topic Re: HELP: LDAP user/group import and LDAP query strings in Alfresco Archive

HELP: LDAP user/group import and LDAP query strings

qasimh — Wed, 30 Jan 2008 19:41:48 GMT

I'm using Alfresco 2.1 CE, on Windows 2003, and Tomcat.I've successfully configured NTLM SSO and LDAP import of users and groups.Everything was working fine with ldap-authentication-context.xml as follows:<property name="personQuery"> <value>(objectclass=user)</value><

Re: HELP: LDAP user/group import and LDAP query strings

qasimh — Wed, 30 Jan 2008 21:05:29 GMT

I found that I had to properly enclose the not in parenthesis. i.e.
(!CN=John*) is not strictly correct, eventhough most AD tools don't complain. You must use (!(CN=John*)).

This resolved my LDAP query string issue, well, most of it

Re: HELP: LDAP user/group import and LDAP query strings

qasimh — Thu, 31 Jan 2008 20:58:54 GMT

I found the proper syntax to avoid conflicts between the SOX parser and the LDAP search string syntax (when dealing with '&') is to embed the search string in the following block:
<![CDATA[MY_LDAP_SEARCH_STRING]]>

An example was posted on the Wiki forums:
(@ Active Directory Tips for LDAP People and Group Synchronisation)
http://wiki.alfresco.com/wiki/Enterprise_Security_and_Authentication_Configuration