组合视图 统一视图 树状图
讨论主题 [ 上一个 | 下一个 ]
toggle
Fateh Alchhabi
I can't import Users Password
2011年10月4日 上午12:21
答复

Fateh Alchhabi

等级: Junior Member

帖子: 58

加入日期: 2010年12月1日

最近的帖子

when i try to import Users by Ldap I have problem because i can't Import the users Passwords
when i import the user passwords in the preview panel in liferay window the passwords field Looks blank....



ps: i use this attributes

ldap.auth.password.encryption.algorithm.types=MD5,SHA



Base Provider Url : ldap://ip-address:389
Base DN : ou=Tech,dc=mpowerglobal,dc=com

Principal : mpowerglobal\administrator

credentials : abc123.

****
Authentication Search Filter : (&objectCategory=Person)(mail=@email_address@)

import search filter: (objectClass=User)

****
screenName : sAMAccountName

password: userPassword

EmailAddress : mail

first Name : givenName

LastName : sn

Jobtitle : title

Group : memberOf

附件

附件: y.png (51.6k)
Michael Harper
RE: I can't import Users Password
2011年10月4日 上午7:22
答复

Michael Harper

等级: Junior Member

帖子: 56

加入日期: 2011年8月10日

最近的帖子

Fateh,

I could never get the bulk import on LDAP to import the passwords.
I disabled the import so it only imports on demand now.

Each time someone new logs in it goes out and verifies that they are in the database through the LDAP and imports their information then.

When that happens their password is populated correctly.

~ Mike
Fateh Alchhabi
RE: I can't import Users Password
2011年10月5日 上午12:14
答复

Fateh Alchhabi

等级: Junior Member

帖子: 58

加入日期: 2010年12月1日

最近的帖子

Hi Michael thanks for your concern
but after the import users can't sign in to portal site it give wrong password emoticon any Idea ?????
Michael Harper
RE: I can't import Users Password
2011年10月5日 上午6:37
答复

Michael Harper

等级: Junior Member

帖子: 56

加入日期: 2011年8月10日

最近的帖子

Fateh,

To get ours working correctly I had to delete the imported users out of the Liferay database and let them import 1 at a time as they logged in.

If I tried to pre-import anyone, it messed up their password and wouldn't let them log in.

~ Mike
Jason Reast-Jones
RE: I can't import Users Password
2011年10月6日 上午5:55
答复

Jason Reast-Jones

等级: New Member

帖子: 20

加入日期: 2008年10月10日

最近的帖子

Hi Fateh.

You won't be able to import the user's password from LDAP, LDAP may only have an encrypted version of the password, this is by design. If I remember correctly, Liferay will store the password when the user next logs in. If the users are unable to login as you've suggested, are you sure you have
1ldap.auth.enabled=true
(or set via the UI). Also you may need to choose between
1ldap.auth.method=bind
or
1ldap.auth.method=compare


You can increase logging for the ldap components to see what is really going on during login - see the wiki article on logging - you will need to increase the logging for com.liferay.portal.security.auth.LDAPAuth

Jason
Fateh Alchhabi
RE: I can't import Users Password
2011年10月8日 上午3:27
答复

Fateh Alchhabi

等级: Junior Member

帖子: 58

加入日期: 2010年12月1日

最近的帖子

Michael Harper:
Fateh,

To get ours working correctly I had to delete the imported users out of the Liferay database and let them import 1 at a time as they logged in.

If I tried to pre-import anyone, it messed up their password and wouldn't let them log in.

~ Mike





Thanks Michael Harper
emoticon

you are 100% right when passwords import more than 1 time the digest destroy the passwords and user no longer able to sign in
so clean up the user_ table in DB and import 1 time and it will work perfectly

thsnk verrrrrrrry mucccccccccch emoticon
cheers
Maria Monica Molina
RE: I can't import Users Password
2011年10月12日 上午9:09
答复

Maria Monica Molina

等级: New Member

帖子: 15

加入日期: 2009年6月30日

最近的帖子

Hi,

You can to try, to use this filter by authentication:
(&(objectClass=person)(sAMAccountName=@screen_name@))

Too, validate, if the password field name , have the name userPassword and not another.

You can to use any tool for to connect the Active Directory and look that the field name is the correct besides Review, if the DN Base is the appropiate.

Don't worry if the password values are not shown in the test display, the important is that you can authenticate.