topic Yet another LDAP-AD sync issue in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/yet-another-ldap-ad-sync-issue/m-p/264464#M217594 <HTML><HEAD></HEAD><BODY><SPAN>version:&nbsp; 4.0d Community Edition</SPAN><BR /><SPAN>OS:&nbsp; Server 2008 x64</SPAN><BR /><SPAN>Syncing to MS LDAP-AD</SPAN><BR /><BR /><SPAN>background:&nbsp; I can successfully login to the 'share' site with my domain info, so my passthru is working correctly, but our AD is setup so that users are in different OUs and there is no way to ask for all of the users from multiple OUs.&nbsp; I was able to ask our admin to create a group and let me drop all of the users who will need access to alfresco into this group.&nbsp; My problem is that I cannot get my alfresco-global.properties file configured to sync with the global group created, 'WVUser'.&nbsp; It doe successfully sync&nbsp; the groups from 'ldap.synchronization.groupsearchbase', but will not sync with 'ldap.synchronizatioin.usersearchbase' which is a CN not an OU.&nbsp; If I point the 'usersearchbase' to an 'OU' with a few people in it, it works correctly then.&nbsp; My question:&nbsp; is there a way to get 'userSearchBase' to synch from a CN?&nbsp; My CN is a global group with members inside.</SPAN><BR /><BR /><SPAN>I am also having problems trying to debug ldap from the log4j.properties file. I am posting my alfresco log below, but there are only INFO items in it so it won't be much help.&nbsp; Maybe somebody could help me turn on debugging in my log4j.properties file?&nbsp; I think this would help shed some light on my problem perhaps.</SPAN><BR /><BR /><SPAN>my alfresco.log file:</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE>11:06:31,592 INFO&nbsp; [org.springframework.extensions.webscripts.TemplateProcessorRegistry] Registered template processor freemarker for extension ftl<BR />11:06:31,687 INFO&nbsp; [org.springframework.extensions.webscripts.ScriptProcessorRegistry] Registered script processor javascript for extension js<BR />11:06:31,688 INFO&nbsp; [org.springframework.extensions.webscripts.TemplateProcessorRegistry] Registered template processor freemarker for extension ftl<BR />11:06:31,694 INFO&nbsp; [org.springframework.extensions.webscripts.ScriptProcessorRegistry] Registered script processor javascript for extension js<BR />11:06:33,412 INFO&nbsp; [org.springframework.extensions.webscripts.DeclarativeRegistry] Registered 312 Web Scripts (+0 failed), 322 URLs<BR />11:06:33,413 INFO&nbsp; [org.springframework.extensions.webscripts.DeclarativeRegistry] Registered 8 Package Description Documents (+0 failed) <BR />11:06:33,413 INFO&nbsp; [org.springframework.extensions.webscripts.DeclarativeRegistry] Registered 0 Schema Description Documents (+0 failed) <BR />11:06:33,746 INFO&nbsp; [org.springframework.extensions.webscripts.AbstractRuntimeContainer] Initialised Spring Surf Container Web Script Container (in 2046.5143ms)<BR />11:06:33,752 INFO&nbsp; [org.springframework.extensions.webscripts.TemplateProcessorRegistry] Registered template processor freemarker for extension ftl<BR />11:06:33,756 INFO&nbsp; [org.springframework.extensions.webscripts.ScriptProcessorRegistry] Registered script processor javascript for extension js<BR />11:27:02,197 INFO&nbsp; [org.springframework.extensions.webscripts.TemplateProcessorRegistry] Registered template processor freemarker for extension ftl<BR />11:27:02,271 INFO&nbsp; [org.springframework.extensions.webscripts.ScriptProcessorRegistry] Registered script processor javascript for extension js<BR />11:27:02,272 INFO&nbsp; [org.springframework.extensions.webscripts.TemplateProcessorRegistry] Registered template processor freemarker for extension ftl<BR />11:27:02,276 INFO&nbsp; [org.springframework.extensions.webscripts.ScriptProcessorRegistry] Registered script processor javascript for extension js<BR />11:27:04,012 INFO&nbsp; [org.springframework.extensions.webscripts.DeclarativeRegistry] Registered 312 Web Scripts (+0 failed), 322 URLs<BR />11:27:04,012 INFO&nbsp; [org.springframework.extensions.webscripts.DeclarativeRegistry] Registered 8 Package Description Documents (+0 failed) <BR />11:27:04,012 INFO&nbsp; [org.springframework.extensions.webscripts.DeclarativeRegistry] Registered 0 Schema Description Documents (+0 failed) <BR />11:27:05,384 INFO&nbsp; [org.springframework.extensions.webscripts.AbstractRuntimeContainer] Initialised Spring Surf Container Web Script Container (in 3103.3765ms)<BR />11:27:05,391 INFO&nbsp; [org.springframework.extensions.webscripts.TemplateProcessorRegistry] Registered template processor freemarker for extension ftl<BR />11:27:05,397 INFO&nbsp; [org.springframework.extensions.webscripts.ScriptProcessorRegistry] Registered script processor javascript for extension js<BR />11:33:53,076 INFO&nbsp; [org.alfresco.web.site.EditionInterceptor] Unable to retrieve License information from Alfresco: 500<BR />11:42:17,439 INFO&nbsp; [org.alfresco.web.site.EditionInterceptor] Successfully retrieved license information from Alfresco.<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>My log4j file:</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE># Set root logger level to error<BR />#log4j.rootLogger=error, Console, File<BR />log4j.rootLogger=error, File<BR /><BR />###### Console appender definition #######<BR /><BR /># All outputs currently set to be a ConsoleAppender.<BR />log4j.appender.Console=org.apache.log4j.ConsoleAppender<BR />log4j.appender.Console.layout=org.apache.log4j.PatternLayout<BR /><BR /># use log4j NDC to replace %x with tenant domain / username<BR />log4j.appender.Console.layout.ConversionPattern=%d{ISO8601} %x %-5p [%c{3}] [%t] %m%n <BR />#log4j.appender.Console.layout.ConversionPattern=%d{ABSOLUTE} %-5p [%c] %m%n<BR /><BR />###### File appender definition #######<BR />log4j.appender.File=org.apache.log4j.DailyRollingFileAppender<BR />log4j.appender.File.File=d:\alfresco.log<BR />log4j.appender.File.Append=true<BR />log4j.appender.File.DatePattern='.'yyyy-MM-dd<BR />log4j.appender.File.layout=org.apache.log4j.PatternLayout<BR />log4j.appender.File.layout.ConversionPattern=%d{ABSOLUTE} %-5p [%c] %m%n<BR /><BR />###### Hibernate specific appender definition #######<BR />#log4j.appender.file=org.apache.log4j.FileAppender<BR />#log4j.appender.file.File=hibernate.log<BR />#log4j.appender.file.layout=org.apache.log4j.PatternLayout<BR />#log4j.appender.file.layout.ConversionPattern=%d{ABSOLUTE} %5p %c{1}:%L - %m%n<BR /><BR />###### Log level overrides #######<BR /><BR /># Commented-in loggers will be exposed as JMX MBeans (refer to org.alfresco.repo.admin.Log4JHierarchyInit)<BR /># Hence, generally useful loggers should be listed with at least ERROR level to allow simple runtime<BR /># control of the level via a suitable JMX Console. Also, any other loggers can be added transiently via<BR /># Log4j addLoggerMBean as long as the logger exists and has been loaded.<BR /><BR /># Hibernate<BR />log4j.logger.org.hibernate=error<BR />log4j.logger.org.hibernate.util.JDBCExceptionReporter=fatal<BR />log4j.logger.org.hibernate.event.def.AbstractFlushingEventListener=fatal<BR />log4j.logger.org.hibernate.type=warn<BR />log4j.logger.org.hibernate.cfg.SettingsFactory=warn<BR /><BR /># Spring<BR />log4j.logger.org.springframework=warn<BR /># Turn off Spring remoting warnings that should really be info or debug.<BR />log4j.logger.org.springframework.remoting.support=error<BR />log4j.logger.org.springframework.util=error<BR /><BR /># Axis/WSS4J<BR />log4j.logger.org.apache.axis=info<BR />log4j.logger.org.apache.ws=info<BR /><BR /># CXF<BR />log4j.logger.org.apache.cxf=error<BR /><BR /># MyFaces<BR />log4j.logger.org.apache.myfaces.util.DebugUtils=info<BR />log4j.logger.org.apache.myfaces.el.VariableResolverImpl=error<BR />log4j.logger.org.apache.myfaces.application.jsp.JspViewHandlerImpl=error<BR />log4j.logger.org.apache.myfaces.taglib=error<BR /><BR /># OpenOfficeConnection<BR />log4j.logger.net.sf.jooreports.openoffice.connection=fatal<BR /><BR /># log prepared statement cache activity ###<BR />log4j.logger.org.hibernate.ps.PreparedStatementCache=info<BR /><BR /># Alfresco<BR />log4j.logger.org.alfresco=debug<BR />log4j.logger.org.alfresco.repo.admin=info<BR />log4j.logger.org.alfresco.repo.cache.TransactionalCache=warn<BR />log4j.logger.org.alfresco.repo.model.filefolder=warn<BR />log4j.logger.org.alfresco.repo.tenant=info<BR />log4j.logger.org.alfresco.repo.avm=info<BR />log4j.logger.org.alfresco.config=warn<BR />log4j.logger.org.alfresco.config.JndiObjectFactoryBean=warn<BR />log4j.logger.org.alfresco.config.JBossEnabledWebApplicationContext=warn<BR />log4j.logger.org.alfresco.repo.management.subsystems=warn<BR />log4j.logger.org.alfresco.repo.management.subsystems.ChildApplicationContextFactory=info<BR />log4j.logger.org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ChildApplicationContext=warn<BR />log4j.logger.org.alfresco.repo.security.sync=info<BR />log4j.logger.org.alfresco.repo.security.person=info<BR />#log4j.logger.org.alfresco.repo.security.authentication.ldap=debug<BR />#log4j.logger.org.alfresco.repo.importer.view.ViewParser=DEBUG<BR />log4j.logger.org.alfresco.repo.security.sync=debug<BR /><BR />log4j.logger.org.alfresco.repo.module=debug<BR /><BR />log4j.logger.org.alfresco.sample=info<BR />log4j.logger.org.alfresco.web=info<BR />#log4j.logger.org.alfresco.web.app.AlfrescoNavigationHandler=debug<BR />#log4j.logger.org.alfresco.web.ui.repo.component.UIActions=debug<BR />#log4j.logger.org.alfresco.web.ui.repo.tag.PageTag=debug<BR />#log4j.logger.org.alfresco.web.bean.clipboard=debug<BR />log4j.logger.org.alfresco.repo.webservice=info<BR />log4j.logger.org.alfresco.service.descriptor.DescriptorService=info<BR />#log4j.logger.org.alfresco.web.page=debug<BR /><BR />log4j.logger.org.alfresco.repo.importer.ImporterBootstrap=error<BR />#log4j.logger.org.alfresco.repo.importer.ImporterBootstrap=info<BR /><BR />log4j.logger.org.alfresco.web.ui.common.Utils=error<BR />#log4j.logger.org.alfresco.web.ui.common.Utils=info<BR /><BR />log4j.logger.org.alfresco.repo.admin.patch.PatchExecuter=info<BR />log4j.logger.org.alfresco.repo.domain.patch.ibatis.PatchDAOImpl=info<BR /><BR /># Specific patches<BR />log4j.logger.org.alfresco.repo.admin.patch.impl.DeploymentMigrationPatch=info<BR />log4j.logger.org.alfresco.repo.version.VersionMigrator=info<BR />log4j.logger.org.alfresco.repo.admin.patch.impl.ResetWCMToGroupBasedPermissionsPatch=info<BR /><BR />log4j.logger.org.alfresco.repo.module.ModuleServiceImpl=info<BR />log4j.logger.org.alfresco.repo.domain.schema.SchemaBootstrap=info<BR />log4j.logger.org.alfresco.repo.admin.ConfigurationChecker=info<BR />log4j.logger.org.alfresco.repo.node.index.AbstractReindexComponent=warn<BR />log4j.logger.org.alfresco.repo.node.index.IndexTransactionTracker=warn<BR />log4j.logger.org.alfresco.repo.node.index.FullIndexRecoveryComponent=info<BR />log4j.logger.org.alfresco.repo.node.index.AVMFullIndexRecoveryComponent=info<BR />log4j.logger.org.alfresco.util.OpenOfficeConnectionTester=info<BR />log4j.logger.org.alfresco.repo.node.db.hibernate.HibernateNodeDaoServiceImpl=warn<BR />log4j.logger.org.alfresco.repo.domain.hibernate.DirtySessionMethodInterceptor=warn<BR />log4j.logger.org.alfresco.repo.transaction.RetryingTransactionHelper=warn<BR />log4j.logger.org.alfresco.util.transaction.SpringAwareUserTransaction.trace=warn<BR />log4j.logger.org.alfresco.util.AbstractTriggerBean=warn<BR />log4j.logger.org.alfresco.repo.jgroups.AlfrescoJGroupsChannelFactory=info<BR />log4j.logger.org.alfresco.enterprise.repo.cache.jgroups.JGroupsKeepAliveHeartbeatReceiver=info<BR />log4j.logger.org.alfresco.repo.version.Version2ServiceImpl=warn<BR /><BR />#log4j.logger.org.alfresco.web.app.DebugPhaseListener=debug<BR />#log4j.logger.org.alfresco.repo.cache.EhCacheTracerJob=debug<BR /><BR />log4j.logger.org.alfresco.repo.workflow=info<BR /><BR /># CIFS server debugging<BR />log4j.logger.org.alfresco.smb.protocol=error<BR />#log4j.logger.org.alfresco.smb.protocol.auth=debug<BR />#log4j.logger.org.alfresco.acegi=debug<BR /><BR /># FTP server debugging<BR />log4j.logger.org.alfresco.ftp.protocol=error<BR />#log4j.logger.org.alfresco.ftp.server=debug<BR /><BR /># WebDAV debugging<BR />#log4j.logger.org.alfresco.webdav.protocol=debug<BR />log4j.logger.org.alfresco.webdav.protocol=error<BR /><BR /># NTLM servlet filters<BR />#log4j.logger.org.alfresco.web.app.servlet.NTLMAuthenticationFilter=debug<BR />#log4j.logger.org.alfresco.repo.webdav.auth.NTLMAuthenticationFilter=debug<BR /><BR /># Kerberos servlet filters<BR />#log4j.logger.org.alfresco.web.app.servlet.KerberosAuthenticationFilter=debug<BR />#log4j.logger.org.alfresco.repo.webdav.auth.KerberosAuthenticationFilter=debug<BR /><BR /># File servers<BR />log4j.logger.org.alfresco.fileserver=warn<BR /><BR /># Repo filesystem debug logging<BR />#log4j.logger.org.alfresco.filesys.repo.ContentDiskDriver=debug<BR /><BR /># AVM filesystem debug logging<BR />#log4j.logger.org.alfresco.filesys.avm.AVMDiskDriver=debug<BR /><BR /># Integrity message threshold - if 'failOnViolation' is off, then WARNINGS are generated<BR />log4j.logger.org.alfresco.repo.node.integrity=ERROR<BR /><BR /># Indexer debugging<BR />log4j.logger.org.alfresco.repo.search.Indexer=error<BR />#log4j.logger.org.alfresco.repo.search.Indexer=debug<BR /><BR />log4j.logger.org.alfresco.repo.search.impl.lucene.index=error<BR />log4j.logger.org.alfresco.repo.search.impl.lucene.fts.FullTextSearchIndexerImpl=warn<BR />#log4j.logger.org.alfresco.repo.search.impl.lucene.index=DEBUG<BR /><BR /># Audit debugging<BR /># log4j.logger.org.alfresco.repo.audit=DEBUG<BR /># log4j.logger.org.alfresco.repo.audit.model=DEBUG<BR /><BR /># Forms debugging<BR /># log4j.logger.org.alfresco.web.forms=debug<BR /># log4j.logger.org.chiba.xml.xforms=debug<BR />log4j.logger.org.alfresco.web.forms.xforms.XFormsBean=error<BR />log4j.logger.org.alfresco.web.forms.XSLTRenderingEngine=error<BR /><BR /># Property sheet and modelling debugging<BR /># change to error to hide the warnings about missing properties and associations<BR />log4j.logger.alfresco.missingProperties=warn<BR />log4j.logger.org.alfresco.web.ui.repo.component.property.UIChildAssociation=warn<BR />log4j.logger.org.alfresco.web.ui.repo.component.property.UIAssociation=warn<BR />#log4j.logger.org.alfresco.web.ui.repo.component.property=debug<BR /><BR /># Dictionary/Model debugging<BR />log4j.logger.org.alfresco.repo.dictionary=warn<BR />log4j.logger.org.alfresco.repo.dictionary.types.period=warn<BR /><BR /># Virtualization Server Registry<BR />log4j.logger.org.alfresco.mbeans.VirtServerRegistry=error<BR /><BR /># Spring context runtime property setter<BR />log4j.logger.org.alfresco.util.RuntimeSystemPropertiesSetter=info<BR /><BR /># Debugging options for clustering<BR />log4j.logger.org.alfresco.repo.content.ReplicatingContentStore=error<BR />log4j.logger.org.alfresco.repo.content.replication=error<BR /><BR />#log4j.logger.org.alfresco.repo.deploy.DeploymentServiceImpl=debug<BR /><BR /># Activity service<BR />log4j.logger.org.alfresco.repo.activities=warn<BR /><BR /># User usage tracking<BR />log4j.logger.org.alfresco.repo.usage=info<BR /><BR /># Sharepoint<BR />log4j.logger.org.alfresco.module.vti=info<BR /><BR /># Forms Engine<BR />log4j.logger.org.alfresco.repo.forms=info<BR />log4j.logger.org.alfresco.web.config.forms=info<BR />log4j.logger.org.alfresco.web.scripts.forms=info<BR /><BR /># CMIS<BR />log4j.logger.org.alfresco.opencmis=error<BR />log4j.logger.org.alfresco.opencmis.AlfrescoCmisServiceInterceptor=error<BR />log4j.logger.org.alfresco.cmis=error<BR />log4j.logger.org.alfresco.cmis.dictionary=warn<BR />log4j.logger.org.apache.chemistry.opencmis=info<BR /><BR /># IMAP<BR />log4j.logger.org.alfresco.repo.imap=info<BR /><BR /># JBPM<BR /># Note: non-fatal errors (eg. logged during job execution) should be handled by Alfresco's retrying transaction handler <BR />log4j.logger.org.jbpm.graph.def.GraphElement=fatal<BR /><BR />#log4j.logger.org.alfresco.repo.googledocs=debug<BR /><BR />###### Scripting #######<BR /><BR /># Web Framework<BR />log4j.logger.org.springframework.extensions.webscripts=info<BR />log4j.logger.org.springframework.extensions.webscripts.ScriptLogger=warn<BR />log4j.logger.org.springframework.extensions.webscripts.ScriptDebugger=off<BR /><BR /># Repository<BR />log4j.logger.org.alfresco.repo.web.scripts=warn<BR />log4j.logger.org.alfresco.repo.web.scripts.BaseWebScriptTest=info<BR />log4j.logger.org.alfresco.repo.web.scripts.AlfrescoRhinoScriptDebugger=off<BR />log4j.logger.org.alfresco.repo.jscript=error<BR />log4j.logger.org.alfresco.repo.jscript.ScriptLogger=warn<BR />log4j.logger.org.alfresco.repo.cmis.rest.CMISTest=info<BR /><BR />log4j.logger.org.alfresco.repo.avm.actions=info<BR /><BR /># Freemarker<BR /># Note the freemarker.runtime logger is used to log non-fatal errors that are handled by Alfresco's retrying transaction handler<BR />log4j.logger.freemarker.runtime=<BR /><BR /># Metadata extraction<BR />log4j.logger.org.alfresco.repo.content.metadata.AbstractMappingMetadataExtracter=warn<BR /><BR /># Reduces PDFont error level due to ALF-7105<BR />log4j.logger.org.apache.pdfbox.pdmodel.font.PDSimpleFont=fatal<BR />log4j.logger.org.apache.pdfbox.pdmodel.font.PDFont=fatal<BR />log4j.logger.org.apache.pdfbox.pdmodel.font.PDCIDFont=fatal<BR /><BR /># no index support<BR />log4j.logger.org.alfresco.repo.search.impl.noindex.NoIndexIndexer=fatal<BR />log4j.logger.org.alfresco.repo.search.impl.noindex.NoIndexSearchService=fatal<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>my alfresco-global.properties file:</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE><BR />###############################<BR />## Common Alfresco Properties #<BR />###############################<BR /><BR />dir.root=D:/Alfresco/alf_data<BR /><BR />alfresco.context=alfresco<BR />alfresco.host=127.0.0.1<BR />alfresco.port=8080<BR />alfresco.protocol=http<BR /><BR />share.context=share<BR />share.host=127.0.0.1<BR />share.port=8080<BR />share.protocol=http<BR /><BR />### database connection properties ###<BR />db.driver=org.postgresql.Driver<BR />db.username=alfresco<BR />db.password=badrad<BR />db.name=alfresco<BR />db.url=jdbc:postgresql://localhost:5432/${db.name}<BR /><BR />### FTP Server Configuration ###<BR />ftp.enabled=false<BR />ftp.port=21<BR />ftp.ipv6.enabled=false<BR /><BR />### RMI service ports ###<BR />alfresco.rmi.services.port=50500<BR />avm.rmi.service.port=0<BR />avmsync.rmi.service.port=0<BR />attribute.rmi.service.port=0<BR />authentication.rmi.service.port=0<BR />repo.rmi.service.port=0<BR />action.rmi.service.port=0<BR />deployment.rmi.service.port=0<BR /><BR />### External executable locations ###<BR />ooo.exe=D:/Alfresco/openoffice/App/openoffice/program/soffice.exe<BR />ooo.enabled=true<BR />ooo.port=8100<BR />ooo.port=8100<BR />img.root=D:/Alfresco/imagemagick<BR />img.dyn=${img.root}/lib<BR />img.exe=${img.root}/convert<BR />swf.exe=D:/Alfresco/swftools/pdf2swf.exe<BR />jodconverter.enabled=false <BR />jodconverter.officeHome=D:/Alfresco/openoffice/App/openoffice <BR />jodconverter.portNumbers=8100 <BR /><BR />### Initial admin password ###<BR />alfresco_user_store.adminpassword=22fcc53f3b6898fdfe5014575e66b9bf<BR /><BR />### E-mail site invitation setting ###<BR />notification.email.siteinvite=false<BR /><BR />### File Protocol Root ###<BR />protocols.rootPath=/${spaces.company_home.childname}/${spaces.sites.childname}<BR /><BR />### License location ###<BR />dir.license.external=D:/Alfresco<BR /><BR />### Solr indexing ###<BR />index.subsystem.name=solr<BR />dir.keystore=${dir.root}/keystore<BR />solr.port.ssl=8443<BR /><BR />### BPM Engine ###<BR />system.workflow.engine.jbpm.enabled=false<BR /><BR />### Authentication ###<BR />authentication.chain=passthru1:passthru,ldap-ad1:ldap-ad<BR /><BR />### Passthru Config ###<BR />passthru.authentication.useLocalServer=false<BR />passthru.authentication.domain=mydomain<BR />passthru.authentication.servers=mydomain\\myserver1.mydomain.org,myserver2.mydomain.org<BR />passthru.authentication.guestAccess=false<BR />passthru.authentication.defaultAdministratorUserNames=administrator,admin,e453595<BR />#Timeout value when opening a session to an authentication server, in milliseconds<BR />passthru.authentication.connectTimeout=5000<BR />#Offline server check interval in seconds<BR />passthru.authentication.offlineCheckInterval=300<BR />passthru.authentication.protocolOrder=NetBIOS,TCPIP<BR />passthru.authentication.authenticateCIFS=true<BR />passthru.authentication.authenticateFTP=true<BR />ntlm.uthentication.sso.enabled=false<BR />ntlm.authentication.mapUnknownUserToGuest=false<BR /><BR />### LDAP-AD Auth ###<BR />ldap.authentication.active=false<BR />ldap.authentication.allowGuestLogin=false<BR />ldap.authentication.userNameFormat=%s@domain<BR />#ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory<BR />ldap.authentication.java.naming.provider.url=ldap://myserver.mydomain.org:389<BR />ldap.authentication.java.naming.security.authentication=simple<BR />#ldap.authentication.escapeCommasInBind=false<BR />#ldap.authentication.escapeCommasInUid=false<BR />ldap.authentication.defaultAdministratorUserNames=Administrator,admin,e453595<BR /><BR />### LDAP-AD Synch ###<BR />ldap.synchronization.active=true<BR />ldap.synchronization.java.naming.security.authentication=simple<BR />ldap.synchronization.java.naming.security.principal=e453595@mydomain.org<BR />ldap.synchronization.java.naming.security.credentials=********<BR />#ldap.synchronization.queryBatchSize=1000<BR />#ldap.synchronization.attributeBatchSize=1000<BR />#ldap.synchronization.groupQuery=(objectclass\=6000 - Radiology Global Groups,OU=2010 RADIOLOGY DEPARTMENT - Dept Managed)<BR />#ldap.synchronization.groupDifferentialQuery=(&amp;(objectclass\=6000 - Radiology Global Groups)(!(modifyTimestamp&lt;\={0})))<BR />#ldap.synchronization.personQuery=(&amp;(objectclass\=2010 RADIOLOGY DEPARTMENT - Dept Managed,)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))<BR />#ldap.synchronization.personDifferentialQuery=(&amp;(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp&lt;\={0})))<BR />ldap.synchronization.groupSearchBase=ou\=6000 - Radiology Global Groups,OU\=2010 RADIOLOGY DEPARTMENT - Dept Managed,DC=mydomain,DC=org<BR />ldap.synchronization.userSearchBase=CN=WVUser,OU=6000 - Radiology Global Groups,OU=2010 RADIOLOGY DEPARTMENT - Dept Managed,DC=mydomain,DC=org<BR />ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp<BR />ldap.synchronization.timestampFormat=yyyyMMddHHmmss<BR />ldap.synchronization.userIdAttributeName=sAMAccountName<BR />ldap.synchronization.userFirstNameAttributeName=givenName<BR />ldap.synchronization.userLastNameAttributeName=sn<BR />ldap.synchronization.userEmailAttributeName=mail<BR />ldap.synchronization.userOrganizationalIdAttributeName=stProcessLevel<BR />ldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProvider<BR />ldap.synchronization.groupIdAttributeName=cn<BR />ldap.synchronization.groupDisplayNameAttributeName=displayName<BR />ldap.synchronization.groupType=group<BR />ldap.synchronization.personType=user<BR />ldap.synchronization.groupMemberAttributeName=member<BR />ldap.synchronization.enableProgressEstimation=true<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE></BODY></HTML> Fri, 27 Apr 2012 17:02:48 GMT docjay 2012-04-27T17:02:48Z Yet another LDAP-AD sync issue https://connect.hyland.com/t5/alfresco-archive/yet-another-ldap-ad-sync-issue/m-p/264464#M217594 version:&nbsp; 4.0d Community EditionOS:&nbsp; Server 2008 x64Syncing to MS LDAP-ADbackground:&nbsp; I can successfully login to the 'share' site with my domain info, so my passthru is working correctly, but our AD is setup so that users are in different OUs and there is no way to ask for all of the users from mul Fri, 27 Apr 2012 17:02:48 GMT https://connect.hyland.com/t5/alfresco-archive/yet-another-ldap-ad-sync-issue/m-p/264464#M217594 docjay 2012-04-27T17:02:48Z Re: Yet another LDAP-AD sync issue https://connect.hyland.com/t5/alfresco-archive/yet-another-ldap-ad-sync-issue/m-p/264465#M217595 <HTML><HEAD></HEAD><BODY><SPAN>Hello,</SPAN><BR /><BR /><SPAN>i search exactly to do the same.</SPAN><BR /><BR /><SPAN>If someone has a solution….</SPAN><BR /><BR /><SPAN>Thank you</SPAN></BODY></HTML> Mon, 21 May 2012 19:49:08 GMT https://connect.hyland.com/t5/alfresco-archive/yet-another-ldap-ad-sync-issue/m-p/264465#M217595 legaulois 2012-05-21T19:49:08Z