topic Re: Disable accounts created by LDAP sync in Alfresco Archive

Disable accounts created by LDAP sync

mpeters — Tue, 26 Feb 2013 09:32:27 GMT

Hi there,how can I disable (as an admin) certain user accounts, which where previously created by the regular LDAP sync?When editing this sort of user account the <strong>Disable account</strong> setting is disabled (grayed) and can't be changed (in former versions this setting was not d

Re: Disable accounts created by LDAP sync

ofnavarro — Wed, 08 Oct 2014 19:03:32 GMT

Hi,

did you found the solution to this issue? At this moment i have the same problem and i´m going crazy with the property "isMutable" that appears to block the user disable action.

Thanks in advance.

Re: Disable accounts created by LDAP sync

mlagneaux — Mon, 13 Oct 2014 07:38:33 GMT

Hi,

User accounts that come from LDAP or AD sync are not mutable. An account will be disabled by Alfresco if it is deleted from LDAP or AD and if synchronization.allowDeletions parameter is set to false.

I think you can disable accounts coming from LDAP or AD with a javascript script. But I don't know if synchronization will reenable them.

Re: Disable accounts created by LDAP sync

ofnavarro — Mon, 13 Oct 2014 10:50:28 GMT

Hi and thanks for your answer,

Disable user accounts with the alfresco/service/api/people is what we are trying to do but, with the user accounts created by LDAP synchronization, is impossible. It always gives a "Not found user" exception. The same function with de enable option does not give this error and it gives a 200 code.

We have also tried with the alfresco/service/slingshot/profile/userprofile function and it changes the node properties correctly but there must be a superior authority that manage this immutable properties.

If only we knew how to delete this mark to these user accounts, we could manage this account like they have never been sync.

Have you any idea to do this?

Merci beaucoup.

Re: Disable accounts created by LDAP sync

mlagneaux — Mon, 20 Oct 2014 12:58:45 GMT

I think you can directly use the NodeService instead of classic APIs that manage user accounts.
To disable a user coming from LDAP or AD, you can add personDisabled aspect to the related "cmerson" node. This node is located in workspace://SpacesStore store in system/people.
Don't what LDAP synchronization is going to do on a user account with this aspect.

Re: Disable accounts created by LDAP sync

hgindl — Wed, 22 Oct 2014 08:01:31 GMT

you could also make a application group in your ldap for alfresco and sync only users from this special group

Re: Disable accounts created by LDAP sync

luiseterc — Thu, 23 Oct 2014 10:32:35 GMT

Hi, I'm just now facing the same problem. We are shutting down our AD server and want all the sync'ed accounts to become local account. All of them are now disabled and cannot change that property.

I tried thru both a JS script and RESTful API and it throws a "user not found" exception.

Anyone found a solution?

Re: Disable accounts created by LDAP sync

alahwany — Thu, 24 Sep 2015 04:55:12 GMT

Can you please tell me how to make this ? becasue i have some users only need to log on the alfresco ?