Авторизация Active Directory (Архива v2.2 или выше)
...
| Note |
|---|
Обновление: Архива v2.5 (или выше) обладает исправленной системой авторизации, которая вместо Kereberos использует NTLM v2 аутентификацию. Как часть процесса обновления предыдущих версий (таких как v2.3, v2.1, v2.0, OSE и других), настройки Active Directory прежних версий продукта должны быть переустановлены. Для более подробной информации смотрите Авторизацию. |
LDAP Attribute must be selected in Active Directory Role Assignment 0
You have a role assignment with a missing LDAP attribute. You need to redefine your role assignments.
User is authenticated, but no role is assigned
Exactly as says. Authentication was successful, although a role could not be assigned to the user. You need to create a matching role assignment in Active Directory.
failed to authenticate user:The account is not found
Edit your server.conf file in C:\Program Files\MailArchiva\Server\webapps\ROOT\WEB-INF\conf\server.conf Change the parameter "authentication.bind.attribute=UserPrincipalName" to "authentication.bind.attribute=sAMAccountName"
End user's cannot see their own emails
Make sure that the mail attribute is correct. If you are using MS Exchange, it should be set to proxyAddresses. If you are using another mail server it may be something else. e.g. mail.
In addition there must be the value %email% in the user role filter.
...