topic Re: Can not delete a user when using ntlm +AD authetication in Alfresco Archive

Can not delete a user when using ntlm +AD authetication

dhson — Tue, 09 Oct 2007 04:15:46 GMT

hi I'm using Alfresco alfresco-community-tomcat-2.1.0 with NTLM + AD by modifying the files as below (pls. see at the end of the post).After restarting alfresco, users can logon to alfresco via AD authentication. However, If I login as FOO (new admin user), I can create/delete space and everything b

Re: Can not delete a user when using ntlm +AD authetication

andy — Fri, 19 Oct 2007 09:48:44 GMT

Hi

If you are using NTLM and synching users from LDAP then deleting users does not have much point (or if you auto create users) - they will come back in the sync (or as people log in). We are never going to delete users from external authentication mechanisms like AD, LDAP. Delete is not supported by default. The DAO can be configured to support delete - and is in the latest config examples. This will do a delete of the person but not from AD. This is to support cleaning up users who have already been deleted from AD.

Andy

Re: Can not delete a user when using ntlm +AD authetication

dhson — Thu, 25 Oct 2007 03:54:25 GMT

Hi Andy,
Thank you very much for your answer.

Perhaps to clean up a user who was deleted from AD is what I want to do.
Could you tell me how to config DAO to do that?

Let me describe a bit more what I want to do:
I install Alfresco on Centos5 server and authenticate via AD+NTLM (without LDAP).
When a user (exist on AD) login the first time to Alfresco, a new home space and his name are created automatically (great!).

However, when I delete him from AD, his name is still listed in the user list of Alfresco.
What I want to do is to remove his name also in the user list of Alfresco

What should I do?
Thank you very much for your help
Son

Hi

If you are using NTLM and synching users from LDAP then deleting users does not have much point (or if you auto create users) - they will come back in the sync (or as people log in). We are never going to delete users from external authentication mechanisms like AD, LDAP. Delete is not supported by default. The DAO can be configured to support delete - and is in the latest config examples. This will do a delete of the person but not from AD. This is to support cleaning up users who have already been deleted from AD.

Andy

Re: Can not delete a user when using ntlm +AD authetication

andy — Mon, 29 Oct 2007 11:41:30 GMT

Hi

See the current config examples for NTLM, they all have a DAO definition that supports what you want.

Andy

Re: Can not delete a user when using ntlm +AD authetication

archana_bonkanp — Mon, 24 Mar 2008 05:55:08 GMT

Hi,

We are also facing the same problem,can you please explain it clearly.
Where the chanegs should be done exactly and in which files.

Thanks in Advance.