topic Re: LDAP Group Sync on OpenLDAP and FDS in Alfresco Archive

LDAP Group Sync on OpenLDAP and FDS

skp — Tue, 14 Jul 2009 14:44:31 GMT

Hi,Im using Alfresco Community 3.2 Dev Current version 3.2.0 (_dev 1979) schema 2015 - Installed version 3.2.0 (_dev 1979) schema 2015Group Sync fails with different errors when using OpenLDAP and Fedora(Netscape) Directory Server. Both LDAP groups use 'objectClass: posixGroup'Differences are=======

Re: LDAP Group Sync on OpenLDAP and FDS

dward — Tue, 14 Jul 2009 15:10:38 GMT

There is currently a minor issue, where if the synchronization user's credentials are wrong and a sync is fired on login, it is handled as a login failure.

I notice you are using the 'old' propery names. Sorry for renaming them, but I realised that the user principal properties were specific to synchronization, not authentication

ldap.synchronization.java.naming.security.principal
ldap.synchronization.java.naming.security.credentials

So try setting these properties (prefixed ldap.synchronization).

And please stop editing ldap-synchronization.properties directly. Your own settings should go in alfresco-global.properties. There was no need to copy the Spring context file either.

Re: LDAP Group Sync on OpenLDAP and FDS

skp — Tue, 14 Jul 2009 15:40:41 GMT

Thank you. That got it to start syncing again, but:

21:09:02,369 INFO [security.sync.ChainingUserRegistrySynchronizer] Creating user '345679'
21:09:03,112 INFO [security.sync.ChainingUserRegistrySynchronizer] Retrieving all groups from user registry 'AUTH.EXT.fdsldap'
21:09:03,753 ERROR [[localhost].[/alfresco].[Faces Servlet]] Servlet.service() for servlet Faces Servlet threw exception
java.lang.ArrayIndexOutOfBoundsException: -1
        at java.util.ArrayList.get(ArrayList.java:324)
        at javax.naming.ldap.LdapName.getRdn(LdapName.java:220)
        at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.getGroups(LDAPUserRegistry.java:556)
        at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.syncGroupsWithPlugin(ChainingUserRegistrySynchronizer.java:399)
        at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.synchronize(ChainingUserRegistrySynchronizer.java:219)
        at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.createMissingPerson(ChainingUserRegistrySynchronizer.java:245)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at org.alfresco.repo.management.subsystems.SubsystemProxyFactory$1.invoke(SubsystemProxyFactory.java:71)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
        at $Proxy53.createMissingPerson(Unknown Source)
        at org.alfresco.repo.security.authentication.AbstractAuthenticationComponent$SetCurrentUserCallback$1.doWork(AbstractAuthenticationCo
mponent.java:431)
        at org.alfresco.repo.security.authentication.AbstractAuthenticationComponent$SetCurrentUserCallback$1.doWork(AbstractAuthenticationCo
mponent.java:429)
        at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:489)
        at org.alfresco.repo.security.authentication.AbstractAuthenticationComponent$SetCurrentUserCallback.execute(AbstractAuthenticationCom
ponent.java:427)
        at org.alfresco.repo.security.authentication.AbstractAuthenticationComponent$SetCurrentUserCallback.execute(AbstractAuthenticationCom
ponent.java:412)

Re: LDAP Group Sync on OpenLDAP and FDS

dward — Thu, 16 Jul 2009 17:44:41 GMT

Alfresco has never previously supported the posixGroup class for modelling groups, since they contain UIDS rather than DNS.

However, I've checked in a fix that now assumes that a group member is a UID if it doesn't parse as a DN. I've also added a check for the member attribute being empty (which it appears to be in the -1 stack trace you have given us). The fix should show up in the next community nightly build.

Tracked on your JIRA issue

https://issues.alfresco.com/jira/browse/ETHREEOH-2508

Re: LDAP Group Sync on OpenLDAP and FDS

skp — Fri, 17 Jul 2009 16:10:36 GMT

Great! Thanks. I guess I have to wait for a build later than 3.2.0 (2056) Schema 3000 [14th Jun, 2009]. It didnt work in this one either.

On another note, when you said everything should go into alfresco-global.properties, I added my ldap configuration into alfresco-global.properties, and removed custom-hibernate-dialect.properties, custom-repository-context.xml, custom-repository.properties and renamed the 'subsytems' directory to 'subsystems.old' and I get:


0:59:59,631  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-s
hared.properties]
21:00:06,734  ERROR [web.context.ContextLoader] Context initialization failed
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'indexerComponent' defined in class path resource [alf
resco/core-services-context.xml]: Cannot resolve reference to bean '&indexerAndSearcherFactory' while setting bean property 'storeRedirectorP
roxyFactory'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'indexerAndSearcherF
actory' defined in class path resource [alfresco/core-services-context.xml]: Cannot resolve reference to bean 'admLuceneIndexerAndSearcherFac
tory' while setting bean property 'defaultBinding'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creati
ng bean with name 'admLuceneIndexerAndSearcherFactory' defined in class path resource [alfresco/core-services-context.xml]: Cannot resolve re
ference to bean 'mlAwareNodeService' while setting bean property 'nodeService'; nested exception is org.springframework.beans.factory.BeanCre
ationException: Error creating bean with name 'mlAwareNodeService' defined in class path resource [alfresco/node-services-context.xml]: Canno
t resolve reference to bean 'mtAwareNodeService' while setting bean property 'defaultBinding'; nested exception is org.springframework.beans.
factory.BeanCreationException: Error creating bean with name 'mtAwareNodeService': FactoryBean threw exception on object creation; nested exc
eption is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'dbNodeService' defined in class path resour
ce [alfresco/node-services-context.xml]: Cannot resolve reference to bean 'dbNodeServiceImpl' while setting bean property 'target'; nested ex
ception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'dbNodeServiceImpl' defined in class path r

Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'fileContentStore' defined in class path re
source [alfresco/content-services-context.xml]: Instantiation of bean failed; nested exception is org.springframework.beans.BeanInstantiation
Exception: Could not instantiate bean class [org.alfresco.repo.content.filestore.FileContentStore]: Constructor threw exception; nested excep
tion is org.alfresco.service.cmr.repository.ContentIOException: 06170000 Failed to create store root: ./alf_data/contentstore
Caused by: org.springframework.beans.BeanInstantiationException: Could not instantiate bean class [org.alfresco.repo.content.filestore.FileCo
ntentStore]: Constructor threw exception; nested exception is org.alfresco.service.cmr.repository.ContentIOException: 06170000 Failed to crea
te store root: ./alf_data/contentstore
Caused by: org.alfresco.service.cmr.repository.ContentIOException: 06170000 Failed to create store root: ./alf_data/contentstore
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

but my alfresco-global.properties contains


dir.root=/data/AlfrescoData
dir.indexes=/data/AlfrescoData/lucene-indexes
‍‍‍‍

So I ended up putting back:

[*]custom-hibernate-dialect.properties
[*]custom-repository-context.xml
[*]custom-repository.properties (which is nothing but a symlink to alfresco-global.properties)‍‍‍

And things are starting up again, this time without a '$CATALINA_HOME/shared/classes/alfresco/extension/subsystems/Authentication/ldap/fdsldap' directory.

Am I missing something here?

Re: LDAP Group Sync on OpenLDAP and FDS

rysiek — Sat, 18 Jul 2009 20:14:10 GMT

so, if I am reading this right, I would need a newer version than 3.2 LABS, to be able to use this config:

#
# LDAP
#————-
# authentication
ldap.authentication.active=true
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.userNameFormat=uid=%s,dc=people,dc=example,dc=com
ldap.authentication.allowGuestLogin=false
ldap.authentication.java.naming.provider.url=ldap://localhost:389/
ldap.authentication.defaultAdministratorUserNames=user1,user2,admin
# synchronization
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.principal=cn=lookup,dc=example,dc=com
ldap.synchronization.java.naming.security.credentials=SomePassword
ldap.synchronization.groupSearchBase=dc=groups,dc=example,dc=com
ldap.synchronization.userSearchBase=dc=people,dc=example,dc=com
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'
ldap.synchronization.userIdAttributeName=uid
ldap.synchronization.personType=inetOrgPerson
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=uidNumber
ldap.synchronization.defaultHomeFolderProvider=homeDirectory
ldap.synchronization.groupType=posixGroup
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupMemberAttributeName=memberUid

synchronization.synchronizeChangesOnly=false
synchronization.syncOnStartup=true
synchronization.syncWhenMissingPeopleLogIn=true
synchronization.autoCreatePeopleOnLogin=false

Is that correct?

Also, the line ldap.synchronization.defaultHomeFolderProvider=homeDirectory doesn't seem to be doing anything, as the home dirs are generated by alfresco and utterly different to what has been saved in LDAP.

One more thing, with the above setup, is it possible to:
a. delete users "synchronised" from LDAP?
b. trigger synchronization (without deleting the entire database or creating a new LDAP user, unknown to Alfresco)?

When I try to delete an (LDAP-originating) user, I get:

22:09:34,096 ERROR [org.alfresco.web.scripts.AbstractRuntime] Exception from executeScript - redirecting to status template error: 06185145 Wrapped Exception (with status template): 06185144 Failed to execute script '/org/alfresco/repository/person/person.delete.js (in classpath store file:/opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/templates/webscripts)': 06185143 User name does not exist: tester
org.alfresco.web.scripts.WebScriptException: 06185145 Wrapped Exception (with status template): 06185144 Failed to execute script '/org/alfresco/repository/person/person.delete.js (in classpath store file:/opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/templates/webscripts)': 06185143 User name does not exist: tester‍‍

Re: LDAP Group Sync on OpenLDAP and FDS

dward — Mon, 20 Jul 2009 13:06:01 GMT

Yes. You will need a Community build later than 14th July, and unfortunately there isn't one yet, due to our build servers being temporarily out of action.

Watch this space

http://dev.alfresco.com/downloads/nightly/dist/?C=M;O=A

Or just check out HEAD and build it yourself. It's dead easy. Read this Wiki and use the "ant build-tomcat" command.

http://wiki.alfresco.com/wiki/Alfresco_SVN_Development_Environment

On the subject of the home folder provider setting, it does appear that the default setting is wrong and causes user homes to get created directly under Company Home. I think it should be set to userHomesHomeFolderProvider. I've logged a JIRA issue.

https://issues.alfresco.com/jira/browse/ETHREEOH-2535

On the question of deleting users, yes this is done by the scheduled sync job when it is running in 'full' sync mode. See

http://wiki.alfresco.com/wiki/The_Synchronization_Subsystem

The only way to trigger a sync in the Community release is to log in as a user who exists in LDAP but not in Alfresco, or to edit

synchronization.import.cron

so that it runs more frequently. Future versions will also trigger a differential sync on startup, so that it is less likely that the first login has a large synchronization overhead.

Re: LDAP Group Sync on OpenLDAP and FDS

skp — Wed, 22 Jul 2009 13:48:31 GMT

Ok, got tired of waiting. Bit the bullet and built it myself from svn HEAD. Thanks for the instructions and like you said it was pretty simple. 😄

So, on a spanking new clean install, the sync happened and at the end of the sync it said:

16:47:11,439  INFO  [security.sync.ChainingUserRegistrySynchronizer] 186 user(s) and 88 group(s) processed
Jul 22, 2009 4:47:15 PM org.apache.jk.core.MsgContext action
WARNING: Error sending end packet
java.net.SocketException: Broken pipe
        at java.net.SocketOutputStream.socketWrite0(Native Method)
        at java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:92)
        at java.net.SocketOutputStream.write(SocketOutputStream.java:136)
        at org.apache.jk.common.ChannelSocket.send(ChannelSocket.java:537)
        at org.apache.jk.common.JkInputStream.endMessage(JkInputStream.java:127)
        at org.apache.jk.core.MsgContext.action(MsgContext.java:302)
        at org.apache.coyote.Response.action(Response.java:183)
        at org.apache.coyote.Response.finish(Response.java:305)
        at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:205)
        at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:283)
        at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:773)
        at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:703)
        at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:895)
        at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:685)
        at java.lang.Thread.run(Thread.java:619)
Jul 22, 2009 4:47:15 PM org.apache.jk.common.ChannelSocket processConnection
WARNING: processCallbacks status 2‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I had to restart tomcat because it wouldnt let me login. Second login worked successfully (because it didnt initiate a sync) and user details showed up in the profile. Ditto for a new user that logged in too. Excellent! But I wonder if the error will pop on the next sync and crash alfresco again.

Im also getting these warnings while groups are synced, but I dont know if it contributes to the previous error:

16:47:11,367  INFO  [security.sync.ChainingUserRegistrySynchronizer] Adding '993213' to group 'group1'
16:47:11,376  WARN  [security.sync.ChainingUserRegistrySynchronizer] Failed to add '993213' to group 'group1'
org.alfresco.repo.security.authority.AuthorityException: 06222639 The person 993213 does not exist and can not be added to a group
        at org.alfresco.repo.security.authority.AuthorityServiceImpl.addAuthority(AuthorityServiceImpl.java:263)
        at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.syncGroupsWithPlugin(ChainingUserRegistrySynchronizer.java:522)
        at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.synchronize(ChainingUserRegistrySynchronizer.java:218)
        at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.createMissingPerson(ChainingUserRegistrySynchronizer.java:246)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at org.alfresco.repo.management.subsystems.SubsystemProxyFactory$1.invoke(SubsystemProxyFactory.java:71)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
        at $Proxy52.createMissingPerson(Unknown Source)
        at org.alfresco.repo.security.authentication.AbstractAuthenticationComponent$SetCurrentUserCallback$1.doWork(AbstractAuthenticationCo
mponent.java:431)
        at org.alfresco.repo.security.authentication.AbstractAuthenticationComponent$SetCurrentUserCallback$1.doWork(AbstractAuthenticationCo
mponent.java:428)
        at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:489)
        at org.alfresco.repo.security.authentication.AbstractAuthenticationComponent$SetCurrentUserCallback.execute(AbstractAuthenticationCom
ponent.java:427)
        at org.alfresco.repo.security.authentication.AbstractAuthenticationComponent$SetCurrentUserCallback.execute(AbstractAuthenticationCom
ponent.java:412)
        at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:326)
        at org.alfresco.repo.security.authentication.AbstractAuthenticationComponent.setCurrentUser(AbstractAuthenticationComponent.java:193)
        at org.alfresco.repo.security.authentication.ldap.LDAPAuthenticationComponentImpl.authenticateImpl(LDAPAuthenticationComponentImpl.ja
va:102)
        at org.alfresco.repo.security.authentication.AbstractAuthenticationComponent.authenticate(AbstractAuthenticationComponent.java:144)
        at org.alfresco.repo.security.authentication.AuthenticationServiceImpl.authenticate(AuthenticationServiceImpl.java:129)
        at org.alfresco.repo.security.authentication.AbstractChainingAuthenticationService.authenticate(AbstractChainingAuthenticationService
.java:166)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:304)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

The user does not exist in the particular user 'ou' which Im searching in. I think we really need this https://issues.alfresco.com/jira/browse/ETHREEOH-1806 quickly, but for the moment, I can do without it and move users from other OUs to the one that Im searching under as a workaround to get them to login. Although, it would be nice to just have

ldap.authentication.userNameFormat=uid\=%s‍

and make it do a subtree search under ou=people. 🙂

The records-management amp still has a problem when starting[since the 3.2.0 (_dev 1979) build if I remember correctly]

16:38:01,059 User:System INFO  [repo.module.ModuleServiceImpl] Installing module 'org.alfresco.module.RecordsManagement' version 1.3.
16:38:04,839 User:System ERROR [web.context.ContextLoader] Context initialization failed
org.alfresco.error.AlfrescoRuntimeException: 06220004 Failed to start modules
        at org.alfresco.repo.module.ModuleComponentHelper$1.doWork(ModuleComponentHelper.java:308)
        at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:489)
        at org.alfresco.repo.module.ModuleComponentHelper.startModules(ModuleComponentHelper.java:202)
        at org.alfresco.repo.module.ModuleServiceImpl.startModules(ModuleServiceImpl.java:143)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:304)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
        at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
        at $Proxy69.startModules(Unknown Source)
        at org.alfresco.repo.module.ModuleStarter$1.execute(ModuleStarter.java:70)
        at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:326)
        at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:252)
        at org.alfresco.repo.module.ModuleStarter.onBootstrap(ModuleStarter.java:74)
        at org.alfresco.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:62)
        at org.springframework.context.event.SimpleApplicationEventMulticaster$1.run(SimpleApplicationEventMulticaster.java:77)
        at org.springframework.core.task.SyncTaskExecutor.execute(SyncTaskExecutor.java:49)
        at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:75)
        at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:246)
        at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:617)
        at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:355)
        at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:246)
        at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:189)
        at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:49)
        at org.alfresco.web.app.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:69)
        at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3764)
        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4216)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:760)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:740)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:544)
        at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:626)
        at org.apache.catalina.startup.HostConfig.deployDescriptors(HostConfig.java:553)‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: LDAP Group Sync on OpenLDAP and FDS

dward — Wed, 22 Jul 2009 14:24:30 GMT

My guess is that the "broken pipe" error is perhaps due to apache mod_jk timing out your login request (probably because the request ran for so long during the first sync). Check your apache configuration.

As I mentioned, in future versions, an initial differential sync will be done when the server boots up, to avoid such long-running transactions in login requests.

Re: LDAP Group Sync on OpenLDAP and FDS

skp — Wed, 22 Jul 2009 14:48:45 GMT

Oh, I think you're right. I tried another clean install again and it didn't go down fatally this time.

It didn't sync this from the group though:

ldap.synchronization.userOrganizationalIdAttributeName=businessCategory‍

The "Organization:" field in the user profile is blank. And is there a way to sync "Job Title" and "Location" too from ldap?

Re: LDAP Group Sync on OpenLDAP and FDS

dward — Thu, 13 Aug 2009 15:45:06 GMT

Yes, if you override the definition of the attributeMapping bean in common-ldap-context.xml. To do this, you will need to use the latest nightly build (which fixes a classpath issue in the 3.2 release) and follow the instructions in

http://wiki.alfresco.com/wiki/Alfresco_Subsystems#Spring_Beans

FYI I've just checked in a fix for the home folder provider issue into HEAD.