<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic LDAP: Ignoring non-existent member in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/ldap-ignoring-non-existent-member/m-p/304490#M257620</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;This is s side by side schema: &lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt; &lt;/SPAN&gt;&lt;DIV style="text-align:center;"&gt; [img]&lt;A href="http://i60.tinypic.com/2ignlte.png" rel="nofollow noopener noreferrer"&gt;http://i60.tinypic.com/2ignlte.png&lt;/A&gt;[/img]&lt;/DIV&gt;&lt;SPAN&gt; &lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I want to filter the access to only members of "cn=TIT,ou=subjects,ou=groups,dc=domain,dc=com", inside this group members DN is stored in "member" attribute (&lt;/SPAN&gt;&lt;A href="http://i62.tinypic.com/29ekqp1.png" rel="nofollow noopener noreferrer"&gt;http://i62.tinypic.com/29ekqp1.png&lt;/A&gt;&lt;SPAN&gt;). I've trying since Friday, but I can't sync the members attributes like, mail, name… just the uid. If I try log in with a group non-member user I can't. I have take a look at &lt;/SPAN&gt;&lt;A href="https://forums.alfresco.com/forum/installation-upgrades-configuration-integration/authentication-ldap-sso/active-directory-3" rel="nofollow noopener noreferrer"&gt;Active Directory authentication: allow just group of users&lt;/A&gt;&lt;SPAN&gt; and other post, but I can't seem to find the right configuration. I hope you can lend me a hand, thank you.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;The &lt;/SPAN&gt;&lt;STRONG&gt;catalina.out&lt;/STRONG&gt;&lt;SPAN&gt; can be found in &lt;/SPAN&gt;&lt;A href="http://pastebin.com/0et0DVmU" rel="nofollow noopener noreferrer"&gt;http://pastebin.com/0et0DVmU&lt;/A&gt;&lt;SPAN&gt; (&lt;/SPAN&gt;&lt;STRONG&gt;Full sync part is at the end highlighted&lt;/STRONG&gt;&lt;SPAN&gt;) &lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;STRONG&gt;ldap-authentication.properties&lt;/STRONG&gt;&lt;SPAN&gt; (/opt/alfresco-5.0.a/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap/ldap1/ldap-authentication.properties)&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;&lt;BR /&gt;ldap.authentication.active=true&lt;BR /&gt;&lt;BR /&gt;ldap.authentication.allowGuestLogin=false&lt;BR /&gt;&lt;BR /&gt;ldap.authentication.defaultAdministratorUserNames=admin&lt;BR /&gt;&lt;BR /&gt;ldap.authentication.escapeCommasInBind=false&lt;BR /&gt;ldap.authentication.escapeCommasInUid=false&lt;BR /&gt;&lt;BR /&gt;#ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory&lt;BR /&gt;ldap.authentication.java.naming.provider.url=ldaps://ldap.domain.com:636&lt;BR /&gt;ldap.authentication.java.naming.security.authentication=simple&lt;BR /&gt;&lt;BR /&gt;ldap.authentication.userNameFormat=uid\=%s,ou\=people,dc\=domain,dc\=com&lt;BR /&gt;&lt;BR /&gt;ldap.synchronization.active=true&lt;BR /&gt;&lt;BR /&gt;ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider&lt;BR /&gt;&lt;BR /&gt;ldap.synchronization.enableProgressEstimation=true&lt;BR /&gt;&lt;BR /&gt;ldap.synchronization.groupDifferentialQuery=(&amp;amp;(objectclass=groupOfNames)(!(modifyTimestamp&amp;lt;={0})))&lt;BR /&gt;ldap.synchronization.groupIdAttributeName=cn&lt;BR /&gt;ldap.synchronization.groupMemberAttributeName=member&lt;BR /&gt;ldap.synchronization.groupQuery=(objectclass=groupOfNames)&lt;BR /&gt;ldap.synchronization.groupSearchBase=cn\=TIT,ou\=subjects,ou\=groups,dc\=domain,dc\=com&lt;BR /&gt;ldap.synchronization.groupType=groupOfNames&lt;BR /&gt;&lt;BR /&gt;ldap.synchronization.java.naming.security.authentication=simple&lt;BR /&gt;ldap.synchronization.java.naming.security.credentials=******** [real password changed for *]&lt;BR /&gt;ldap.synchronization.java.naming.security.principal=uid\=admin,ou\=system,dc\=domain,dc\=com&lt;BR /&gt;&lt;BR /&gt;ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp&lt;BR /&gt;&lt;BR /&gt;ldap.synchronization.personDifferentialQuery=(&amp;amp;(cn\=TIT)(objectClass\=GroupOfNames)(uid\=%s,ou\=people,dc\=domain,dc\=com))!(modifyTimestamp&amp;lt;={0})))&lt;BR /&gt;ldap.synchronization.personQuery=(&amp;amp;(cn\=TIT)(objectClass\=GroupOfNames)(uid\=%s,ou\=people,dc\=domain,dc\=com))&lt;BR /&gt;ldap.synchronization.personType=inetOrgPerson&lt;BR /&gt;&lt;BR /&gt;#ldap.synchronization.queryBatchSize=1000&lt;BR /&gt;&lt;BR /&gt;ldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'&lt;BR /&gt;&lt;BR /&gt;ldap.synchronization.userEmailAttributeName=mail&lt;BR /&gt;ldap.synchronization.userFirstNameAttributeName=givenName&lt;BR /&gt;ldap.synchronization.userIdAttributeName=uid&lt;BR /&gt;ldap.synchronization.userLastNameAttributeName=schacSn1&lt;BR /&gt;ldap.synchronization.userOrganizationalIdAttributeName=eduPersonAffiliation&lt;BR /&gt;ldap.synchronization.userSearchBase=ou\=people,dc\=domain,dc\=com&lt;BR /&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;STRONG&gt;alfresco-global.properties&lt;/STRONG&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;&lt;BR /&gt;authentication.chain=alfrescoNtlm1:alfrescoNtlm,ldap1:ldap&lt;BR /&gt;&lt;BR /&gt;#Sync Settings&lt;BR /&gt;synchronization.synchronizeChangesOnly=false&lt;BR /&gt;synchronization.syncOnStartup=true&lt;BR /&gt;synchronization.syncWhenMissingPeopleLogIn=true&lt;BR /&gt;# Full sync every minute to check only&lt;BR /&gt;synchronization.import.cron=0 0/1 * * * ?&lt;BR /&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Mon, 29 Sep 2014 19:02:46 GMT</pubDate>
    <dc:creator>bostaxola</dc:creator>
    <dc:date>2014-09-29T19:02:46Z</dc:date>
    <item>
      <title>LDAP: Ignoring non-existent member</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-ignoring-non-existent-member/m-p/304490#M257620</link>
      <description>This is s side by side schema:   [img]http://i60.tinypic.com/2ignlte.png[/img] I want to filter the access to only members of "cn=TIT,ou=subjects,ou=groups,dc=domain,dc=com", inside this group members DN is stored in "member" attribute (http://i62.tinypic.com/29ekqp1.png). I've trying since Friday,</description>
      <pubDate>Mon, 29 Sep 2014 19:02:46 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-ignoring-non-existent-member/m-p/304490#M257620</guid>
      <dc:creator>bostaxola</dc:creator>
      <dc:date>2014-09-29T19:02:46Z</dc:date>
    </item>
    <item>
      <title>Re: LDAP: Ignoring non-existent member</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-ignoring-non-existent-member/m-p/304491#M257621</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;i guess it should be&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;&lt;BR /&gt;# The query to select all objects that represent the users to import.&lt;BR /&gt;ldap.synchronization.personQuery=(&amp;amp;(objectclass\=inetOrgPerson)(memberof\=cn\=TIT,ou\=subjects,ou\=groups,dc\=domain,dc\=com))&lt;BR /&gt;&lt;BR /&gt;# The query to select objects that represent the users to import that have changed since a certain time.&lt;BR /&gt;ldap.synchronization.personDifferentialQuery=(&amp;amp;(objectclass\=inetOrgPerson)(memberof\=cn\=TIT,ou\=subjects,ou\=groups,dc\=domain,dc\=com)(!(modifyTimestamp&amp;lt;\={0})))&lt;BR /&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;kind regards,&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;hannes&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 30 Sep 2014 19:44:00 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-ignoring-non-existent-member/m-p/304491#M257621</guid>
      <dc:creator>hgindl</dc:creator>
      <dc:date>2014-09-30T19:44:00Z</dc:date>
    </item>
    <item>
      <title>Re: LDAP: Ignoring non-existent member</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-ignoring-non-existent-member/m-p/304492#M257622</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Thank you for your answer &lt;/SPAN&gt;&lt;STRONG&gt;hgindl&lt;/STRONG&gt;&lt;SPAN&gt;, but I tried doing it that way and the result was the same "Ignoring non-existent member". With &lt;/SPAN&gt;&lt;SPAN style="color:#0000ff;"&gt;(&amp;amp;(objectclass\=inetOrgPerson)(memberof\=cn\=TIT,ou\=subjects,ou\=groups,dc\=domain,dc\=com))&lt;/SPAN&gt;&lt;SPAN&gt;, ldapsearch returns nothing, with "&lt;/SPAN&gt;&lt;SPAN style="color:#0000ff;"&gt;(&amp;amp;(cn\=TIT)(objectClass\=GroupOfNames)(uid\=%s,ou\=people,dc\=domain,dc\=com))&lt;/SPAN&gt;&lt;SPAN&gt; returns the group's: dn, cn, members, owners, objectClass, description and seeAlso.&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 01 Oct 2014 11:04:59 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-ignoring-non-existent-member/m-p/304492#M257622</guid>
      <dc:creator>bostaxola</dc:creator>
      <dc:date>2014-10-01T11:04:59Z</dc:date>
    </item>
  </channel>
</rss>

