topic Re: LDAP search string to import users/groups in Alfresco Archive

LDAP search string to import users/groups

qasimh — Tue, 29 Jan 2008 23:57:18 GMT

Hi there,I'm using Alfresco 2.1 CE, on Windows 2003, and Tomcat.I have configured NTLM as indicated http://forums.alfresco.com/viewtopic.php?t=7750&postdays=0&postorder=asc&highlight=cifs+server+configuration+error&start=15I have configured LDAP sync aswell, but I am trying to refine

Re: LDAP search string to import users/groups

qasimh — Wed, 30 Jan 2008 16:00:49 GMT

To get around this conflict, I avoided using the "AND"(&). I applied it's equivalent using "NOT"s (!) and "OR"s (|).

Be sure to properly enclose the not in parenthesis. i.e.
(!CN=John*) is not strictly correct, eventhough most AD tools don't complain. You must use (!(CN=John*))

Re: LDAP search string to import users/groups

qasimh — Thu, 31 Jan 2008 21:00:33 GMT

I found the proper syntax to avoid conflicts between the SOX parser and the LDAP search string syntax (when dealing with '&') is to embed the search string in the following block:
<![CDATA[MY_LDAP_SEARCH_STRING]]>

An example was posted on the Wiki forums:
(@ Active Directory Tips for LDAP People and Group Synchronisation)
http://wiki.alfresco.com/wiki/Enterprise_Security_and_Authentication_Configuration

Note that the nots (!) need to follow the LDAP search syntax rules strictly… i.e. (!(A=B)) as opposed to (!A=B)