topic Re: Alfresco and Zimbra LDAP - sync in Alfresco Archive

Alfresco and Zimbra LDAP - sync

jsosic — Mon, 30 Nov 2009 21:30:13 GMT

Hi. Zimbra is Collaboration tool that comes in bundle with mysql, openldap, postfix, amavis, ….Anyway, I've integrated succesfully Zimbra and samba/posix zimlets (addons) and I've set up Zimbra's LDAP as master LDAP for Samba PDC. So, users are now added only in one place - in Zimbra's administratio

Re: Alfresco and Zimbra LDAP - sync

gyro_gearless — Tue, 01 Dec 2009 09:35:38 GMT

Well, this is a well known problem (== "well known to me") :lol:

Seriously, it has to do with the way Zimbra stores its group attributes in LDAP:

Zimbra only stores a short id in the memberUid attribute (eg: 'aw'), while Alfresco obviously expects the full dn (eg 'uid=aw,ou=people,dc=abcona,dc=int'). Bang!

A while ago i wrote an patch for Alfresco 3.0 - will try to retrofit this patch to 3.2 (it's on my todays agenda, luckily…) and then publish it as soon as it is tested 🙂

BTW, could you give a short outline how you configured authentication chain? I think i have this basically working here, but i am not 100% sure if all is set correctly….

Cheers
Gyro

Re: Alfresco and Zimbra LDAP - sync

jsosic — Tue, 01 Dec 2009 11:14:01 GMT

Well, I thought that might present a problem but I hoped it doesn't

I'll wait for your patch, hope you can do it soon. My authentication chain is:

# LDAP
authentication.chain=zimbraldap:ldap,alfrescoNtlm1:alfrescoNtlm‍‍

My ldap-authentication.properties is in the following directory: /var/lib/tomcat5/shared/classes/alfresco/extension/subsystems/Authentication/ldap/zimbraldap.

Do you need any more information?

Re: Alfresco and Zimbra LDAP - sync

gyro_gearless — Wed, 02 Dec 2009 15:31:32 GMT

Hi,

you may eventually find the patch located at

http://alfredolabs.abcona.org/download/Alfresco-3.2CE-abcona-patch-20091201.zip

and also a short README at

http://alfredolabs.abcona.org/download/README.TXT

Take care to not forget the ldap.synchronization.groupLookupPattern parameter, otherwise nothing will happen :mrgreen:

LDAP group synchronization seems to run pretty smooth now, but again: no warranties, but all kind of feedback welcome!

Have fun and let me know if this works for you!

Greetings
Gyro

Re: Alfresco and Zimbra LDAP - sync

dward — Thu, 03 Dec 2009 13:36:19 GMT

This patch shouldn't be necessary. LDAPUserRegistry already has a workaround for posixGroup that means it will already accept groups containing UIDs that don't parse as DNs.

                            catch (InvalidNameException e)
                            {
                                // The member attribute didn't parse as a DN. So assume we have a group class like
                                // posixGroup (FDS) that directly lists user names
                                childAssocs.add(attribute);
                            }

You just need a new 3.2 build. See http://forums.alfresco.com/en/viewtopic.php?f=9&t=20408&p=66718#p66718

Re: Alfresco and Zimbra LDAP - sync

jsosic — Wed, 09 Dec 2009 12:04:03 GMT

I have a 3.2r2, that's the latest community stable release… Is it fixed in this release or do I need nightly build?

Re: Alfresco and Zimbra LDAP - sync

dward — Wed, 09 Dec 2009 12:36:46 GMT

Yes it should be in 3.2r2.

Re: Alfresco and Zimbra LDAP - sync

jsosic — Thu, 17 Dec 2009 14:18:48 GMT

Hi,
you may eventually find the patch located at
http://alfredolabs.abcona.org/download/Alfresco-3.2CE-abcona-patch-20091201.zip

Thank you but that patch is 3.2 version and I have 3.2r2… so I guess I can't use that patch for 3.2r2

Also, I still haven't figured it out how to sync the groups-user connection although I have 3.2r2 which should have been fixed for this issue…

Re: Alfresco and Zimbra LDAP - sync

jsosic — Thu, 17 Dec 2009 15:40:47 GMT

Is there a way to set up logging level for ldap and ldap sync to DEBUG?

I'm really puzzled why is this not working

Re: Alfresco and Zimbra LDAP - sync

kmanickam — Thu, 01 Jan 2015 15:47:12 GMT

Hi Jsosic,

could you please help me how to configure for alfresco 5.0 users authentication via zimbra ldap 8.0.5

pls guide setp-by-step

Thanks
Manickam