I setup OpenKM, and config auth with Windows AD server, but, when login OpenKM, I got error message "Error communicating with the server (getUserWorkspace)".
I have red this thread, I don't know how to setup it.
my OpenKM's version is: OpenKM-5.1.7_JBoss-4.2.3.GA
login-config.xml
I have red this thread, I don't know how to setup it.
my OpenKM's version is: OpenKM-5.1.7_JBoss-4.2.3.GA
login-config.xml
Code: Select all
server/default/data/hypersonic/OKM_APP.script:
<application-policy name = "OpenKM">
<authentication>
<login-module code="org.jboss.security.auth.spi.LdapExtLoginModule" flag="required" >
<module-option name="java.naming.provider.url">ldap://172.26.10.10:3268</module-option>
<module-option name="bindDN">cn=test,ou=SWD,dc=cc,dc=xp,dc=com</module-option>
<module-option name="java.naming.security.authentication">simple</module-option>
<module-option name="java.naming.referral">follow</module-option>
<module-option name="bindCredential">test</module-option>
<module-option name="baseCtxDN">ou=SWD,dc=cc,dc=xp,dc=com</module-option>
<module-option name="baseFilter">(sAMAccountName={0})</module-option>
<module-option name="rolesCtxDN">ou=SWD,dc=cc,dc=xp,dc=com</module-option>
<module-option name="roleFilter">(member={1})</module-option>
<module-option name="roleAttributeID">cn</module-option>
<module-option name="roleAttributeIsDN">false</module-option>
<module-option name="roleRecursion">2</module-option>
<module-option name="searchScope">SUBTREE_SCOPE</module-option>
<module-option name="defaultRole">UserRole</module-option>
<module-option name="allowEmptyPasswords">false</module-option>
</login-module>
</authentication>
</application-policy>
Code: Select all
INSERT INTO OKM_CONFIG VALUES('principal.adapter','string','com.openkm.principal.DatabasePrincipalAdapter')
INSERT INTO OKM_CONFIG VALUES('principal.database.filter.inactive.users','boolean','true')
INSERT INTO OKM_CONFIG VALUES('principal.ldap.mail.attribute','string','mail')
INSERT INTO OKM_CONFIG VALUES('principal.ldap.mail.search.base','string','dc=cc,dc=xp,dc=com')
INSERT INTO OKM_CONFIG VALUES('principal.ldap.mail.search.filter','string','(objectclass=person)')
INSERT INTO OKM_CONFIG VALUES('principal.ldap.role.attribute','string','cn')
INSERT INTO OKM_CONFIG VALUES('principal.ldap.role.search.base','string','ou=SWD,dc=cc,dc=xp,dc=com')
INSERT INTO OKM_CONFIG VALUES('principal.ldap.role.search.filter','string','(objectclass=group)')
INSERT INTO OKM_CONFIG VALUES('principal.ldap.roles.by.user.attribute','string','memberOf')
INSERT INTO OKM_CONFIG VALUES('principal.ldap.roles.by.user.search.base','string','ou=SWD,dc=cc,dc=xp,dc=com')
INSERT INTO OKM_CONFIG VALUES('principal.ldap.roles.by.user.search.filter','string','(&(objectClass=person)(cn={0}))')
INSERT INTO OKM_CONFIG VALUES('principal.ldap.security.credentials','string','test')
INSERT INTO OKM_CONFIG VALUES('principal.ldap.security.principal','string','cn=test,ou=SWD,dc=cc,dc=xp,dc=com')
INSERT INTO OKM_CONFIG VALUES('principal.ldap.server','string','ldap://172.26.10.10:3268')
INSERT INTO OKM_CONFIG VALUES('principal.ldap.user.attribute','string','sAMAccountName')
INSERT INTO OKM_CONFIG VALUES('principal.ldap.user.search.base','string','dc=cc,dc=xp,dc=com')
INSERT INTO OKM_CONFIG VALUES('principal.ldap.user.search.filter','string','(objectclass=person)')
INSERT INTO OKM_CONFIG VALUES('principal.ldap.users.by.role.attribute','string','member')
INSERT INTO OKM_CONFIG VALUES('principal.ldap.users.by.role.search.base','string','ou=SWD,dc=cc,dc=xp,dc=com')
INSERT INTO OKM_CONFIG VALUES('principal.ldap.users.by.role.search.filter','string','(&(objectClass=group)(cn={0}))')
