LDAP syncs up 0 users and 0 groups - 3.3g on RHEL 5.5

jamied66 — Mon, 26 Jul 2010 20:49:51 GMT

I have LDAP working for authentication just fine, but I think my problem w/syncronization now lies in how I'm telling it to query LDAP. I can see my principal user hitting the LDAP server. It just feels like I don't quite have the queries right. If anyone would have a look I'd be extremely gratef

Re: LDAP syncs up 0 users and 0 groups - 3.3g on RHEL 5.5

dward — Tue, 27 Jul 2010 10:20:42 GMT

An ou is an organizational unit, not a group, so you can't use memberof with it. You restrict the query to an ou using groupSearchBase and userSearchBase.

You need to find out what your group class is. Is it groupOfNames or groupOfUniqueNames?

Then set the following parameters appropriately

# The group search base restricts the LDAP group query to a sub section of tree on the LDAP server.
ldap.synchronization.groupSearchBase=ou\=groups,dc\=mydomain,dc\=com

# The user search base restricts the LDAP user query to a sub section of tree on the LDAP server.
ldap.synchronization.userSearchBase=ou\=People,dc\=mydomain,dc\=com

# The query to select all objects that represent the groups to import.
ldap.synchronization.groupQuery=(objectclass\=groupOfNames)

# The query to select objects that represent the groups to import that have changed since a certain time.
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=groupOfNames)(!(modifyTimestamp<\={0})))

# The query to select all objects that represent the users to import.
ldap.synchronization.personQuery=(objectclass\=inetOrgPerson)

# The query to select objects that represent the users to import that have changed since a certain time.
ldap.synchronization.personDifferentialQuery=(&(objectclass\=inetOrgPerson)(!(modifyTimestamp<\={0})))

# The group type in LDAP
ldap.synchronization.groupType=groupOfNames

# The person type in LDAP
ldap.synchronization.personType=inetOrgPerson

Re: LDAP syncs up 0 users and 0 groups - 3.3g on RHEL 5.5

jamied66 — Tue, 27 Jul 2010 17:58:30 GMT

thanks. All of that sort of sunk in last night and I have synchronization working.

topic LDAP syncs up 0 users and 0 groups - 3.3g on RHEL 5.5 in Alfresco Archive

LDAP syncs up 0 users and 0 groups - 3.3g on RHEL 5.5

Re: LDAP syncs up 0 users and 0 groups - 3.3g on RHEL 5.5

Re: LDAP syncs up 0 users and 0 groups - 3.3g on RHEL 5.5