<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic LDAP Authentication (no sync) is creating users?!? in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/ldap-authentication-no-sync-is-creating-users/m-p/302577#M255707</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hallo,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I've installed Alfresco 5.0.d and want to use LDAP authentication for users that I create manually in Alfresco - as I do not have the possibility to use LDAP groups or any other filter method on the LDAP server.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;So I want to create a specific user, enter the LDAP login (+ a random password) and then the user can login in Alfresco via LDAP credentials.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I have configured this setup (sort of…) via the settings below, but the following problem accurs:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Whenever a user logs in who is NOT have a Alfresco user (i.e. who I did not create manually), Alfresco creates this user by itself and the user can log in.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Using some magic debug statements, I got the following output in catalina.out when such a user logs in:&lt;/SPAN&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;&lt;BR /&gt;[authentication.ldap.LDAPAuthenticationComponentImpl] […] Authenticating user "&amp;lt;userid&amp;gt;"&lt;BR /&gt;[authentication.ldap.LDAPAuthenticationComponentImpl] […] User "&amp;lt;userid&amp;gt;" does not exist in Alfresco. Attempting to import / create the user.&lt;BR /&gt;[authentication.ldap.LDAPAuthenticationComponentImpl] […] Setting the current user to "&amp;lt;userid&amp;gt;"&lt;BR /&gt;[authentication.ldap.LDAPAuthenticationComponentImpl] […] User "&amp;lt;userid&amp;gt;" authenticated successfully&lt;BR /&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;That is NOT what I want!&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;How can I achieve my goal? What settings did I miss?&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;My configuration in alfresco-global.properties:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;&lt;BR /&gt;authentication.chain=ldap1:ldap,alfrescoNtlm1:alfrescoNtlm&lt;BR /&gt;&lt;BR /&gt;alfresco.authentication.allowGuestLogin=false&lt;BR /&gt;ntlm.authentication.sso.enabled=false&lt;BR /&gt;ntlm.authentication.allowGuestLogin=false&lt;BR /&gt;ntlm.authentication.mapUnknownUserToGuest=false&lt;BR /&gt;&lt;BR /&gt;ldap.authentication.active=true&lt;BR /&gt;ldap.authentication.allowGuestLogin=false&lt;BR /&gt;ldap.authentication.java.naming.security.authentication=simple&lt;BR /&gt;ldap.authentication.java.naming.read.timeout=30000&lt;BR /&gt;&lt;BR /&gt;ldap.authentication.userNameFormat=uid=%s,ou=people,o=xxxxxn,c=DE&lt;BR /&gt;ldap.authentication.escapeCommasInBind=true&lt;BR /&gt;ldap.authentication.java.naming.provider.url=ldaps://our.ldap.server:636&lt;BR /&gt;ldap.authentication.java.naming.security.protocol=ssl&lt;BR /&gt;ldap.authentication.truststore.path=/opt/alfresco/alf_data/keystore/ldap/ldap-keystore&lt;BR /&gt;ldap.authentication.truststore.passphrase=our-password&lt;BR /&gt;ldap.authentication.truststore.type=JKS&lt;BR /&gt;&lt;BR /&gt;ldap.synchronization.active=false&lt;BR /&gt;# out of despair, I added these settings, which do not seem to help:&lt;BR /&gt;ldap.synchronization.syncWhenMissingPeopleLogIn=false&lt;BR /&gt;ldap.synchronization.autoCreatePeopleOnLogin=false&lt;BR /&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Thank you!&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Kind regards&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Anna Christina Naß&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Tue, 15 Sep 2015 09:07:38 GMT</pubDate>
    <dc:creator>acn</dc:creator>
    <dc:date>2015-09-15T09:07:38Z</dc:date>
    <item>
      <title>LDAP Authentication (no sync) is creating users?!?</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-authentication-no-sync-is-creating-users/m-p/302577#M255707</link>
      <description>Hallo,I've installed Alfresco 5.0.d and want to use LDAP authentication for users that I create manually in Alfresco - as I do not have the possibility to use LDAP groups or any other filter method on the LDAP server.So I want to create a specific user, enter the LDAP login (+ a random password) and</description>
      <pubDate>Tue, 15 Sep 2015 09:07:38 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-authentication-no-sync-is-creating-users/m-p/302577#M255707</guid>
      <dc:creator>acn</dc:creator>
      <dc:date>2015-09-15T09:07:38Z</dc:date>
    </item>
    <item>
      <title>Re: LDAP Authentication (no sync) is creating users?!?</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-authentication-no-sync-is-creating-users/m-p/302578#M255708</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;The other setting is on the person service.&amp;nbsp; &lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;# Some authentication mechanisms may need to create people&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;# in the repository on demand. This enables that feature.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;# If disabled an error will be generated for missing&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;# people. If enabled then a person will be created and&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;# persisted.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;create.missing.people&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 15 Sep 2015 16:19:36 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-authentication-no-sync-is-creating-users/m-p/302578#M255708</guid>
      <dc:creator>mrogers</dc:creator>
      <dc:date>2015-09-15T16:19:36Z</dc:date>
    </item>
    <item>
      <title>Re: LDAP Authentication (no sync) is creating users?!?</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-authentication-no-sync-is-creating-users/m-p/302579#M255709</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hallo,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Where do I have to set this?&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;It seems to me that it is documented nowhere… &lt;span class="lia-unicode-emoji" title=":disappointed_face:"&gt;😞&lt;/span&gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Also &lt;/SPAN&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;/opt/alfresco$ grep "create.missing.people" -R *&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;SPAN&gt; does not find a corresponding file for this setting.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;It would be great if you could tell me where I have to set this flag.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Thank you!&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Anna Christina Naß&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 17 Sep 2015 08:28:08 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-authentication-no-sync-is-creating-users/m-p/302579#M255709</guid>
      <dc:creator>acn</dc:creator>
      <dc:date>2015-09-17T08:28:08Z</dc:date>
    </item>
    <item>
      <title>Re: LDAP Authentication (no sync) is creating users?!?</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-authentication-no-sync-is-creating-users/m-p/302580#M255710</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;As with most alfresco config put it into alfresco-global.properties&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 17 Sep 2015 11:19:00 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-authentication-no-sync-is-creating-users/m-p/302580#M255710</guid>
      <dc:creator>mrogers</dc:creator>
      <dc:date>2015-09-17T11:19:00Z</dc:date>
    </item>
  </channel>
</rss>

