芋圓手稿

[Alfresco] 使用固定的 Dashlets

3 月 09

joechenAlfresco, 未分類 alfresco No Comments

參考網址
https://forums.alfresco.com/forum/installation-upgrades-configuration-integration/configuration/configure-fix-user-dashboard

要設定固定的 dashlet
presets.xml

[Alfresco] 整合 LDAP 及相關議題

3 月 09

joechenAlfresco, 未分類 alfresco No Comments

參考自
http://docs.alfresco.com/4.1/concepts/auth-ldap-openldaptips.html

1. 如果有500個使用者或群組, 可能會造成問題(OpenLDAP的議題)

2.Digest authentication , 如果有使用Digest, 在 slapd.conf 裡就要做好相關設定

# SASL mappings for md5 digest authentication
# Extract the user id and use as the search key

authz-regexp
uid=([^,]*),cn=digest-md5,cn=auth
ldap:///dc=company,dc=com??one?(uid=$1)

authz-regexp
uid=([^,]*),cn=company.com,cn=digest-md5,cn=auth
ldap:///dc=company,dc=com??one?(uid=$1)

# Tweaks to increase the result set size and max query time

sizelimit 50000
timelimit 3600

3.密碼採用純文字(讓各種驗證機制可被使用)

———–
OpenLDAP 服務安裝與設定
http://blog.xuite.net/tolarku/blog/161523701-LDAP+安裝介紹+-+CentOS+6.4+-+openldap

修改OpenLDAP預設服務port
編輯/etc/sysconfig/slapd 或/etc/sysconfig/ldap
http://stackoverflow.com/questions/31743764/changing-port-of-openldap-on-centos-installed-with-yum

Alfresco 整合 LDAP 參考資料
https://forums.alfresco.com/forum/installation-upgrades-configuration-integration/authentication-ldap-sso/how-configure-ad

實際設定, alfresco-global.properties
# LDAP
authentication.chain=alfinst:alfrescoNtlm,ldap1:ldap
#authentication.chain=ldap1:ldap
ntlm.authentication.sso.enabled=false
ldap.authentication.allowGuestLogin=false
ldap.authentication.userNameFormat=uid=%s,ou=Employee,dc=udngroup,dc=com
ldap.authentication.java.naming.provider.url=ldap://nic.twbbs.org:1352
ldap.authentication.defaultAdministratorUserNames=admin

ldap.synchronization.active=true
ldap.synchronization.java.naming.security.authentication=simple
ldap.synchronization.java.naming.security.principal=cn\=admin,dc\=udngroup,dc\=com
ldap.synchronization.java.naming.security.credentials=udng3609
ldap.synchronization.groupSearchBase=ou\=Employee,dc\=udngroup,dc\=com
ldap.synchronization.userSearchBase=cn\=joechen,ou\=Employee,dc\=udngroup,dc\=com

——————
其中 ldap.authentication.userNameFormat 的值, 如果留空
則表示只看 uid , 不限定 ou 為何, 均可通過
若有限定ou, 則會讓 Alfresco 無法存取其他 ou

———————
Alfresco 設定 LDAP , 可參考
https://geofoss.net/2015/07/10/alfresco-5-0-ldap-authentication/

Alfresco 批次新增使用者

2 月 01

joechenAlfresco, 未分類 alfresco No Comments

參考來源
http://docs.alfresco.com/4.1/tasks/at-adminconsole-upload-users.html

格式如下,
User Name,First Name,Last Name,E-mail Address,,Password,Company,Job Title,Location,Telephone,Mobile,
Skype,IM,Google User Name,Address,Address Line 2,Address Line 3,Post Code,Telephone,Fax,Email

以 CVS 格式存檔, 再以 UTF-8編碼, 上傳到 alfresco

查看 Salsauthd 的功能 (2013)

2 月 01

joechen未分類 No Comments

利用 yum install cyrus-sasl-md5 cyrus-sasl-plain cyrus-sasl

修改 /etc/postfix/main.cf 加入下面設定

smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination,
reject_rbl_client cbl.abuseat.org,
reject_rbl_client bl.spamcop.net,
reject_rbl_client sbl-xbl.spamhaus.org

設定啟動 saslauthd 服務,並設定開機自動啟動

利用gmail代Alfresco發信的準備工作

1 月 25

joechenAlfresco, 未分類 alfresco No Comments

編輯 alfresco-global.properties
# Gmail notification
mail.host=smtp.gmail.com
mail.port=465
mail.username=username@gmail.com
mail.password=xxxxx
mail.protocol=smtps
mail.smtps.starttls.enable=true
mail.smtps.auth=true

2016-01-25 16:35:51,540 ERROR [action.executer.MailActionExecuter] [mailAsyncAction1] Failed to send email to [70847] : org.springframework.mail.MailAuthent
icationException: Authentication failed; nested exception is javax.mail.AuthenticationFailedException: 534-5.7.14 Please log in via your web browser and
534-5.7.14 then try again.
534-5.7.14 Learn more at
534 5.7.14 https://support.google.com/mail/answer/78754 ty5sm26526272pac.48 – gsmtp

https://accounts.google.com/DisplayUnlockCaptcha(這個設定沒用)

要設定, 安全性較低的應用程式存取權限

SLA 幾個9

1 月 21

joechen未分類 No Comments

https://technet.microsoft.com/en-us/library/cc748824.aspx#SolutionHA

Acceptable availability percentage
Downtime per day
Downtime per month
Downtime per year

90 (one nine)
144.00 minutes
72 hours
36.5days

99 (two nines)
14.40 minutes
7 hours
3.65 days

99.9 (three nines)
86.40 seconds
43 minutes
8.77 hours

99.99 (four nines)
8.64 seconds
4 minutes
52.60 minutes

99.999 (five nines)
0.86 seconds
26 seconds
5.26 minutes

LogAnalyzer 介面中文化

1 月 19

joechen未分類 No Comments

http://www.netadmin.com.tw/article_content.aspx?sn=1205080005&jump=4