topic LDAP Resync users in Alfresco Archive

LDAP Resync users

todor_petkov — Thu, 21 Mar 2013 15:19:35 GMT

Hello,I have installed alfresco-4.2.c with LDAP authentication against Redhat Directory Server. It works great, however, I have added several new people in LDAP. These people are now showing up in the search. I logged with the account of one of them, but the email is not synced.I found this article

Re: LDAP Resync users

todor_petkov — Thu, 21 Mar 2013 18:22:00 GMT

I found something strange doing tcpdump after restart of alfresco:

249 is alfresco, 254 is LDAP
A.B.C.249.54812-A.B.C.254.00389: 0….`……..
A.B.C.254.00389-A.B.C.249.54812: 0….a.
……
A.B.C.249.54813-A.B.C.254.00389: 0$…`……daftAsABrush..daftAsABrush
A.B.C.254.00389-A.B.C.249.54813: 0….a.
. ….
A.B.C.249.54814-A.B.C.254.00389: 0/…`*…..cn=daftAsABrush,dc=woof..daftAsABrush
A.B.C.254.00389-A.B.C.249.54814: 0….a.
. ….
A.B.C.249.54815-A.B.C.254.00389: 0O…`J….,cn=directory manager,dc=domain,dc=com..sdasdasdasdasd123123123
A.B.C.254.00389-A.B.C.249.54815: 0#…a.
. ..dc=domain,dc=com..
A.B.C.249.54812-A.B.C.254.00389: 0….B.
A.B.C.249.54818-A.B.C.254.00389: 0B…`=….,cn=directory manager,dc=domain,dc=com.
JIUBYIUYIUYBUIOYUIOO

then it begins to try to connect to the LDAP server by using admin and the db password (not the LDAP directory manager password):

A.B.C.249.54892-A.B.C.254.00389: 0E…`@….+uid=admin,ou=People,dc=domain,dc=com..DBPASS

Can anyone give me a hint? I am looking in google, but nothing so far.

Re: LDAP Resync users

mrogers — Fri, 22 Mar 2013 21:39:54 GMT

The "daft as a brush" test is verifying that invalid login actually fails,e since its possible to configure ldap to allow access without any validation. IIRC There's a setting somewhere to turn it off if its a problem.

The sync job periodically imports users and groups from LDAP.