mirror of
https://github.com/Alfresco/alfresco-community-repo.git
synced 2025-07-24 17:32:48 +00:00
Merged enterprise features
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@2746 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
@@ -7,12 +7,12 @@
|
||||
|
||||
<!-- -->
|
||||
<!-- This implementation supports the identification of users as admin users. -->
|
||||
<!-- It does NOT support any other groupings of users. -->
|
||||
<!-- It also supports groups and allows groups and users to be arranged into -->
|
||||
<!-- hierarchies. -->
|
||||
<!-- -->
|
||||
|
||||
<beans>
|
||||
<bean id="authorityService" class="org.alfresco.repo.security.authority.SimpleAuthorityServiceImpl">
|
||||
<!-- Wiring up of services on which this service depends -->
|
||||
|
||||
<bean id="authorityService" class="org.alfresco.repo.security.authority.AuthorityServiceImpl">
|
||||
<property name="authenticationComponent">
|
||||
<ref bean="authenticationComponent" />
|
||||
</property>
|
||||
@@ -22,6 +22,12 @@
|
||||
<property name="nodeService">
|
||||
<ref bean="nodeService" />
|
||||
</property>
|
||||
<property name="authorityDAO">
|
||||
<ref bean="authorityDAO" />
|
||||
</property>
|
||||
<property name="permissionServiceSPI">
|
||||
<ref bean="permissionServiceImpl" />
|
||||
</property>
|
||||
<!-- -->
|
||||
<!-- A list of users with admin rights. -->
|
||||
<!-- -->
|
||||
@@ -42,4 +48,28 @@
|
||||
</set>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
<!-- Authority DAO that stores group information along with user information, -->
|
||||
<!-- in the repository. -->
|
||||
<!-- -->
|
||||
<!-- This bean uses the userToAuthorityCache configured in cache-context.xml -->
|
||||
<!-- -->
|
||||
<bean id="authorityDAO" class="org.alfresco.repo.security.authority.AuthorityDAOImpl">
|
||||
<property name="nodeService">
|
||||
<ref bean="nodeService" />
|
||||
</property>
|
||||
<property name="namespacePrefixResolver">
|
||||
<ref bean="namespaceService" />
|
||||
</property>
|
||||
<property name="searchService">
|
||||
<ref bean="searchService" />
|
||||
</property>
|
||||
<property name="dictionaryService">
|
||||
<ref bean="dictionaryService" />
|
||||
</property>
|
||||
<property name="userToAuthorityCache">
|
||||
<ref bean="userToAuthorityCache" />
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
</beans>
|
BIN
config/alfresco/desktop/Alfresco.exe
Normal file
BIN
config/alfresco/desktop/Alfresco.exe
Normal file
Binary file not shown.
@@ -0,0 +1,93 @@
|
||||
<?xml version='1.0' encoding='UTF-8'?>
|
||||
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>
|
||||
|
||||
<beans>
|
||||
|
||||
|
||||
|
||||
<!-- Chaining -->
|
||||
|
||||
<bean id="authenticationServiceImpl" class="org.alfresco.repo.security.authentication.ChainingAuthenticationServiceImpl">
|
||||
<property name="authenticationServices">
|
||||
<list>
|
||||
<ref bean="authenticationServiceImplJAAS"/>
|
||||
</list>
|
||||
</property>
|
||||
<property name="mutableAuthenticationService">
|
||||
<ref bean="authenticationServiceImplAlfresco"/>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
<!-- Alfresco Auth -->
|
||||
|
||||
<bean id="authenticationServiceImplAlfresco" class="org.alfresco.repo.security.authentication.AuthenticationServiceImpl">
|
||||
<property name="authenticationDao">
|
||||
<ref bean="authenticationDaoAlfresco"/>
|
||||
</property>
|
||||
<property name="ticketComponent">
|
||||
<ref bean="ticketComponent"/>
|
||||
</property>
|
||||
<property name="authenticationComponent">
|
||||
<ref bean="authenticationComponentImplAlfresco"/>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
<bean id="authenticationDaoAlfresco" class="org.alfresco.repo.security.authentication.RepositoryAuthenticationDao">
|
||||
<property name="nodeService">
|
||||
<ref bean="nodeService"/>
|
||||
</property>
|
||||
<property name="dictionaryService">
|
||||
<ref bean="dictionaryService"/>
|
||||
</property>
|
||||
<property name="namespaceService">
|
||||
<ref bean="namespaceService"/>
|
||||
</property>
|
||||
<property name="searchService">
|
||||
<ref bean="searchService"/>
|
||||
</property>
|
||||
<property name="userNamesAreCaseSensitive">
|
||||
<value>${user.name.caseSensitive}</value>
|
||||
</property>
|
||||
<property name="passwordEncoder">
|
||||
<ref bean="passwordEncoder"/>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
<bean id="authenticationComponentImplAlfresco" class="org.alfresco.repo.security.authentication.AuthenticationComponentImpl">
|
||||
<property name="authenticationDao">
|
||||
<ref bean="authenticationDaoAlfresco"/>
|
||||
</property>
|
||||
<property name="authenticationManager">
|
||||
<ref bean="authenticationManager"/>
|
||||
</property>
|
||||
<property name="allowGuestLogin">
|
||||
<value>true</value>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
<!-- JAAS -->
|
||||
|
||||
<bean id="authenticationServiceImplJAAS" class="org.alfresco.repo.security.authentication.AuthenticationServiceImpl">
|
||||
<property name="authenticationDao">
|
||||
<ref bean="authenticationDaoJAAS"/>
|
||||
</property>
|
||||
<property name="ticketComponent">
|
||||
<ref bean="ticketComponent"/>
|
||||
</property>
|
||||
<property name="authenticationComponent">
|
||||
<ref bean="authenticationComponentImplJAAS"/>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
<bean id="authenticationComponentImplJAAS" class="org.alfresco.repo.security.authentication.jaas.JAASAuthenticationComponent">
|
||||
<property name="realm">
|
||||
<value>COMPANY.COM</value>
|
||||
</property>
|
||||
<property name="jaasConfigEntryName">
|
||||
<value>Alfresco</value>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
<bean id="authenticationDaoJAAS" class="org.alfresco.repo.security.authentication.ntlm.NullMutableAuthenticationDao"/>
|
||||
|
||||
</beans>
|
@@ -0,0 +1,38 @@
|
||||
<?xml version='1.0' encoding='UTF-8'?>
|
||||
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>
|
||||
|
||||
<beans>
|
||||
<!-- The authentication component. -->
|
||||
|
||||
<!-- Jass authentication - most of the config goes somewhere else -->
|
||||
|
||||
<bean id="authenticationComponentImpl"
|
||||
class="org.alfresco.repo.security.authentication.jaas.JAASAuthenticationComponent">
|
||||
<property name="realm">
|
||||
<value>DEFAULT.REALM</value>
|
||||
</property>
|
||||
<property name="jaasConfigEntryName">
|
||||
<value>Alfresco</value>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
<bean id="alfDaoImpl" class="org.springframework.transaction.interceptor.TransactionProxyFactoryBean">
|
||||
<property name="proxyInterfaces">
|
||||
<value>
|
||||
org.alfresco.repo.security.authentication.MutableAuthenticationDao
|
||||
</value>
|
||||
</property>
|
||||
<property name="transactionManager">
|
||||
<ref bean="transactionManager" />
|
||||
</property>
|
||||
<property name="target">
|
||||
<bean class="org.alfresco.repo.security.authentication.ntlm.NullMutableAuthenticationDao" />
|
||||
</property>
|
||||
<property name="transactionAttributes">
|
||||
<props>
|
||||
<prop key="*">${server.transaction.mode.default}</prop>
|
||||
</props>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
</beans>
|
442
config/alfresco/extension/ldap-authentication-context.xml.sample
Normal file
442
config/alfresco/extension/ldap-authentication-context.xml.sample
Normal file
@@ -0,0 +1,442 @@
|
||||
<?xml version='1.0' encoding='UTF-8'?>
|
||||
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>
|
||||
|
||||
<beans>
|
||||
|
||||
<!-- DAO that rejects changes - LDAP is read only at the moment -->
|
||||
|
||||
<bean id="alfDaoImpl" class="org.springframework.transaction.interceptor.TransactionProxyFactoryBean">
|
||||
<property name="proxyInterfaces">
|
||||
<value>org.alfresco.repo.security.authentication.MutableAuthenticationDao</value>
|
||||
</property>
|
||||
<property name="transactionManager">
|
||||
<ref bean="transactionManager" />
|
||||
</property>
|
||||
<property name="target">
|
||||
<bean class="org.alfresco.repo.security.authentication.ntlm.NullMutableAuthenticationDao" />
|
||||
</property>
|
||||
<property name="transactionAttributes">
|
||||
<props>
|
||||
<prop key="*">${server.transaction.mode.default}</prop>
|
||||
</props>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
<!-- LDAP authentication configuration -->
|
||||
|
||||
<!--
|
||||
|
||||
You can also use JAAS authentication for Kerberos against Active Directory or NTLM if you also require single sign on from the
|
||||
web browser. You do not have to use LDAP authentication to synchronise groups and users from an LDAP store if it supports other
|
||||
authentication routes, like Active Directory.
|
||||
|
||||
-->
|
||||
|
||||
<bean id="authenticationComponentImpl" class="org.alfresco.repo.security.authentication.ldap.LDAPAuthenticationComponentImpl">
|
||||
<property name="LDAPInitialDirContextFactory">
|
||||
<ref bean="ldapInitialDirContextFactory"/>
|
||||
</property>
|
||||
<property name="userNameFormat">
|
||||
<!--
|
||||
|
||||
This maps between what the user types in and what is passed through to the underlying LDAP authentication.
|
||||
|
||||
"%s" - the user id is passed through without modification.
|
||||
Used for LDAP authentication such as DIGEST-MD5, anything that is not "simple".
|
||||
|
||||
"cn=%s,ou=London,dc=company,dc=com" - If the user types in "Joe Bloggs" the authentricate as "cn=Joe Bloggs,ou=London,dc=company,dc=com"
|
||||
Usually for simple authentication.
|
||||
|
||||
-->
|
||||
<value>%s</value>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
<!--
|
||||
|
||||
This bean is used to support general LDAP authentication. It is also used to provide read only access to users and groups
|
||||
to pull them out of the LDAP reopsitory
|
||||
|
||||
-->
|
||||
|
||||
<bean id="ldapInitialDirContextFactory" class="org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextFactoryImpl">
|
||||
<property name="initialDirContextEnvironment">
|
||||
<map>
|
||||
<!-- The LDAP provider -->
|
||||
<entry key="java.naming.factory.initial">
|
||||
<value>com.sun.jndi.ldap.LdapCtxFactory</value>
|
||||
</entry>
|
||||
|
||||
<!-- The url to the LDAP server -->
|
||||
<!-- Note you can use space separated urls - they will be tried in turn until one works -->
|
||||
<!-- This could be used to authenticate against one or more ldap servers (you will not know which one ....) -->
|
||||
<entry key="java.naming.provider.url">
|
||||
<value>ldap://openldap.domain.com:389</value>
|
||||
</entry>
|
||||
|
||||
<!-- The authentication mechanism to use -->
|
||||
<!-- Some sasl authentication mechanisms may require a realm to be set -->
|
||||
<!-- java.naming.security.sasl.realm -->
|
||||
<!-- The available options will depend on your LDAP provider -->
|
||||
<entry key="java.naming.security.authentication">
|
||||
<value>DIGEST-MD5</value>
|
||||
</entry>
|
||||
|
||||
<!-- The id of a user who can read group and user information -->
|
||||
<!-- This does not go through the pattern substitution defined above and is used "as is" -->
|
||||
<entry key="java.naming.security.principal">
|
||||
<value>reader</value>
|
||||
</entry>
|
||||
|
||||
<!-- The password for the user defined above -->
|
||||
<entry key="java.naming.security.credentials">
|
||||
<value>secret</value>
|
||||
</entry>
|
||||
</map>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
<!-- Ldap Syncronisation support -->
|
||||
|
||||
<!--
|
||||
|
||||
There can be more than one stack of beans that import users or groups. For example, it may be easier
|
||||
to have a version of ldapPeopleExportSource, and associated beans, for each sub-tree of your ldap directory
|
||||
from which you want to import users. You could then limit users to be imported from two or more sub tress and ignore
|
||||
users found else where. The same applies to the import of groups.
|
||||
|
||||
The defaults shown below are for OpenLDAP.
|
||||
|
||||
-->
|
||||
|
||||
|
||||
<!-- Extract user information from LDAP and transform this to XML -->
|
||||
|
||||
<bean id="ldapPeopleExportSource" class="org.alfresco.repo.security.authentication.ldap.LDAPPersonExportSource">
|
||||
<!--
|
||||
The query to select objects that represent the users to import.
|
||||
|
||||
For Open LDAP, using a basic schema, the following is probably what you want:
|
||||
(objectclass=inetOrgPerson)
|
||||
|
||||
For Active Directory:
|
||||
(objectclass=user)
|
||||
-->
|
||||
<property name="personQuery">
|
||||
<value>(objectclass=inetOrgPerson)</value>
|
||||
</property>
|
||||
|
||||
<!--
|
||||
The seach base restricts the LDAP query to a sub section of tree on the LDAP server.
|
||||
-->
|
||||
<property name="searchBase">
|
||||
<value>dc=alfresco,dc=org</value>
|
||||
</property>
|
||||
|
||||
<!--
|
||||
The unique identifier for the user.
|
||||
|
||||
THIS MUST MATCH WHAT THE USER TYPES IN AT THE LOGIN PROMPT
|
||||
|
||||
For simple LDAP authentication this is likely to be "cn" or, less friendly, "distinguishedName"
|
||||
|
||||
In OpenLDAP, using other authentication mechanisms "uid", but this depends on how you map
|
||||
from the id in the LDAP authentication request to search for the inetOrgPerson against which
|
||||
to authenticate.
|
||||
|
||||
In Active Directory this is most likely to be "sAMAccountName"
|
||||
|
||||
This property is mandatory and must appear on all users found by the query defined above.
|
||||
|
||||
-->
|
||||
<property name="userIdAttributeName">
|
||||
<value>uid</value>
|
||||
</property>
|
||||
|
||||
<!-- Services -->
|
||||
<property name="LDAPInitialDirContextFactory">
|
||||
<ref bean="ldapInitialDirContextFactory"/>
|
||||
</property>
|
||||
<property name="personService">
|
||||
<ref bean="personService"></ref>
|
||||
</property>
|
||||
<property name="namespaceService">
|
||||
<ref bean="namespaceService"/>
|
||||
</property>
|
||||
|
||||
<!--
|
||||
The path to the location of a space to use as the default home folder.
|
||||
This folder should be readable by all users, or a group to which all imported users belong.
|
||||
-->
|
||||
<property name="defaultHomeFolder">
|
||||
<value>/app:company_home</value>
|
||||
</property>
|
||||
|
||||
<!--
|
||||
This property defines a mapping between attributes held on LDAP user objects and
|
||||
the properties of user objects held in the repository. The key is the QName of an attribute in
|
||||
the repository, the value is the attribute name from the user/inetOrgPerson/.. object in the
|
||||
LDAP repository.
|
||||
-->
|
||||
<property name="attributeMapping">
|
||||
<map>
|
||||
<entry key="cm:userName">
|
||||
<!-- Must match the same attribute as userIdAttributeName -->
|
||||
<value>uid</value>
|
||||
</entry>
|
||||
<entry key="cm:firstName">
|
||||
<!-- OpenLDAP: "givenName" -->
|
||||
<!-- Active Directory: "givenName" -->
|
||||
<value>givenName</value>
|
||||
</entry>
|
||||
<entry key="cm:lastName">
|
||||
<!-- OpenLDAP: "sn" -->
|
||||
<!-- Active Directory: "sn" -->
|
||||
<value>sn</value>
|
||||
</entry>
|
||||
<entry key="cm:email">
|
||||
<!-- OpenLDAP: "mail" -->
|
||||
<!-- Active Directory: "???" -->
|
||||
<value>mail</value>
|
||||
</entry>
|
||||
<entry key="cm:organizationId">
|
||||
<!-- OpenLDAP: "o" -->
|
||||
<!-- Active Directory: "???" -->
|
||||
<value>o</value>
|
||||
</entry>
|
||||
</map>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
<!-- Extract group information from LDAP and transform this to XML -->
|
||||
|
||||
<bean id="ldapGroupExportSource" class="org.alfresco.repo.security.authentication.ldap.LDAPGroupExportSource">
|
||||
<!--
|
||||
The query to select objects that represent the groups to import.
|
||||
|
||||
For Open LDAP, using a basic schema, the following is probably what you want:
|
||||
(objectclass=groupOfNames)
|
||||
|
||||
For Active Directory:
|
||||
(objectclass=group)
|
||||
-->
|
||||
<property name="groupQuery">
|
||||
<value>(objectclass=groupOfNames)</value>
|
||||
</property>
|
||||
|
||||
<!--
|
||||
The seach base restricts the LDAP query to a sub section of tree on the LDAP server.
|
||||
-->
|
||||
<property name="searchBase">
|
||||
<value>dc=alfresco,dc=org</value>
|
||||
</property>
|
||||
|
||||
<!--
|
||||
The unique identifier for the user. This must match the userIdAttributeName on the ldapPeopleExportSource bean above.
|
||||
-->
|
||||
<property name="userIdAttributeName">
|
||||
<value>uid</value>
|
||||
</property>
|
||||
|
||||
<!--
|
||||
An attribute that is a unique identifier for each group found.
|
||||
This is also the name of the group with the current group implementation.
|
||||
This is mandatory for any groups found.
|
||||
|
||||
OpenLDAP: "cn" as it is mandatory on groupOfNames
|
||||
Active Directory: "cn"
|
||||
|
||||
-->
|
||||
<property name="groupIdAttributeName">
|
||||
<value>cn</value>
|
||||
</property>
|
||||
|
||||
<!--
|
||||
The objectClass attribute for group members.
|
||||
For each member of a group, the distinguished name is given.
|
||||
The object is looked up by its DN. If the object is of this class it is treated as a group.
|
||||
-->
|
||||
<property name="groupType">
|
||||
<value>groupOfNames</value>
|
||||
</property>
|
||||
|
||||
<!--
|
||||
The objectClass attribute for person members.
|
||||
For each member of a group, the distinguished name is given.
|
||||
The object is looked up by its DN. If the object is of this class it is treated as a person.
|
||||
-->
|
||||
<property name="personType">
|
||||
<value>inetOrgPerson</value>
|
||||
</property>
|
||||
<property name="LDAPInitialDirContextFactory">
|
||||
<ref bean="ldapInitialDirContextFactory"/>
|
||||
</property>
|
||||
<property name="namespaceService">
|
||||
<ref bean="namespaceService"/>
|
||||
</property>
|
||||
|
||||
<!--
|
||||
The repeating attribute on group objects (found by query or as sub groups)
|
||||
used to define membership of the group. This is assumed to hold distinguished names of
|
||||
other groups or users/people; the above types are used to determine this.
|
||||
|
||||
OpenLDAP: "member" as it is mandatory on groupOfNames
|
||||
Active Directory: "member"
|
||||
|
||||
-->
|
||||
<property name="memberAttribute">
|
||||
<value>member</value>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
<!-- Job definitions to import LDAP people and groups -->
|
||||
<!-- The triggers register themselves with the scheduler -->
|
||||
<!-- You may comment in the default scheduler to enable these triggers -->
|
||||
<!-- If a cron base trigger is what you want seee scheduled-jobs-context.xml for examples. -->
|
||||
|
||||
<!-- Trigger to load poeple -->
|
||||
<!-- Note you can have more than one initial (context, trigger, import job and export source) set -->
|
||||
<!-- This would allow you to load people from more than one ldap store -->
|
||||
|
||||
<bean id="ldapPeopleTrigger" class="org.alfresco.util.TriggerBean">
|
||||
<property name="jobDetail">
|
||||
<bean id="ldapPeopleJobDetail" class="org.springframework.scheduling.quartz.JobDetailBean">
|
||||
<property name="jobClass">
|
||||
<value>org.alfresco.repo.importer.ImporterJob</value>
|
||||
</property>
|
||||
<property name="jobDataAsMap">
|
||||
<map>
|
||||
<entry key="bean">
|
||||
<ref bean="ldapPeopleImport"/>
|
||||
</entry>
|
||||
</map>
|
||||
</property>
|
||||
</bean>
|
||||
</property>
|
||||
<!-- Start after 30 seconds of starting the repository -->
|
||||
<property name="startDelay">
|
||||
<value>30000</value>
|
||||
</property>
|
||||
<!-- Repeat every hour -->
|
||||
<property name="repeatInterval">
|
||||
<value>3600000</value>
|
||||
</property>
|
||||
<!-- Commented out to disable
|
||||
<property name="scheduler">
|
||||
<ref bean="schedulerFactory" />
|
||||
</property>
|
||||
-->
|
||||
</bean>
|
||||
|
||||
<bean id="ldapGroupTrigger" class="org.alfresco.util.TriggerBean">
|
||||
<property name="jobDetail">
|
||||
<bean id="ldapGroupJobDetail" class="org.springframework.scheduling.quartz.JobDetailBean">
|
||||
<property name="jobClass">
|
||||
<value>org.alfresco.repo.importer.ImporterJob</value>
|
||||
</property>
|
||||
<property name="jobDataAsMap">
|
||||
<map>
|
||||
<entry key="bean">
|
||||
<ref bean="ldapGroupImport"/>
|
||||
</entry>
|
||||
</map>
|
||||
</property>
|
||||
</bean>
|
||||
</property>
|
||||
<!-- Start after 30 seconds of starting the repository -->
|
||||
<property name="startDelay">
|
||||
<value>30000</value>
|
||||
</property>
|
||||
<!-- Repeat every hour -->
|
||||
<property name="repeatInterval">
|
||||
<value>3600000</value>
|
||||
</property>
|
||||
<!-- Commented out to disable
|
||||
<property name="scheduler">
|
||||
<ref bean="schedulerFactory" />
|
||||
</property>
|
||||
-->
|
||||
</bean>
|
||||
|
||||
<!-- The bean that imports xml describing people -->
|
||||
|
||||
<bean id="ldapPeopleImport" class="org.alfresco.repo.importer.ExportSourceImporter">
|
||||
<property name="importerService">
|
||||
<ref bean="importerComponent"/>
|
||||
</property>
|
||||
<property name="transactionService">
|
||||
<ref bean="transactionComponent"/>
|
||||
</property>
|
||||
<property name="authenticationComponent">
|
||||
<ref bean="authenticationComponent"/>
|
||||
</property>
|
||||
<property name="exportSource">
|
||||
<ref bean="ldapPeopleExportSource"/>
|
||||
</property>
|
||||
|
||||
<!-- The store that contains people - this should not be changed -->
|
||||
<property name="storeRef">
|
||||
<value>${spaces.store}</value>
|
||||
</property>
|
||||
|
||||
<!-- The location of people nodes within the store defined above - this should not be changed -->
|
||||
<property name="path">
|
||||
<value>/${system.system_container.childname}/${system.people_container.childname}</value>
|
||||
</property>
|
||||
|
||||
<!-- If true, clear all existing people before import, if false update/add people from the xml -->
|
||||
<property name="clearAllChildren">
|
||||
<value>false</value>
|
||||
</property>
|
||||
<property name="nodeService">
|
||||
<ref bean="nodeService"/>
|
||||
</property>
|
||||
<property name="searchService">
|
||||
<ref bean="searchService"/>
|
||||
</property>
|
||||
<property name="namespacePrefixResolver">
|
||||
<ref bean="namespaceService"/>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
<!-- The bean that imports xml descibing groups -->
|
||||
|
||||
<bean id="ldapGroupImport" class="org.alfresco.repo.importer.ExportSourceImporter">
|
||||
<property name="importerService">
|
||||
<ref bean="importerComponent"/>
|
||||
</property>
|
||||
<property name="transactionService">
|
||||
<ref bean="transactionComponent"/>
|
||||
</property>
|
||||
<property name="authenticationComponent">
|
||||
<ref bean="authenticationComponent"/>
|
||||
</property>
|
||||
<property name="exportSource">
|
||||
<ref bean="ldapGroupExportSource"/>
|
||||
</property>
|
||||
<!-- The store that contains group information - this should not be changed -->
|
||||
<property name="storeRef">
|
||||
<value>${alfresco_user_store.store}</value>
|
||||
</property>
|
||||
|
||||
<!-- The location of group information in the store above - this should not be changed -->
|
||||
<property name="path">
|
||||
<value>/${alfresco_user_store.system_container.childname}/${alfresco_user_store.authorities_container.childname}</value>
|
||||
</property>
|
||||
|
||||
<!-- If true, clear all existing groups before import, if false update/add groups from the xml -->
|
||||
<property name="clearAllChildren">
|
||||
<value>true</value>
|
||||
</property>
|
||||
<property name="nodeService">
|
||||
<ref bean="nodeService"/>
|
||||
</property>
|
||||
<property name="searchService">
|
||||
<ref bean="searchService"/>
|
||||
</property>
|
||||
<property name="namespacePrefixResolver">
|
||||
<ref bean="namespaceService"/>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
</beans>
|
@@ -0,0 +1,35 @@
|
||||
<?xml version='1.0' encoding='UTF-8'?>
|
||||
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>
|
||||
|
||||
<beans>
|
||||
|
||||
<bean id="authenticationDao" class="org.alfresco.repo.security.authentication.ntlm.NullMutableAuthenticationDao" />
|
||||
|
||||
<!-- The authentication component. -->
|
||||
|
||||
<!-- Use the passthru authentication component to authenticate using -->
|
||||
<!-- user accounts on one or more Windows servers. -->
|
||||
|
||||
<!-- Properties that specify the server(s) to use for passthru -->
|
||||
<!-- authentication :- -->
|
||||
<!-- useLocalServer use the local server for authentication -->
|
||||
<!-- domain use domain controllers from the specified domain-->
|
||||
<!-- servers comma delimted list of server addresses or -->
|
||||
<!-- names -->
|
||||
|
||||
<bean id="authenticationComponentImpl" class="org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl">
|
||||
<property name="useLocalServer">
|
||||
<value>true</value>
|
||||
</property>
|
||||
<property name="personService">
|
||||
<ref bean="personService" />
|
||||
</property>
|
||||
<property name="nodeService">
|
||||
<ref bean="nodeService" />
|
||||
</property>
|
||||
<property name="guestAccess">
|
||||
<value>false</value>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
</beans>
|
@@ -0,0 +1,71 @@
|
||||
<?xml version='1.0' encoding='UTF-8'?>
|
||||
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>
|
||||
|
||||
<beans>
|
||||
<!--
|
||||
This file is not included in the application context by default.
|
||||
If you include this file, please ensure that you review the sample
|
||||
beans contained here.
|
||||
-->
|
||||
|
||||
<bean id="backupContentStore"
|
||||
class="org.alfresco.repo.content.filestore.FileContentStore">
|
||||
<constructor-arg>
|
||||
<value>s:/backups/alfresco</value>
|
||||
</constructor-arg>
|
||||
</bean>
|
||||
|
||||
<bean id="primaryContentStoreBackupComponent"
|
||||
class="org.alfresco.repo.content.replication.ContentStoreReplicator"
|
||||
depends-on="fileContentStore, backupContentStore"
|
||||
init-method="start">
|
||||
<!-- content source -->
|
||||
<property name="sourceStore">
|
||||
<value>fileContentStore</value>
|
||||
</property>
|
||||
<!-- content target -->
|
||||
<property name="targetStore">
|
||||
<value>backupContentStore</value>
|
||||
</property>
|
||||
<!-- set to 'false' to perform a single pass before quitting -->
|
||||
<property name="runContinuously">
|
||||
<value>true</value>
|
||||
</property>
|
||||
<!-- time between passes -->
|
||||
<property name="waitTime">
|
||||
<value>60</value>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
<bean id="replicatingContentStore"
|
||||
class="org.alfresco.repo.content.replication.ReplicatingContentStore" >
|
||||
<!-- the preferred store for reads and writes -->
|
||||
<property name="primaryStore">
|
||||
<ref bean="fileContentStore" />
|
||||
</property>
|
||||
<!-- example of possible secondary store configuration -->
|
||||
<property name="secondaryStores">
|
||||
<list>
|
||||
<ref bean="archiveStoreA" />
|
||||
<ref bean="archiveStoreB" />
|
||||
</list>
|
||||
</property>
|
||||
<!-- enable content missing from the primary store to be pulled in from the secondary stores -->
|
||||
<property name="inbound">
|
||||
<value>false</value>
|
||||
</property>
|
||||
<!-- enable replication from the primary to the secondary stores -->
|
||||
<property name="outbound">
|
||||
<value>false</value>
|
||||
</property>
|
||||
<!-- this is required if outbound replication is active, otherwise not -->
|
||||
<property name="transactionService">
|
||||
<ref bean="transactionComponent" />
|
||||
</property>
|
||||
<!-- set this to force outbound replication to be asynchronous -->
|
||||
<property name="outboundThreadPoolExecutor">
|
||||
<ref bean="threadPoolExecutor" />
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
</beans>
|
@@ -2,23 +2,49 @@
|
||||
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>
|
||||
|
||||
<beans>
|
||||
|
||||
<!-- full node index recovery -->
|
||||
<bean id="indexRecoveryComponent" class="org.alfresco.repo.node.index.FtsIndexRecoveryComponent" >
|
||||
|
||||
<bean id="indexRecoveryComponentBase" abstract="true" >
|
||||
<property name="sessionFactory">
|
||||
<ref bean="sessionFactory" />
|
||||
</property>
|
||||
<property name="transactionService">
|
||||
<ref bean="transactionComponent" />
|
||||
</property>
|
||||
<property name="indexer">
|
||||
<ref bean="indexerComponent" />
|
||||
</property>
|
||||
<property name="ftsIndexer">
|
||||
<ref bean="LuceneFullTextSearchIndexer" />
|
||||
</property>
|
||||
<property name="searcher">
|
||||
<ref bean="searchService" />
|
||||
</property>
|
||||
<property name="nodeService">
|
||||
<ref bean="nodeService" />
|
||||
</property>
|
||||
<property name="stores">
|
||||
<list>
|
||||
<value>workspace://SpacesStore</value>
|
||||
<value>workspace://lightWeightVersionStore</value>
|
||||
<value>user://alfrescoUserStore</value>
|
||||
</list>
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
|
||||
<!-- full node index recovery -->
|
||||
<bean id="indexRecoveryComponent" class="org.alfresco.repo.node.index.FullIndexRecoveryComponent" parent="indexRecoveryComponentBase">
|
||||
<property name="executeFullRecovery">
|
||||
<value>false</value> <!-- enable this to start the full index recovery -->
|
||||
</property>
|
||||
<property name="runContinuously">
|
||||
<value>false</value> <!-- ensure the index is up to date and then stop -->
|
||||
</property>
|
||||
<property name="waitTime">
|
||||
<value>1000</value> <!-- milliseconds to wait between checks for new transactions -->
|
||||
</property>
|
||||
<property name="l2CacheMode">
|
||||
<value>NORMAL</value> <!-- normal L2 cache usage (database is changed by this server only) -->
|
||||
</property>
|
||||
</bean>
|
||||
|
||||
</beans>
|
@@ -7,7 +7,7 @@
|
||||
version.major=1
|
||||
version.minor=3
|
||||
version.revision=0
|
||||
version.label=
|
||||
version.label=dev
|
||||
|
||||
# Edition label
|
||||
|
||||
|
Reference in New Issue
Block a user