I can't import Users Password

[Fateh Alchhabi，修改在12 年前。]

when i try to import Users by Ldap I have problem because i can't Import the users Passwords
when i import the user passwords in the preview panel in liferay window the passwords field Looks blank....



ps: i use this attributes

ldap.auth.password.encryption.algorithm.types=MD5,SHA

Base Provider Url : ldap://ip-address:389
Base DN : ou=Tech,dc=mpowerglobal,dc=com

Principal : mpowerglobal\administrator

credentials : abc123.

****
Authentication Search Filter : (&objectCategory=Person)(mail=@email_address@)

import search filter: (objectClass=User)

****
screenName : sAMAccountName

password: userPassword

EmailAddress : mail

first Name : givenName

LastName : sn

Jobtitle : title

Group : memberOf

[Michael Harper，修改在12 年前。]

Fateh,

I could never get the bulk import on LDAP to import the passwords.
I disabled the import so it only imports on demand now.

Each time someone new logs in it goes out and verifies that they are in the database through the LDAP and imports their information then.

When that happens their password is populated correctly.

~ Mike

[Fateh Alchhabi，修改在12 年前。]

Hi Michael thanks for your concern
but after the import users can't sign in to portal site it give wrong password any Idea ?????

[Michael Harper，修改在12 年前。]

Fateh,

To get ours working correctly I had to delete the imported users out of the Liferay database and let them import 1 at a time as they logged in.

If I tried to pre-import anyone, it messed up their password and wouldn't let them log in.

~ Mike

[Fateh Alchhabi，修改在12 年前。]

Michael Harper:

Fateh,

To get ours working correctly I had to delete the imported users out of the Liferay database and let them import 1 at a time as they logged in.

If I tried to pre-import anyone, it messed up their password and wouldn't let them log in.

~ Mike

Thanks Michael Harper


you are 100% right when passwords import more than 1 time the digest destroy the passwords and user no longer able to sign in
so clean up the user_ table in DB and import 1 time and it will work perfectly

thsnk verrrrrrrry mucccccccccch
cheers

[Maria Monica Molina，修改在12 年前。]

Hi,

You can to try, to use this filter by authentication:
(&(objectClass=person)(sAMAccountName=@screen_name@))

Too, validate, if the password field name , have the name userPassword and not another.

You can to use any tool for to connect the Active Directory and look that the field name is the correct besides Review, if the DN Base is the appropiate.

Don't worry if the password values are not shown in the test display, the important is that you can authenticate.

[Jason Reast-Jones，修改在12 年前。]

Hi Fateh.

You won't be able to import the user's password from LDAP, LDAP may only have an encrypted version of the password, this is by design. If I remember correctly, Liferay will store the password when the user next logs in. If the users are unable to login as you've suggested, are you sure you have

ldap.auth.enabled=true

(or set via the UI). Also you may need to choose between

ldap.auth.method=bind

or

ldap.auth.method=compare

You can increase logging for the ldap components to see what is really going on during login - see the wiki article on logging - you will need to increase the logging for com.liferay.portal.security.auth.LDAPAuth

Jason