topic LDAP and internal groups in Alfresco Archive

LDAP and internal groups

nowrap — Wed, 16 Sep 2009 10:06:34 GMT

Hello,i want to use groups provided via LDAP (already working).Now i need to setup some groups within alfresco, which aren't needed in LDAP.Is this possbile to achieve and how?Regards.nowrap

Re: LDAP and internal groups

dward — Wed, 16 Sep 2009 10:09:21 GMT

Yes, just use the administration console to create your Alfresco Groups. You can even add some of the LDAP groups to your Alfresco groups if that makes sense in your scenario. For example, you could add certain LDAP groups to ALFRESCO_ADMINISTRATORS to make all their users administrators in Alfresco.

Re: LDAP and internal groups

nowrap — Wed, 16 Sep 2009 10:13:49 GMT

If i create groups within alfresco, they vanish after some time.

Re: LDAP and internal groups

dward — Wed, 16 Sep 2009 10:30:08 GMT

All the stuff I said above applied to Alfresco v3.2, where users and groups are 'zoned' according to the directory they came from. See

See http://wiki.alfresco.com/wiki/The_Synchronization_Subsystem

In previous versions, I'm afraid it's not possible, as the sync system will wipe out all your groups every time it syncs.

In v3.0, the best you could do is to set

ldap.synchronisation.import.group.clearAllChildren=false

in ldap-synchronisation.properties.

Re: LDAP and internal groups

nowrap — Wed, 16 Sep 2009 11:52:06 GMT

Ok, we are running a 3.0. So upgrading maybe a solution.