topic Re: Alfresco Community 4.2d and Active Directory Synching with Groups in Alfresco Archive

Alfresco Community 4.2d and Active Directory Synching with Groups

hsturner — Mon, 04 Nov 2013 21:31:12 GMT

Our plan is to evaluate Alfresco community in production as proof of concept to determine if it will meet our needs and if we can justify the budget for the additional features of the enterprise edition.I am having problems getting Alfresco to sync with users in my Active Directory Groups. We have g

Re: Alfresco Community 4.2d and Active Directory Synching with Groups

eswbitto — Mon, 04 Nov 2013 22:14:54 GMT

A little confused…

Are you saying that you can't get any group to sync initially or only when you create a new group in AD? Alfresco automatically does a re-sync at midnight if you haven't changed this setting. Otherwise you can create a cron (if you are using linux).

Re: Alfresco Community 4.2d and Active Directory Synching with Groups

hsturner — Thu, 07 Nov 2013 15:33:01 GMT

The problem we are running into is that the groups sync up for when we add or remove a group in Active Directory, however we are having a problem getting the users in the groups to sync when they are added or removed. Alfresco only seems to be capturing the users that are in the group the first time a group is added. We have changed the synchronization to occur every 10 minutes for testing purposes, but are going to go with 10 minutes after the hour every 4 hours in production to match our AD updating.

Re: Alfresco Community 4.2d and Active Directory Synching with Groups

eswbitto — Fri, 08 Nov 2013 18:57:36 GMT

I haven't copied my entire ldap config…I have omitted some settings that are the same as yours. I might still have some still in what I'm posting. (kinda busy at the moment on other stuff) There are a couple of things that I have different.


ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.authentication=simple
ldap.synchronization.groupQuery=(objectclass\=group)
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(whenChanged<\={0})))
ldap.synchronization.personQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(whenChanged<\={0})))
ldap.synchronization.modifyTimestampAttributeName=whenChanged
ldap.synchronization.userOrganizationalIdAttributeName=company
ldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProvider
ldap.synchronization.personType=user
ldap.synchronization.groupDisplayNameAttributeName=displayName
ldap.synchronization.groupType=group
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupMemberAttributeName=member
ldap.synchronization.enableProgressEstimation=true
ldap.authentication.java.naming.read.timeout=0
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍