topic Re: Bootstrapping users in 3.2r2 in Alfresco Archive

Bootstrapping users in 3.2r2

bnordgren — Tue, 22 Dec 2009 21:05:20 GMT

The short version is: I'm using alfresco as a collaboration tool where "employees" can work together with external entities.The organizational "powers that be" maintain an Active Directory for employees.I maintain an LDAP directory of "external entities" and "groups relevant to me"I'm using OpenLDAP

Re: Bootstrapping users in 3.2r2

bnordgren — Tue, 22 Dec 2009 23:28:06 GMT

I gravely underestimated the number of users in the corporate active directory. I'm currently adding 42905 users at the rate of 15 users/second. It'll be a while.

What I'm trying:

Made an ssh tunnel thru the firewall between active directory and port 390 on my alfresco machine (389 is taken with my metadirectory server).

Made another ldap instance (called "bootstrap"), which connects to localhost:390.

Removed my "production" ldap instance from the authentication chain and added "bootstrap".

Killed the content repository, dropped and re-created the database.

Started Alfresco.

When it finally boots up, I'll reconfigure the authentication chain back to my production ldap server, log in, and see if it associates me with the username it just slurped out of AD.

25% done. Cross fingers…

Re: Bootstrapping users in 3.2r2

bnordgren — Wed, 23 Dec 2009 19:33:32 GMT

Result: It worked with "conditions". All the users were imported. All users got the first name, last name, uid, and email attributes set. I can log in as me under the "production" ldap instance, and it recognizes me by my uid.

It's a little unclean because it clutters the logfile with notifications that users are being moved from the "bootstrap" user repository to my production one. However, functionality does not appear to be affected.

Just for future reference, I would be interested in hearing if the LDIF import option is still available…

Re: Bootstrapping users in 3.2r2

bnordgren — Thu, 31 Dec 2009 18:23:57 GMT

Followup: It didn't really work. When it migrates users from the bootstrap repository to the operational one, it deletes all their attributes. It just took it a while to touch an account that I'd notice (mine). :shock:

Not really sure what I'm going to try next.