`
Eric_liu
  • 浏览: 89627 次
  • 性别: Icon_minigender_1
  • 来自: 北京
社区版块
存档分类
最新评论

AD+liferay4.3配置,liferay会自动将ad里的用户信息导入liferay中

阅读更多
After doing some research I found that com.liferay.portal.security.ldap.LDAPImportUtil.java has to be changed.

Change line 218 from:
while (enu.hasMore()) {
to
while (enu.hasMoreElements()) {

and Change line 219 from:
SearchResult result = (SearchResult)enu.next();
to
SearchResult result = (SearchResult)enu.nextElement();
========================================================
portal-ext.properties:
ldap.factory.initial=com.sun.jndi.ldap.LdapCtxFactory

ldap.base.provider.url=ldap://HostName:389
ldap.base.dn=ou=xyz,dc=domain,dc=locale

ldap.security.principal=principal@domain.local
ldap.security.credentials=secret

ldap.auth.enabled=true
ldap.auth.required=false

ldap.auth.method=bind

ldap.auth.search.filter=(&(objectCategory=person)(userPrincipalName=@email_address@))

ldap.auth.password.encryption.algorithm=
ldap.auth.password.encryption.algorithm.types=MD5,SHA

ldap.users.dn=ou=user,ou=xyz,dc=domain,dc=locale

ldap.user.mappings=fullName=cn\nscreenName=sAMAccountName\nemailAddress=userPrincipalName\n
ldap.user.impl=com.liferay.portal.security.ldap.LDAPUser
ldap.user.default.object.classes=top,person,inetOrgPerson,organizationalPerson

ldap.groups.dn=OU=user,ou=xyz,dc=domain,dc=locale

ldap.import.enabled=true
ldap.import.on.startup=true
ldap.import.interval=10
ldap.import.search.filter=(objectClass=person)
ldap.import.user.search.filter=(objectClass=person)
ldap.import.group.search.filter=(objectClass=group)

ldap.import.method=user

ldap.export.enabled=false

ldap.password.policy.enabled=false
ldap.error.password.age=age
ldap.error.password.expired=expired
ldap.error.password.history=history
ldap.error.password.not.changeable=not allowed to change
ldap.error.password.syntax=syntax
ldap.error.password.trivial=trivial
ldap.error.user.lockout=retry limit

分享到:
评论

相关推荐

Global site tag (gtag.js) - Google Analytics