topic Re: LDAP filter on physicalDeliveryOfficeName (Alfresco 3.2) in Alfresco Archive

LDAP filter on physicalDeliveryOfficeName (Alfresco 3.2)

fr7 — Fri, 22 Jun 2012 12:40:10 GMT

Hi everyone, i have a problem on my Alfresco 3.2 installation 'cause i need to filter users based on their physicalDeliveryOfficeName field value on company's LDAP server.I read documentation, and i found i need to modify ldap-ad-authentication.properties(or ldap-authentication.properties, but ad in

Re: LDAP filter on physicalDeliveryOfficeName (Alfresco 3.2)

afaust — Sat, 23 Jun 2012 17:37:54 GMT

Hello,

based on the names of the options you listed and your use case, it should be clear that the personQuery / personDifferentialQuery needs to be adapted. And if you need to filter by two ORed values, than add the necessary OR-query fragment. I'd advise to check on the LDAP Query Syntax if you want to modify those queries. In your case, you should add a

(|(physicalDeliveryOfficeName\=MYOFFICE)(physicalDeliveryOfficeName\=YOUROFFICE))‍

in your examples.

Regards
Axel

Re: LDAP filter on physicalDeliveryOfficeName (Alfresco 3.2)

fr7 — Mon, 25 Jun 2012 14:12:51 GMT

Tnx for reply, i have another question : if i set synchronization on, Alfresco will only import or will export users too? I only need authentication, but with this field's filter : is this(person query + synchronization on) procedure the right one?

Thanks,
Fabio.

Re: LDAP filter on physicalDeliveryOfficeName (Alfresco 3.2)

afaust — Mon, 25 Jun 2012 14:31:45 GMT

Hello,

Alfresco will not export users - this is not a part of the feature set and can thus not be enabled by any setting.
If you are using LDAP for authentication, having synchronisation on is usually the best option. When you combine it with the setting that Alfresco never creates (local) users that are "unknown", you essentially limit the users that can authenticate via LDAP (note that limiting the query alone does not achieve this).

Regards
Axel