topic Re: ldap query 'queryGroupsForUser' is not working in Alfresco Archive

ldap query 'queryGroupsForUser' is not working

slag — Fri, 03 Apr 2015 13:34:54 GMT

I'm running Activiti 5.16.3 with an ldap connection configured.I noticed that assigning a task to someone else didn't work and started debugging the ldap part.The ldapsearch <property name="queryGroupsForUser" value="(&(objectClass=groupOfNames)(member={0}))" /> is wrongly implementedI

Re: ldap query 'queryGroupsForUser' is not working

slag — Fri, 03 Apr 2015 13:38:20 GMT

looks like the query itself fell of:
<code>
<property name="queryUserByFullNameLike" value="(&(objectClass=inetOrgPerson)(|({0}=*{1}*)({2}=*{3}*)))" />
</code>

Re: ldap query 'queryGroupsForUser' is not working

jbarrez — Tue, 07 Apr 2015 13:12:13 GMT

Where did you find this query?

I can only find that query in a test configuration xml, and it the userguide as an example for ApacheDS.

Re: ldap query 'queryGroupsForUser' is not working

slag — Tue, 07 Apr 2015 13:19:10 GMT

<code>
<property name="queryUserByFullNameLike" value="(&(objectClass=inetOrgPerson)(|({0}=*{1}*)({2}=*{3}*)))" />
</code>
This is configured in activiti-standalone-context.xml
http://www.activiti.org/userguide/#ldap_configuration (chapter 17.3)
<code>
(&(objectClass=inetOrgPerson)(|(givenName=*%sebas%*)(sn=*%sebas%*)))
</code>
This is the ldapsearch that is performed. It shows the queries in the ldaplog.
We are using openldap.

Re: ldap query 'queryGroupsForUser' is not working

jbarrez — Tue, 14 Apr 2015 11:48:23 GMT

Sure, but this is just an example. You are supposed to change it to your LDAP system. LDAP queries are not portable between systems

Re: ldap query 'queryGroupsForUser' is not working

slag — Wed, 15 Apr 2015 09:42:47 GMT

I did change the ldap query and it works in an ldap browser.
The Issue i have is that activiti adds a "%" signs to my query.

"*" is the wildcard character in LDAP.
My query contains: *{1}*. This should result in *sebas*.
The result however according to the log on the ldap server is *%sebas%*

I think that activiti adds the "%" since it is the wildcard for MYSQL.

For the record: this the the query i have configured in activiti-standalone-context.xml
<code>
"(&(objectClass=inetOrgPerson)(|({0}=*{1}*)({2}=*{3}*)))"
</code>
As you can see there is no "%" sign in my query

The result on the ldap server is:
<code>
(&(objectClass=inetOrgPerson)(|(givenName=*%sebas%*)(sn=*%sebas%*)))
</code>
As you can see a % sign is added.

Re: ldap query 'queryGroupsForUser' is not working

slag — Fri, 17 Apr 2015 12:30:45 GMT

I think i bumped into this bug.
http://forums.activiti.org/content/user-form-type-does-not-show-users-when-using-ldap

I will further investigate.

Re: ldap query 'queryGroupsForUser' is not working

slag — Fri, 17 Apr 2015 14:29:41 GMT

You can close this thread.
It should be fixed in later versions.