Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The Alfresco documentation seems to consider only LDAP or Active Directory cases.

In my case, all users are in MIT Kerberos, but I don't use LDAP nor Active Directory.

What authentication chain should I use?

ldap1:ldap is what the documentation seems to suggest, but I guess it won't work as I don't even have an LDAP server.

share|improve this question
up vote 1 down vote accepted

I think you should configure an LDAP (or AD) server, as Kerberos alone doesn't have any mechanism of allowing users to be in different groups, which allows you to map them to roles in Alfresco's RBAC mechanism.

So you'll need to have some mechanism of user-grouping in your authentication backend, and AD is probably the easiest way to go about that.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.