0

I have been trying to access liferay using my Active Directory account but i am not able to sign in, knowing that the users are imported successfully but it seems that liferay doesn't import the passwords. How can I solve this issue?

AD Environment: Windows Server 2012 Liferay 6.2

Ammar Tawabini
  • 1

1 Answers1

1

With LDAP you typically don't want to distribute your passwords all over - password management is on one side, e.g. on LDAP, and the password policy that applies there should carry on everywhere. When you change your password on LDAP, would you want to be able to log in to your portal with the old password? One positive aspect on having passwords in a separate system (like LDAP) is that they can't get loose should there be any security issue in your front end application (like Liferay, but by far not limited to it).

In fact, I prefer to add an SSO system, so that Liferay never even sees any password. Further, passwords are hopefully stored in a salted&hashed way, so that you can't "just get" them out of any system. Granted, during login without SSO, Liferay knows the password, but I'm actually happy when that's not written to the local database.

If you rely on your Liferay database to have your correct passwords, you should be changing your architecture. To me your description sounds like "yay, works as expected".

Olaf Kock
  • 46,930
  • 8
  • 59
  • 90
  • I actually don't want to store passwords on liferay at all, I want the users to authenticate directly over LDAP. even without SSO, its fine with me. Currently Liferay doesn't authenticate users, I can sync all users but when I try to login with my LDAP credential, it won't log me in. – Ammar Tawabini Nov 23 '15 at 12:30