Wednesday, November 5, 2008

Liferay OpenLDAP import/export

So here is what I want to accomplish, have Liferay (V5.5) authenticate against OpenLDAP and be able to import user/groups. After try and error I was able to configure the import functionality.

First you have to open portal.properties and comment the ldap.import.method=user and uncomment ldap.import.method=group. The explanation is enclosed in the comments.


# Set either user or group for import method. If set to user, portal will

# import all users and the groups associated with those users. If set to

# group, the portal import all groups and the users associated those groups.

# This value should be set based on how your LDAP server stores group

# membership information.

#

#ldap.import.method=user

ldap.import.method=group


Afterwards you have to login to Liferay as an admin user and go to the 'Enterprise Admin Portlet'-> Settings-> Authentication -> LDAP and set accordingly to your LDAP server. In every estep of the configuration you can validate that is making the connections.

Finally, section Import/Export should be configured like this:


3 comments:

Anonymous said...

Hi, thanks for ur article. I'm facing a problem with configuring the openldap with liferay 5.2.2 (tomcat 5.5) bundle version. So can you write a full article to configure openldap with liferay by giving some sample .ldif file with a couple of users and groups. i have gone through the web on the same but cameup with empty hands.

Anonymous said...

Hola,

estoy integrando Liferay con OpenLDAP y me da un error porque puedo importar los usuarios pero no los grupos. Mi configuracion es la siguiente:

LDIF:

version: 1
dn: dc=desarrollo
objectClass: dcObject
objectClass: organization
dc: desarrollo
o: desarrollo

dn: cn=Manager,dc=desarrollo
objectClass: person
objectClass: top
cn: Manager
sn: SinApellido

dn: ou=usuarios,dc=desarrollo
objectClass: top
objectClass: organizationalUnit
ou: usuarios

dn: cn=ruben.diaz,ou=usuarios,dc=desarrollo
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: person
objectClass: top
cn: ruben.diaz
sn: Diaz

dn: ou=carreras,cn=ruben.diaz,ou=usuarios,dc=desarrollo
objectClass: organizationalUnit
objectClass: top
ou: carreras

dn: cn=clara.ruiz,ou=usuarios,dc=desarrollo
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: person
objectClass: top
cn: clara.ruiz
sn: Ruiz

dn: ou=carreras,cn=clara.ruiz,ou=usuarios,dc=desarrollo
objectClass: organizationalUnit
objectClass: top
ou: carreras

dn: ou=facultades,dc=desarrollo
objectClass: top
objectClass: organizationalUnit
ou: facultades

dn: ou=derecho,ou=facultades,dc=desarrollo
objectClass: organizationalUnit
objectClass: top
ou: derecho

dn: ou=quimica,ou=facultades,dc=desarrollo
objectClass: organizationalUnit
objectClass: top
ou: quimica


Connection tab
* Base Provider URL : ldap://localhost:389
* Base DN : dc=desarrollo
* Principal : cn=Manager,dc=desarrollo
* Credentials : *****

Users tab
* Authentication Search Filter : (mail=@email_address@)
* Import Search Filter : (objectClass=inetOrgPerson)

User Mapping
* Screen Name : cn
* Password : userPassword
* Email Address : mail
* Full Name :
* First Name : givenName
* Last Name : sn
* Job Title : title
* Group :

Groups tab
* Import Search Filter : (organizationalUnit)

Group Mapping
* Group Name : cn
* Description : description
* User :

Import / Export tab

* Import Enabled (checked)
* Import on Startup Enabled (checked)
* Import Interval (5 Minutes)
* Export Enabled (checked)
* Users DN : dc=desarrollo
* User Default Object Classes : top,person,inetOrgPerson,organizationalPerson
* Groups DN : dc=desarrollo
Password Policy tab
* Use LDAP Password Policy (checked)


Sabes donde puede estar en error?.

Muchas gracias.

Laura.

Anonymous said...

Hi,
I did as said U.. and tested successflly but users and groups are not imported.
have a look at http://www.liferay.com/web/guest/community/forums/-/message_boards/message/3910265

for full description.