topic Creating User Spaces using NTLM/LDAP in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/creating-user-spaces-using-ntlm-ldap/m-p/155264#M109621 <HTML><HEAD></HEAD><BODY><SPAN>I use Alfresco 2.1 CE, on Tomcat and Windows, with NTLM authentication (SSO) and LDAP user/group sync</SPAN><BR /><BR /><SPAN>I'm having trouble changing the location of the user home space that is created when new users log in.</SPAN><BR /><BR /><SPAN>It should be simple to do.&nbsp; I've done all my research, scanning through all these posts and wikiis:</SPAN><BR /><A href="http://forums.alfresco.com/viewtopic.php?t=4666&amp;highlight=nonunique+path" rel="nofollow noopener noreferrer">http://forums.alfresco.com/viewtopic.php?t=4666&amp;highlight=nonunique+path</A><BR /><A href="http://forums.alfresco.com/viewtopic.php?t=7133&amp;highlight=nonunique+path" rel="nofollow noopener noreferrer">http://forums.alfresco.com/viewtopic.php?t=7133&amp;highlight=nonunique+path</A><BR /><A href="http://wiki.alfresco.com/wiki/Security_and_Authentication#Creating_home_spaces_-_from_1.4_onwards" rel="nofollow noopener noreferrer">http://wiki.alfresco.com/wiki/Security_and_Authentication#Creating_home_spaces_-_from_1.4_onwards</A><BR /><A href="http://wiki.alfresco.com/wiki/Enterprise_Security_and_Authentication_Configuration#LDAP_People_synchronization" rel="nofollow noopener noreferrer">http://wiki.alfresco.com/wiki/Enterprise_Security_and_Authentication_Configuration#LDAP_People_synchronization</A><BR /><BR /><SPAN>My current state:</SPAN><BR /><SPAN>- NTLM works fine with the built-in homeFolderManager (in authentication-services-context.xml)</SPAN><BR /><SPAN>- LDAP people sync works fine (using the default homeFolderManager - personalHomeFolderProvider)</SPAN><BR /><SPAN>- LDAP group sync works fine</SPAN><BR /><SPAN>All of this results in userhome spaces being created in the company home space.</SPAN><BR /><BR /><SPAN>I just wanted to change the homespaces location for new users.&nbsp; I did the following:</SPAN><BR /><BR /><SPAN>1) authentication-services-context.xml, changed the defaultProvider so that NTLM uses the correct one</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />&nbsp;&nbsp;&nbsp; &lt;bean name="homeFolderManager" class="org.alfresco.repo.security.person.HomeFolderManager"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;property name="nodeService"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;ref bean="nodeService" /&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;property name="policyComponent"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;ref bean="policyComponent" /&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;property name="defaultProvider"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;ref bean="userHomesHomeFolderProvider" /&gt;&nbsp; &lt;!– Was personalHomeFolderProvider–&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp; &lt;/bean&gt;<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>2) modified the path for userHomesHomeFolderProvider as follows:</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />&nbsp;&nbsp;&nbsp; &lt;bean name="userHomesHomeFolderProvider" class="org.alfresco.repo.security.person.UIDBasedHomeFolderProvider"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;property name="serviceRegistry"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;ref bean="ServiceRegistry" /&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;property name="path"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;value&gt;/${spaces.company_home.childname}/${spaces.user_homes.childname}&lt;/value&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;property name="storeUrl"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;value&gt;${spaces.store}&lt;/value&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;property name="homeFolderManager"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;ref bean="homeFolderManager" /&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;property name="inheritsPermissionsOnCreate"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;value&gt;false&lt;/value&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;property name="ownerPemissionsToSetOnCreate"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;set&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;value&gt;All&lt;/value&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/set&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;property name="userPemissions"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;set&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;value&gt;All&lt;/value&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/set&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp; &lt;/bean&gt;<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>That should have been enough for NTLM</SPAN><BR /><BR /><SPAN>3) For LDAP, modified ldapPeopleExport bean in ldap-authentication-context.xml </SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;property name="attributeDefaults"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;map&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;entry key="cm:homeFolderProvider"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;value&gt;userHomesHomeFolderProvider&lt;/value&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/entry&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/map&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/property&gt;<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>AFTER doing this, everything started to break.</SPAN><BR /><BR /><SPAN>A) ON first-time-login of users using NTLM, I get the following error:</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />net.sf.acegisecurity.AuthenticationServiceException: General error; nested exception is java.lang.IllegalStateException: Non-unique path: found : /app:company_home/app:user_homes 0<BR />caused by:<BR />java.lang.IllegalStateException: Non-unique path: found : /app:company_home/app:user_homes 0<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>B)&nbsp; The LDAP import of people fails with the following error</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />15:23:35,418 ERROR [org.quartz.core.JobRunShell] Job DEFAULT.ldapPeopleJobDetail threw an unhandled Exception: <BR />org.alfresco.repo.importer.ExportSourceImporterException: Failed to import<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:214)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.importer.ImporterJob.execute(ImporterJob.java:44)<BR />&nbsp;&nbsp;&nbsp;at org.quartz.core.JobRunShell.run(JobRunShell.java:202)<BR />&nbsp;&nbsp;&nbsp;at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:529)<BR />Caused by: org.alfresco.service.cmr.view.ImporterException: Failed to import package at line 56; column 16 due to error: Non-unique path: found : /app:company_home/app:user_homes 0<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.importer.view.ViewParser.parse(ViewParser.java:190)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.importer.ImporterComponent.parserImport(ImporterComponent.java:360)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.importer.ImporterComponent.importView(ImporterComponent.java:224)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:182)<BR />&nbsp;&nbsp;&nbsp;… 3 more<BR />Caused by: java.lang.IllegalStateException: Non-unique path: found : /app:company_home/app:user_homes 0<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.person.AbstractHomeFolderProvider.resolvePath(AbstractHomeFolderProvider.java:318)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.person.AbstractHomeFolderProvider.getPathNodeRef(AbstractHomeFolderProvider.java:300)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.person.UIDBasedHomeFolderProvider.getHomeFolder(UIDBasedHomeFolderProvider.java:74)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.person.AbstractHomeFolderProvider$OnCreateNode.doWork(AbstractHomeFolderProvider.java:360)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.person.AbstractHomeFolderProvider$OnCreateNode.doWork(AbstractHomeFolderProvider.java:345)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:260)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.person.AbstractHomeFolderProvider.onCreateNode(AbstractHomeFolderProvider.java:329)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.person.HomeFolderManager.onCreateNode(HomeFolderManager.java:128)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)<BR />……….. it goes on and on……. 6 more<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>Looking at the ldap people import package (sample attached below, for 2 elements only), I see that some new users do not have a &lt;sys:node-uuid&gt; specified.&nbsp; The import package fails on the first occurence of this missing data.&nbsp; This does not happen for new users using personalHomeFolderProvider</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />&nbsp;&nbsp; &lt;cm:person view:childName="cm:person"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;cm:ownable&gt;&lt;/cm:ownable&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;cm:owner&gt;LHE&lt;/cm:owner&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;cm:userName&gt;LHE&lt;/cm:userName&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;cm:firstName&gt;Liyan&lt;/cm:firstName&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;cm:lastName&gt;He&lt;/cm:lastName&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;cm:email&gt;LHe@company.com&lt;/cm:email&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;cm:organizationId&gt;&lt;/cm:organizationId&gt;<BR />&lt;cm:homeFolderProvider&gt;userHomesHomeFolderProvider&lt;/cm:homeFolderProvider&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;sys:node-uuid&gt;85e91676-f1c8-11db-971b-9974654403be&lt;/sys:node-uuid&gt;<BR />&nbsp;&nbsp; &lt;/cm:person&gt;<BR />&nbsp;&nbsp; &lt;cm:person view:childName="cm:person"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;cm:ownable&gt;&lt;/cm:ownable&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;cm:owner&gt;liyantest&lt;/cm:owner&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;cm:userName&gt;liyantest&lt;/cm:userName&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;cm:firstName&gt;Liyan&lt;/cm:firstName&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;cm:lastName&gt;He&lt;/cm:lastName&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;cm:email&gt;liyantest@company.com&lt;/cm:email&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;cm:organizationId&gt;&lt;/cm:organizationId&gt;<BR />&lt;cm:homeFolderProvider&gt;userHomesHomeFolderProvider&lt;/cm:homeFolderProvider&gt;<BR />&nbsp;&nbsp; &lt;/cm:person&gt;<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>Whew… that was a long one eh?&nbsp; Sorry that it took soo long to describe the problem, but I've looked very hard for some clues but to no avail.</SPAN><BR /><BR /><SPAN>It seems like changing the "path" on the *HomeFolderProvider is interfereing with something else that prevents a unique space from being generated.&nbsp; When that space is not generated, the user account is not created on demand (NTLM) and the user can not log-in.</SPAN><BR /><BR /><SPAN>Does anyone know what I should do?&nbsp; :cry:</SPAN></BODY></HTML> Thu, 31 Jan 2008 18:15:48 GMT qasimh 2008-01-31T18:15:48Z Creating User Spaces using NTLM/LDAP https://connect.hyland.com/t5/alfresco-archive/creating-user-spaces-using-ntlm-ldap/m-p/155264#M109621 I use Alfresco 2.1 CE, on Tomcat and Windows, with NTLM authentication (SSO) and LDAP user/group syncI'm having trouble changing the location of the user home space that is created when new users log in.It should be simple to do.&nbsp; I've done all my research, scanning through all these posts and wikii Thu, 31 Jan 2008 18:15:48 GMT https://connect.hyland.com/t5/alfresco-archive/creating-user-spaces-using-ntlm-ldap/m-p/155264#M109621 qasimh 2008-01-31T18:15:48Z Re: Creating User Spaces using NTLM/LDAP https://connect.hyland.com/t5/alfresco-archive/creating-user-spaces-using-ntlm-ldap/m-p/155265#M109622 <HTML><HEAD></HEAD><BODY><SPAN>I have exactly the same problem.</SPAN><BR /><SPAN>Have you fixed this issue?</SPAN><BR /><BR /><SPAN>Thanks!</SPAN><BR /><SPAN>Martin</SPAN></BODY></HTML> Mon, 29 Mar 2010 12:28:56 GMT https://connect.hyland.com/t5/alfresco-archive/creating-user-spaces-using-ntlm-ldap/m-p/155265#M109622 mko123 2010-03-29T12:28:56Z