name="roleFilter">(member={1})</module-option>
<module-option name="roleAttributeID">cn</module-option>
<module-option name="roleAttributeIsDN">false</module-option>
<module-option name="roleRecursion">2</module-option>
<module-option name="searchScope">ONELEVEL_SCOPE</module-option>
<module-option name="allowEmptyPasswords">false</module-option>   
          
</login-module>
       </authentication>
    </application-policy>

PostPosted:**Fri May 14, 2010 7:10 pm**

I think it'll be better something like this:

Code: Select all

<module-option name="bindDN">CN=Administrator,cn=users,dc=xxxx,dc=xxxx</module-option>
<module-option name="java.naming.security.authentication">simple</module-option>
<module-option name="bindCredential">password</module-option>

Althought it, other users have UserRole or AdminRole assigned that could be the reaon why others users are not login

PostPosted:**Sun May 16, 2010 8:23 am**

To:Jllort

The openkm account is domain admin group and Administrator group.
so I think the problem should be the other causes.
Will you have other suggestions

By the way
Account authentication with active directoy
The original system has been established that the account need to remove it? Or need to remove the password?
With an account it can only have one role?
It Can not have adminRole and UserRole?

PostPosted:**Sun May 16, 2010 2:39 pm**

Better if you try the easiest case

User in active directory must have AdminRole or UserRole ( can have other roles ) and user password expiration is disabled.

Open Source Document Management System | OpenKM

How to install OpenKM 4.1

How to install OpenKM 4.1

Re: How to install OpenKM 4.1

Re: How to install OpenKM 4.1

Re: How to install OpenKM 4.1

Re: How to install OpenKM 4.1

Re: How to install OpenKM 4.1

Re: How to install OpenKM 4.1

Re: How to install OpenKM 4.1

Re: How to install OpenKM 4.1

Re: How to install OpenKM 4.1

Re: How to install OpenKM 4.1

Re: How to install OpenKM 4.1

Re: How to install OpenKM 4.1