Alfresco CIFS Authenticator for openLDAP Users

Document created by alfresco Employee on Jun 14, 2018Last modified by cesarista on Jun 15, 2018
Version 2Show Document
  • View in full screen mode

Actually, Alfresco provides some CIFS authenticators (passthru, ntlm...), but not for a LDAP subsystem. To solve this problem, we have implemented a component that allows you to use CIFS with openLDAP users.


OwnerCesar Capillas

Community 3.4.x

Community 4.0.x

Community 4.2.x

Community 5.0.x

Enterprise 3.4.x

Enterprise 4.0.x

Enterprise 4.1.x

Enterprise 4.2.x

License TypeProprietary
Project Page- Alfresco CIFS authenticator for openLDAP users addon - zylk 
Download PageContact - zylk, authenticator, subsystem, repository, cifs, samba, openldap
Component TypeIntegration
Extension PointsAuthenticator
InstallationAMP, Manual


Installation Guide: The installation is tracked via AMP package. Stop Alfresco, copy the file in ${ALF_HOME}/amps and use ${ALF_HOME}/bin/apply_amps script to install de AMP.


Then copy configuration files to the extension directory:


${ALF_HOME}/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldapSamba/ldapSamba1/ldap-samba-authentication-context.xml ${ALF_HOME}/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldapSamba/ldapSamba1/


In, an example of authentication chain can be:




Note that not all the protocols can be chained, so in order to use the LDAP Samba subsystem, the other CIFS-able subsystems must be deactivated (only one of the subsystems can use CIFS - in fact the first one in the chain):





An example of custom properties are:


# LDAP Connection properties ldap.samba.authentication.base=dc=example,dc=com


# The user defined below must be able to execute user search querys in LDAP (administrator),dc=example,dc=com


IMPORTANT: Each LDAP user needs to store the password as an MD4 hash and we will solve this by adding a sambaSamAccount object class to the user profile. This object class and its attributes are defined in the samba.schema file, which is part of the samba-doc package. To install this new schema, have a look at the documentation for your Linux distribution in the sections talking about how to add an LDAP schema to OpenLDAP. And finally, restart your Alfresco instance.