无法使用LDAP凭据登录liferay门户

时间:2015-07-29 07:45:17

标签: authentication configuration active-directory ldap liferay

我已按照您提到的步骤in this blog进行操作。对于基数dn,他们给出了类似基本DN-dc =,dc ='的内容,但我给出了类似于' ecompany.local'的内容。由于我不是ldap的管理员,因此我将委托人作为我的ldap id和凭证我的ldap密码。当我点击测试连接时,我得到弹出窗口,显示" Liferay已成功连接到LDAP服务器"

接下来,我按照有关身份验证搜索过滤器,导入搜索过滤器和用户映射的步骤进行操作。但是,当我点击测试ldap用户时,弹出窗口显示当前没有用户(这可能是因为我没有ldap管理员凭据。)

保存配置。

去控制面板 - > Authenticaion - >启用LDAP,启用检查,启用导入并在启动时导入。

重新启动服务器。

点击登录。输入ldap登录凭据,我无法使用ldap凭据登录。但是可以使用Liferay的id和密码登录。为什么?

1 个答案:

答案 0 :(得分:0)

有一点可以肯定,密码加密规则是针对您的LDAP服务器设置的。

portal.properties中,您可以阅读:

#
# Set either bind or password-compare for the LDAP authentication method.
# Bind is preferred by most vendors so that you don't have to worry about
# encryption strategies.
#
ldap.auth.method=bind
#ldap.auth.method=password-compare

# Set the password encryption to use for comparing passwords during import
# and to use for encrypting passwords during export. Comparing passwords
# during import will only be used when the property "ldap.auth.method" is
# set to password-compare. If the encryption is set to NONE, which is the
# default value, passwords are considered as plain text. The SHA-512
# algorithm is currently unsupported.
#
#ldap.auth.password.encryption.algorithm=BCRYPT
#ldap.auth.password.encryption.algorithm=MD2
#ldap.auth.password.encryption.algorithm=MD5
ldap.auth.password.encryption.algorithm=NONE
#ldap.auth.password.encryption.algorithm=SHA
#ldap.auth.password.encryption.algorithm=SHA-256
#ldap.auth.password.encryption.algorithm=SHA-384
#ldap.auth.password.encryption.algorithm=SSHA
#ldap.auth.password.encryption.algorithm=UFC-CRYPT