topic Re: Is an OU mandatory in AD for ldap synchronization? in Alfresco Archive

Is an OU mandatory in AD for ldap synchronization?

marcobusetto — Fri, 28 May 2010 14:04:02 GMT

Is an Organization Unit (OU) mandatory in Active Directory (AD) for ldap-ad synchronization?I just configured Alfresco 3.3 to connect to an Active Directory. I'm a newbie in both and one of the firsts problems that I faced was that it seems mandatory the presence of an Organization Unit upstream. If

Re: Is an OU mandatory in AD for ldap synchronization?

joe_m — Fri, 28 May 2010 14:34:25 GMT

I'm not an Active Directory expert either but I thought it was normal to split an AD domain into OUs, it eases administration, allows you to define group policies etc. I think it's only normal that Alfresco doesn't allow you to give access to everyone in the domain as you will most probably have different access rights for different OUs.

Re: Is an OU mandatory in AD for ldap synchronization?

marcobusetto — Fri, 28 May 2010 14:42:21 GMT

I agree with you but I'm afraid it's not so obvious. In case you're installing Alfresco into a pretty complex company that didn't defined any OU but only some groups, I think it's impractical to adjust the AD organization to the Alfresco configuration and not the Alfresco configuration to the AD organization…

Re: Is an OU mandatory in AD for ldap synchronization?

ivan_plestina — Sat, 29 May 2010 14:19:59 GMT

One reader of
my blog had a similar problem and had found it to be related to http://issues.alfresco.com/jira/browse/ALF-2796?page=com.atlassian.jira.plugin.system.issuetabpanels%3Achangehistory-tabpanel

Re: Is an OU mandatory in AD for ldap synchronization?

l2hawk — Wed, 09 Jun 2010 03:22:02 GMT

I am new to Alfresco and confused about the AD authenication intergration. MS AD is a LDAP server which can be easily queried. I don't understand why Alfresco requires a specific OU. Has anyone tried to query for a Group Memebership?
DC=myDomain,DC=com,cn=AlfrescoGroup,ou=User

I have used this type of query in some of my scripts for pulling info from AD. In our org we create an OU for the branch office location, under that we have at least two more Computer and Users. This query should search all of the domain for users in the Users OU that are members of AlfrescoGroup.

Please let me know if this helps anyone.