topic Re: Activiti Explorer LDAP configuration in Alfresco Archive

Activiti Explorer LDAP configuration

matutano6 — Mon, 10 Feb 2014 21:20:57 GMT

Hi,I was using Activiti Explorer for a while and now I want to integrate it with LDAP.I followed the chapter 17 of the User's Guide and everything seems to be very straight forward. The authentication and the operation works fine, but when I try the Users or Groups menu item from the Management tab

Re: Activiti Explorer LDAP configuration

jbarrez — Tue, 11 Feb 2014 15:26:54 GMT

You are correct, the ldap integration does not do any searching/querying, there are better toolings for it.

If it is really important (altough managing ldap through explorer might not be the best idea), you can always extends the default LDAP classes and implement the classes that now throw an error.

Re: Activiti Explorer LDAP configuration

matutano6 — Tue, 11 Feb 2014 21:30:13 GMT

Hi! Thanks for your answer!

Is there any way to disable users and group menus? It's a little annoying to deal with the error when someone clicks them accidentally: the application presents an error message which reappears even by reloading the whole application. The only way to recover from that situation is clearing cookies.

Thanks again!
Regards,
M.

Re: Activiti Explorer LDAP configuration

jbarrez — Mon, 17 Feb 2014 14:13:34 GMT

Hmmm you would need a rebuild of the war then (which isnt so hard).

Clone the repo from https://github.com/Activiti/Activiti, do your changes in the activiti-explorer module, and do a full rebuild

(eg mvn -Pdistro clean install -DskipTests)

Re: Activiti Explorer LDAP configuration

b_schnarr — Tue, 18 Feb 2014 15:27:16 GMT

Just for my understanding: when I use the explorer or the Rest webapp with LDAP, all users and groups are determined by the ldap? Lets say I need an admin user in the explorer which is not in the official admin ldap group. Does than mean that I have to add Code to the project? Would a LDAP sync Tool be a better solution, meaning that existing users and groups were Imported into the lokal User db? Then, you would be able to add process-dependant groups without extending the activiti Source Code?

Re: Activiti Explorer LDAP configuration

jbarrez — Tue, 25 Feb 2014 08:42:10 GMT

Both are possible, and depends on how you prefer it. The sync has its benefits, as that you don't need to change a lot. However, it will always be a bit behind the 'master' data.

If you can't create an admin group in ldap, you indeed need extra code (not a code change, but implementing an interface) to map your admin group to a query in Explorer.