topic Re: LDAP-Import: clearAllChildren doesn't work in Alfresco Archive

LDAP-Import: clearAllChildren doesn't work

nicof — Wed, 09 Jul 2008 13:41:05 GMT

Hi everyone,I have Alfresco 2.1 Community running on a Centos 5-Server.It is synchronizing users and groups via LDAP, working as intended. Almost.When I activate clearAllChildren in the LDAP-configuration, it throws the following error:15:16:09,941 ERROR [org.quartz.core.JobRunShell] Job DEFAULT.lda

Re: LDAP-Import: clearAllChildren doesn't work

rivetlogic — Wed, 09 Jul 2008 15:04:58 GMT

Hi,

If you look the importer bean for the group and user you will see that both use the same implementation.



<bean id="ldapPeopleImport" class="org.alfresco.repo.importer.ExportSourceImporter">
—–
</bean>
 
<bean id="ldapGroupImport" class="org.alfresco.repo.importer.ExportSourceImporter">
 —-
</bean>
‍‍‍‍‍‍‍‍‍‍

clearAllChildren is not intended for clearing the people but the group. This explanation is supported by the lines from the 2.1.2 source Repository/config/alfresco/extension/ldap-synchronization.properties.


# Should all groups be cleared out at import time?
# - this is safe as groups are not used in Alfresco for other things (unlike person objects which you should never clear out during an import)
# - setting this to true means old group definitions will be tidied up.
ldap.synchronisation.import.group.clearAllChildren=true
‍‍‍‍‍‍

I don't see any change done to the implementation between the minor version except the properties were moved into separate files and a placeholder added.


<bean name="ldapSynchronisationPlaceholderConfigurer" class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer">
       <property name="ignoreUnresolvablePlaceholders">
            <value>true</value>
        </property>  
        <property name="locations">
            <value>classpath:alfresco/extension/ldap-synchronisation.properties</value>
        </property>
    </bean>
‍‍‍‍‍‍‍‍‍‍

Best Regards,
Shagul

Re: LDAP-Import: clearAllChildren doesn't work

nicof — Thu, 10 Jul 2008 08:16:47 GMT

Thank you for the explanation, RivetLogic.

So there is no way to automatically delete users that have fallen out of the LDAP?

Re: LDAP-Import: clearAllChildren doesn't work

rivetlogic — Thu, 10 Jul 2008 09:48:23 GMT

Dropping all the users on every synchronization won't be the best option to do this. As you might have noticed there is a homeFolderProvider assigned to this bean.
So when a user is created, a home space is also assigned to the user and permissions to the space.
Deleting a user can be more than just deleting the user name.

I don't see any out of box functionality. But you could write custom code to do this.

Regards,
Shagul

Re: LDAP-Import: clearAllChildren doesn't work

nicof — Thu, 10 Jul 2008 09:55:37 GMT

In my case, I would just have needed to clear the users once, after some hundred invalid users had been generated through a misconfiguration of the LDAP-searchbase before the launch.

However, I'm deleting them manually now. ;ö)

Thanks a lot for your help!