topic Re: Problem with Share when do the AD synchronization in Alfresco Archive

Problem with Share when do the AD synchronization

minhhacker — Thu, 11 Dec 2008 12:55:45 GMT

Hi all,I'm using Alfresco Enterprise 3.0. The first feeling is very good in Local account, everything work fine in /Share and /Alfresco, i can create site, invite another users, reject the invitation or whatever. And my problem start when I have done the Active Directory synchronization. When all us

Re: Problem with Share when do the AD synchronization

ofrxnz — Wed, 17 Dec 2008 20:37:49 GMT

Do you have any errors. I had some similar things i have worked around.

couple of things off the bat i know of.

AD users MUST log in to Alfresco once before going into share.

share currently hates symbols (.#@ etc) in credentials, i dont know about the enterprise version, but i bet it has similar issues

Test some of those bugs in multiple browsers. I had a few that were IE specific but worked in Firefox. If this is the case post the errors and hopefully one of can point you in the right direction.

Take a look in this forum space some of the good bug fixes are floating around

In general Alfresco proper is pretty solid. While it has its short comings, it is the best over-all product i have seen. Share still needs some love but is very promising and quite useful. I think the only querk in Alfresco proper right now has to do with CIFS

Re: Problem with Share when do the AD synchronization

peebles — Fri, 16 Jan 2009 22:22:10 GMT

I had a different problem, when using LDAP auth/sync, no NTLM, no chaining. I could log into Share and send an invite, but when invitee clicked on accept link, they would get an error message to the effect that "accept rejected, you have already accepted, of your invitation has been canceled". And in alfresco.log:

09:38:59,839 ERROR [org.jbpm.graph.def.GraphElement] action threw exception: Get enabled is not supported
org.alfresco.error.AlfrescoRuntimeException: Get enabled is not supported
        at org.alfresco.repo.security.authentication.DefaultMutableAuthenticationDao.getEnabled(DefaultMutableAuthenticationDao.java:179)
        at org.alfresco.repo.web.scripts.invite.AcceptInviteAction.execute(AcceptInviteAction.java:75)
        at org.jbpm.graph.def.Action.execute(Action.java:122)
        at org.jbpm.graph.def.GraphElement.executeAction(GraphElement.java:264)
        at org.jbpm.graph.def.GraphElement.executeActions(GraphElement.java:220)
        at org.jbpm.graph.def.GraphElement.fireAndPropagateEvent(GraphElement.java:190)
        at org.jbpm.graph.def.GraphElement.fireEvent(GraphElement.java:174)
        at org.jbpm.graph.def.Transition.take(Transition.java:138)
(…)

Using this error message, and browsing the source, I found that changing
tomcat/shared/classes/alfresco/extension/ldap-authentication-context.xml:

    <bean name="authenticationDao" class="org.alfresco.repo.security.authentication.DefaultMutableAuthenticationDao" >
        <property name="allowGetEnabled" value="true" />
        <property name="allowDeleteUser">
            <value>true</value>
        </property>
    </bean>

(adding the line <property name="allowGetEnabled" value="true" />)

Fixed my problem, and things look pretty functional now.

Re: Problem with Share when do the AD synchronization

wabson — Mon, 02 Feb 2009 09:03:21 GMT

peebles - logged in JIRA as https://issues.alfresco.com/jira/browse/ETHREEOH-1242

Re: Problem with Share when do the AD synchronization

marcus — Tue, 03 Feb 2009 04:25:31 GMT

The other thing to be aware of when using AD is that typically you'll have set up a user/group importer job. If you have, you'll need to make sure that the "clearAllChildren" flag for the ldapGroupImport bean is set to "false", otherwise all the groups that Share creates for managing sites will be deleted, and your sites will become borked.