topic [Workaround] LDAP group memberships not synchronized (v3.3) in Alfresco Archive

[Workaround] LDAP group memberships not synchronized (v3.3)

mwildam — Tue, 21 Sep 2010 11:52:41 GMT

We have a problem with the LDAP integration configuration - Group memberships are not synchronized - all groups are shown empty.The maybe special situation is that the ldap base/root we are logging into and querying is containing two aliases of other tree nodes containing users and groupstructure

Re: [Workaround] LDAP group memberships not synchronized (v3.3)

vrugginkj — Wed, 29 Sep 2010 09:08:30 GMT

Hello Martin,

I'm having the same problem in V3.2 so I'm following your thread and searching what I'm doing wrong…

Best regards,
Jaco Vruggink, Alfresco newbie.

Re: [Workaround] LDAP group memberships not synchronized (v3.3)

mwildam — Thu, 30 Sep 2010 08:36:09 GMT

Just to let you know how we solved the problem (customer is using Novell open enterprise server with eDirectory):
Customer is now deactivating users without moving them to a different container - which they did before. So we worked around the problem.

Re: [Workaround] LDAP group memberships not synchronized (v3.3)

cpot — Thu, 21 Oct 2010 15:43:41 GMT

Seems to have the same problem with 3.4a

Any workaround, fix or advice ?

Re: [Workaround] LDAP group memberships not synchronized (v3.3)

cpot — Fri, 22 Oct 2010 15:41:25 GMT

Seems to have the same problem with 3.4a

Any workaround, fix or advice ?

Found that I had to specify the Distinguished Name for the member attribute, ie :

member: uid=admin,ou=people,dc=example,dc=com‍

and not just the UID

Re: [Workaround] LDAP group memberships not synchronized (v3.3)

jack_chuong — Tue, 21 Oct 2014 07:35:10 GMT

Hi all,
I'm using Alfresco 5.0.a Community on Centos 6.4 64 bit, my Active Directory server : Windows Server 2008 R2
I have same problem, this is my alfresco-global.properties


### Active Directory
authentication.chain=alfinst:alfrescoNtlm,ldap1:ldap-ad

ntlm.authentication.sso.enabled=false

ldap.authentication.allowGuestLogin=false
ldap.authentication.userNameFormat=%s@mydomain.com
ldap.authentication.java.naming.provider.url=ldap://ad.mydomain.com:389
ldap.authentication.defaultAdministratorUserNames=jack.chuong
ldap.synchronization.java.naming.security.principal=CN=Jack Chuong,OU=Users,OU=ICT,OU=SGN,OU=Central Management,DC=mydomain,DC=com
ldap.synchronization.java.naming.security.credentials=******
ldap.synchronization.groupSearchBase=OU\=Central Management,DC=\mydomain,DC\=com
ldap.synchronization.userIdAttributeName=sAMAccountName
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.active=true
# Sync
synchronization.synchronizeChangesOnly=false
synchronization.allowDeletions=true
synchronization.import.cron=0 */30 * * * ?

ldap.synchronization.userSearchBase=OU\=Central Management,DC\=mydomain,DC\=com
ldap.synchronization.groupMemberAttributeName=member
ldap.synchronization.personType=inetOrgPerson
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

The error we get on startup of Alfresco 5.0.a is:
2014-10-21 14:30:06,301 WARN [sync.ldap.LDAPUserRegistry] [DefaultScheduler_Worker-6] Failed to resolve member of group 'it@mydomain.com' with distinguished name: CN=Jack Chuong,OU=Users,OU=ICT,OU=SGN,OU=Central Management,DC=mydomain,DC=com
My domain users and groups are synced to Alfresco but group memberships is empty
How could I make it works ?