topic How to move AD sync. configuration to AD auth. only? in Alfresco Archive

How to move AD sync. configuration to AD auth. only?

leonk — Wed, 01 Dec 2010 02:09:30 GMT

Hello,I'm syncronizing users from our AD using the following configuration in config files.The problem is that AD has ~150K users.Alfresco apperently can't cope with such a large number of users.When I click on "Repository"->"User Homes" ,alfresco will try to display all User Homes and it will ho

Re: How to move AD sync. configuration to AD auth. only?

iblanco — Fri, 03 Dec 2010 14:27:57 GMT

Would setting "ldap.synchronization.active=false" preserve all current users and their files?

From my experience i think so, I'm quite sure, but make a test to preproduction deployment just in case.

Is it the only change I need to do?

Probably, although you might need to make sure that "synchronization.autoCreatePeopleOnLogin" is set to true so that new user's homes are created automatically. I suppose that this will work even if you have no synchronization activated in your chain, but never tried it myself.

Any other advice?

If you have an Active Directory consider just using passthru subsystem.

Re: How to move AD sync. configuration to AD auth. only?

leonk — Thu, 09 Dec 2010 04:59:30 GMT

Thanks iblanco,

I'm testing it on dev. machine, replicated from live server.

I've change configuration but I still have all those sync-ed users and when clicking on "Repository"->"User Homes", I'm getting approx. ~160 user homes displayed and <Too many subfolders to display> message at the end.

Almost all those users never logged in to the system (the sync-ed from AD).

How would I go about deleting/getting rid of those User Homes?

Cheers,
Leon

Re: How to move AD sync. configuration to AD auth. only?

iblanco — Mon, 13 Dec 2010 14:58:44 GMT

I would create a very simple JavaScript in Data Dictionary/scripts repository folder that executed against a folder (User homes in this case) iterates all its children and checks if they are of folder type and if they are empty. If they are empty just delete it.

If by chance some of the deleted home's are for valid users that shouldn't be such a big deal, after all the home will be created again next time they log in.

After checking that everything is alright you might want to empty the Trashcan.

Re: How to move AD sync. configuration to AD auth. only?

leonk — Wed, 15 Dec 2010 00:21:38 GMT

I would create a very simple JavaScript in Data Dictionary/scripts repository folder that executed against a folder (User homes in this case) iterates all its children and checks if they are of folder type and if they are empty. If they are empty just delete it.

If by chance some of the deleted home's are for valid users that shouldn't be such a big deal, after all the home will be created again next time they log in.

After checking that everything is alright you might want to empty the Trashcan.

Thanks iblanco.
This is fantastic idea!

I don't posses a knowledge in that area and have no experience with "Data Dictionary/scripts repository" ;(

Can you be so kind and provide me with some step by step instructions and possible javascript?

Thank you

Re: How to move AD sync. configuration to AD auth. only?

leonk — Mon, 28 Mar 2011 01:03:02 GMT

I've got this script, thanks to John (from Alfresco):

var childList = companyhome.childByNamePath("User Homes").children;
for (var i=0; i<childList.length; i++)
{
   var child = childList;
   logger.log(child.name);
   var subchildren = child.children;
logger.log(subchildren.length);
if (subchildren.length==0){
     child.remove();
     }
}

Just create this script in Company Home > Data Dictionary > Scripts and
run it from any Space (More Action->View Details->Run Action)