topic Re: Synchronization questions in Alfresco Archive

Synchronization questions

jriker1 — Wed, 24 Jun 2009 23:26:24 GMT

I have Synchronization kind of working in 3.2. I say kind of because if I hard code a name in for the CN it works fine. Problem and questions:1. I have fields in AD ADAM for most of the fields in the user form. Is there a way to add additional attributes to pull from AD/ADAM if I have them? An e

Re: Synchronization questions

dward — Thu, 25 Jun 2009 14:21:03 GMT

1. Currently this requires you to override the attributeMapping property in Spring configuration in the extension classpath. You would simply add in a mapping for the location field.

2. Yes, modify your query to restrict the set of users it returns. I believe there is a memberof attribute you could use in your query.

3. The latest 3.2 builds use paged results with a preconfigured page size of 1000 so this should not happen. How recent is the build you are using?

Re: Synchronization questions

jriker1 — Thu, 25 Jun 2009 18:33:25 GMT

Thanks for your response. I am currently using 3.2 Build June 2nd I believe was the nightly build date. The 18th one seems incomplete with missing sample files and the sort so had to stop installing that one. Noticed unlike the others, there used to be a dev and non dev labeled build and now just the dev one that is smaller than the old ones.

JR

Re: Synchronization questions

jriker1 — Thu, 25 Jun 2009 19:35:24 GMT

1. Currently this requires you to override the attributeMapping property in Spring configuration in the extension classpath. You would simply add in a mapping for the location field.

2. Yes, modify your query to restrict the set of users it returns. I believe there is a memberof attribute you could use in your query.

3. The latest 3.2 builds use paged results with a preconfigured page size of 1000 so this should not happen. How recent is the build you are using?

Re: Synchronization questions

jriker1 — Thu, 25 Jun 2009 19:35:39 GMT

2. Yes, modify your query to restrict the set of users it returns. I believe there is a memberof attribute you could use in your query.

By the way, if you eliminate the user filter and hard code a single group in the group search base will it populate the system with all users from that group? So if I have an AD group called ALFRESCO and have 10 users in it, when the sync is done will I have 10 users from that group added to Share and have their attributes showing?

Thanks.

JR

Re: Synchronization questions

dward — Thu, 25 Jun 2009 19:38:30 GMT

The user search is independent from the group search, so you would have to restrict that too.

Re: Synchronization questions

dward — Thu, 25 Jun 2009 19:40:27 GMT

Which sample files were you missing? Note these are being phased out and replaced by preconfigured subsystems.

Re: Synchronization questions

jriker1 — Thu, 25 Jun 2009 20:25:47 GMT

Not sure the extent, however I know the custom-repository.properties and context.xml files were missing which has always been a big part of configuring the authentication, db settings, rmi info, and defining external executable paths.

JR

Re: Synchronization questions

gronfelt — Thu, 25 Jun 2009 21:18:11 GMT

The custom-repository files are there in the Linux version, under tomcat/shared/classes/alfresco/extension.

Re: Synchronization questions

jriker1 — Thu, 25 Jun 2009 22:15:47 GMT

The custom-repository files are there in the Linux version, under tomcat/shared/classes/alfresco/extension.

Have you tried the latest version dated June 18th? The only way files get in the folder above you mention is to put the sample files download in there and it is not included in the latest build. Was in the prior, but not the latest nightly. When the war files were extracted, they weren't in there either.

JR

Re: Synchronization questions

mrogers — Thu, 25 Jun 2009 22:58:56 GMT

As Dave says above, the old way of configuring alfresco has been "phased out".

In 3.2 custom-repository.properties no longer exists.

Dave has updated the Wiki with details already and I see more and more details being added each day.

Re: Synchronization questions

jriker1 — Thu, 25 Jun 2009 23:06:25 GMT

As Dave says above, the old way of configuring alfresco has been "phased out".

In 3.2 custom-repository.properties no longer exists.

Dave has updated the Wiki with details already and I see more and more details being added each day.

Thanks, noticed that the custom-hibernate-dialect.properties file is also missing. Hopefully I can find the necessary details on the Wiki to configure this setting what I set before in these custom files.

Thanks.

JR

Re: Synchronization questions

mrogers — Thu, 25 Jun 2009 23:17:31 GMT

yes that file has gone too. To be replaced by alfresco-global.properties

http://wiki.alfresco.com/wiki/Database_Configuration

Re: Synchronization questions

jriker1 — Thu, 25 Jun 2009 23:45:05 GMT

yes that file has gone too. To be replaced by alfresco-global.properties

http://wiki.alfresco.com/wiki/Database_Configuration

Thanks a bunch. This is exactly what I needed for the DB stuff. I also used to edit the custom-hibernate-dialect.properties and uncomment the MySQL dialect line

hibernate.dialect=org.hibernate.dialect.MySQLInnoDBDialect

Is this required anymore and exist elsewhere?

Thanks.

JR

Edit: I see it now in the Wiki. Although it doesn't talk about MySQL for some reason which is odd since the download says only use with MySQL for now, Looks like I just add the above dialect into the same file.

Re: Synchronization questions

jriker1 — Fri, 26 Jun 2009 00:59:51 GMT

I was able to get things working with the alfresco-global.properties file, but only in it's original location under webapps/alfresco/WEB-INF/classes. Putting the file under shared/classes/alfresco/extension doesn't seem to be read in. I have installed Tomcat 6, configured the shared.loader path but it's not reading in. Am I missing something? Also I saw the extensions folder with extension/messages/web-extension folders in it. Are those files really needed? Assume some class path in SUSE is missing or something.

JR

Re: Synchronization questions

fo1337 — Fri, 26 Jun 2009 17:54:49 GMT

I was able to get things working with the alfresco-global.properties file, but only in it's original location under webapps/alfresco/WEB-INF/classes. Putting the file under shared/classes/alfresco/extension doesn't seem to be read in. I have installed Tomcat 6, configured the shared.loader path but it's not reading in. Am I missing something? Also I saw the extensions folder with extension/messages/web-extension folders in it. Are those files really needed? Assume some class path in SUSE is missing or something.

JR

Actually I've just started a thread with the same question. http://forums.alfresco.com/en/viewtopic.php?f=9&t=20056. I have no idea why my alfresco-global.properties doesn't get read, and I use Tomcat 5… Help!!!

Re: Synchronization questions

_sax — Tue, 25 Aug 2009 10:31:17 GMT

To get back to the original topic I'm a bit puzzled if it is possible to sync from several ldap branches (ou).

I use 3.2CE and it works perfectly for one branch
ldap.synchronization.userSearchBase=ou=\_Departments,dc=intranet,dc=ads-users,dc=staff

Now I have another branch of users, that would like to use Alfresco, too.
ldap.synchronization.userSearchBase=ou=\_Global,dc=central,dc=staff

Is it possible, to group them in one line?
Or is this functionality not yet there, as being related to https://issues.alfresco.com/jira/browse/ETHREEOH-1806

Re: Synchronization questions

dward — Tue, 25 Aug 2009 12:19:15 GMT

jriker1: At no point did we say that alfresco-global.properties belongs under alfresco/extension. You put it directly under $TOMCAT_HOME/shared/classes.

Re: Synchronization questions

dward — Tue, 25 Aug 2009 12:28:27 GMT

_sax: If your sync can't be expressed as a single query under a single search base, then you could set up a chain in alfresco-global.properties. E.g.:

authentication.chain=ldap1:ldap-ad,ldap2:ldap-ad

… and configure different queries and search bases for each. You set ldap.authentication.active=false for the instance that you don't want to handle authentication.

To configure independent properties for ldap1 and ldap2, you will need to use the extension classpath mechanism described here

http://wiki.alfresco.com/wiki/Alfresco_Subsystems#Properties

and you will need a 3.3 nightly build, as it was broken in the v3.2 community release.

Re: Synchronization questions

_sax — Tue, 25 Aug 2009 13:58:29 GMT

Thank you.

When looking at http://forums.alfresco.com/en/viewtopic.php?f=9&t=16051&p=52680 it seems to provide another path to solve this. But how would such a query translate from CDATA to the format in alfresco-global.properties?
(& (ou=\_Departments,dc=intranet,dc=ads-users,dc=staff)(ou=\_Global,dc=central,dc=staff)) seems too simple.

If I'd use your approach with a "new" subsystem, I would set up a folder alfresco/subsystems/Authentication/ldap-ad/SomeAdditionalStaff to synchronize a specific branch? In it I would place the corresponding ldap-ad-authentication.properties pointing to the additional users and "register" it within my authentication chain. Are there additional steps to announce it to the system?
But this would take time until the next release to be ready for actual usage in productive systems.

Finally, theres this thread http://forums.alfresco.com/en/viewtopic.php?f=9&t=19239&p=63326 basically adding a trigger. Besides being a not-so-clean approach, would that even work with 3.2?

Thanks for your appreciated help so far.