<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic LDAP Autenthicating with synchronization in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/ldap-autenthicating-with-synchronization/m-p/280574#M233704</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello, I have a problem with importing values from LDAP server to Alfresco. When new domain user logs in, Alfresco is not registering him with email, name and surname etc, only login. Here is how it is looks like:&lt;/P&gt;&lt;P&gt;&lt;IMG class="image-2 jive-image" src="https://connect.hyland.com/legacyfs/online/alfresco/10428_pastedImage_7.png" style="max-width: 1200px; max-height: 900px;" /&gt;&lt;/P&gt;&lt;P&gt;&lt;IMG class="image-1 jive-image" src="https://connect.hyland.com/legacyfs/online/alfresco/10427_pastedImage_6.png" style="max-width: 1200px; max-height: 900px;" /&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;In alfresco-global.config I have:&lt;/P&gt;&lt;BLOCKQUOTE&gt;&lt;TABLE border="1"&gt;&lt;TBODY&gt;&lt;TR&gt;&lt;TD&gt;&lt;P&gt;authentication.chain=ldap1:ldap,alfrescoNtlm1:alfrescoNtlm&lt;/P&gt;&lt;/TD&gt;&lt;/TR&gt;&lt;/TBODY&gt;&lt;/TABLE&gt;&lt;/BLOCKQUOTE&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Here is my ldap-authentication.properties file:&lt;/P&gt;&lt;BLOCKQUOTE&gt;&lt;TABLE border="1"&gt;&lt;TBODY&gt;&lt;TR&gt;&lt;TD&gt;&lt;P&gt;ldap.authentication.userNameFormat=%s@mycompany.local&lt;/P&gt;&lt;P&gt;ldap.authentication.java.naming.provider.url=ldap://##########&lt;/P&gt;&lt;P&gt;ldap.authentication.defaultAdministratorUserNames=authjs&lt;/P&gt;&lt;P&gt;ldap.synchronization.active=true&lt;/P&gt;&lt;P&gt;ldap.synchronization.java.naming.security.principal=authjs&lt;/P&gt;&lt;P&gt;ldap.synchronization.java.naming.security.credentials=###########&lt;/P&gt;&lt;P&gt;ldap.synchronization.groupSearchBase=OU\=Groups,OU\=mycompanyname,DC\=mir,DC\=local&lt;/P&gt;&lt;P&gt;ldap.synchronization.userSearchBase=OU\=Accounts,OU\=mycompanyname,DC\=mir,DC\=local&lt;/P&gt;&lt;P&gt;ldap.synchronization.userIdAttributeName=sAMAccountName&lt;/P&gt;&lt;P&gt;ldap.synchronization.userFirstNameAttributeName=givenName&lt;/P&gt;&lt;P&gt;ldap.synchronization.userLastNameAttributeName=sn&lt;/P&gt;&lt;P&gt;ldap.synchronization.userEmailAttributeName=mail&lt;/P&gt;&lt;P&gt;ldap.synchronization.userOrganizationalIdAttributeName=company&lt;/P&gt;&lt;/TD&gt;&lt;/TR&gt;&lt;/TBODY&gt;&lt;/TABLE&gt;&lt;/BLOCKQUOTE&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Wed, 26 Oct 2016 08:09:09 GMT</pubDate>
    <dc:creator>tomekszy</dc:creator>
    <dc:date>2016-10-26T08:09:09Z</dc:date>
    <item>
      <title>LDAP Autenthicating with synchronization</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-autenthicating-with-synchronization/m-p/280574#M233704</link>
      <description>Hello, I have a problem with importing values from LDAP server to Alfresco. When new domain user logs in, Alfresco is not registering him with email, name and surname etc, only login. Here is how it is looks like:In alfresco-global.config I have:authentication.chain=ldap1:ldap,alfrescoNtlm1:alfresco</description>
      <pubDate>Wed, 26 Oct 2016 08:09:09 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-autenthicating-with-synchronization/m-p/280574#M233704</guid>
      <dc:creator>tomekszy</dc:creator>
      <dc:date>2016-10-26T08:09:09Z</dc:date>
    </item>
    <item>
      <title>Re: LDAP Autenthicating with synchronization</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-autenthicating-with-synchronization/m-p/280575#M233705</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Is the user in question actually a part of the Account organisation unit? Since you are using ldap.authentication.userNameFormat the LDAP authentication isn't actually looking up and verifying that the user is a part of this unit, so any user from other sub-trees in LDAP can login to but would not get their details synchronized because the synchronization does not find them due to the userSearchBase restriction.&lt;/P&gt;&lt;P&gt;You haven't listed the personQuery in your configuration - that could also cause the details not to be synchronised if the conditions somehow did not match the user in question.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Also - this configuration looks like you are actually using an AD as a LDAP server. Why are you not using the ldap-ad subsystem instead of ldap? The ldap-ad and ldap subsystems have different default personQuery configurations which could result in the last issue I mentioned above.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 26 Oct 2016 10:55:40 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-autenthicating-with-synchronization/m-p/280575#M233705</guid>
      <dc:creator>afaust</dc:creator>
      <dc:date>2016-10-26T10:55:40Z</dc:date>
    </item>
  </channel>
</rss>

