Alfresco Community 5.0d sync with Active Directory

ccandreva — Mon, 15 Jun 2015 21:21:03 GMT

I've run into an error setting up active directory sync that my searching has not been able to unwind:benchmarkeducation.ny is a domain that resolves only on our internal network . Any pointers greatly appreciated.2015-06-15 17:10:00,363 INFO [org.alfresco.repo.security.sync.ChainingUserRegistrySy

Re: Alfresco Community 5.0d sync with Active Directory

borisstankov — Tue, 16 Jun 2015 08:21:23 GMT

Hello,

synchronization.import.cron=0 0/10 9-18 ? * MON-FRI - I'm not sure, but when I tried such syntax for this parameter I always got an error message. So I change it to: synchronization.import.cron=0 0 * * * ?

ldap.synchronization.java.naming.security.principal=BENCHMARK\\SA_Alfresco - this should be reverse, for example: ldap.synchronization.java.naming.security.principal=SA_Alfresco@benchmarkeducation.ny

I believe those two are on a different rows, but just saying they should be like:
ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider
ldap.synchronization.groupIdAttributeName\=cn

Also I never used those symbols "\=" to point where are my groups nor users (nor anything else), I just used "=", meaning this should look like (and all other rows):
ldap.synchronization.groupSearchBase=cn=Groups,dc=benchmarkeducation,dc=ny

On the other hand I noticed that it matters which comes first in this file. So I put all synchronization parameters first then all ldap.synchronization parameters. So please put all parameters in order like this one, but with the changes above:

authentication.chain=alfinst:alfrescoNtlm,passthru1assthru,ldap-ad1:ldap-ad

alfresco.authentication.authenticateCIFS=false

synchronization.syncOnStartup=true
synchronization.synchronizeChangesOnly=false
synchronization.import.cron=0 0/10 9-18 ? * MON-FRI

ldap.authentication.active=false
ldap.synchronization.active=true

ldap.authentication.java.naming.provider.url=ldap://benchmarkeducation.ny:389
ldap.synchronization.java.naming.security.principal=BENCHMARK\\SA_Alfresco
ldap.synchronization.java.naming.security.credentials=************
ldap.synchronization.groupSearchBase=cn\=Groups,dc\=benchmarkeducation,dc\=ny
ldap.synchronization.userSearchBase=cn\=BEC-users,dc\=benchmarkeducation,dc\=ny
ldap.synchronization.userIdAttributeName=sAMAccountName
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=msExchALObjectVersion
ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProviderldap.synchronization.groupIdAttributeName\=cn

ldap.synchronization.personType=user

Hope this helps.

Re: Alfresco Community 5.0d sync with Active Directory

ccandreva — Tue, 16 Jun 2015 20:50:27 GMT

Thank you for your help. While it didn't solve the problem it got me a few steps closer.

The problem was my search base strings should have started with ou= , not cn= . Once I did that I was able to sync successfully.

Re: Alfresco Community 5.0d sync with Active Directory

borisstankov — Wed, 17 Jun 2015 06:27:31 GMT

Yes, sorry, I missed that. With the ou= is the right way of doing it.

topic Alfresco Community 5.0d sync with Active Directory in Alfresco Archive

Alfresco Community 5.0d sync with Active Directory

Re: Alfresco Community 5.0d sync with Active Directory

Re: Alfresco Community 5.0d sync with Active Directory

Re: Alfresco Community 5.0d sync with Active Directory