<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic LDAP users disabled in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/ldap-users-disabled/m-p/307816#M260946</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hello,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I'm completely new to Alfresco so please be mindful of my ignorance &lt;img id="smileyhappy" class="emoticon emoticon-smileyhappy" src="https://connect.hyland.com/i/smilies/16x16_smiley-happy.png" alt="Smiley Happy" title="Smiley Happy" /&gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I have just set up alfresco 5.0 server (on a windows vm) and after an entire day of sweat, blood and tears I managed to connect it to our AD - in a way.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;When server stars the groups and users are synchronized and I can see them from within the Alfresco admin console if logged in as admin.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;However non of my ad users are able to log in. Further investigation showed that all imported/synchronized accounts are marked as disabled inside Alfresco even though they are not on the AD, and I cannot change this.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Any ideas what I need to change or were I went wrong on the configuration.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Here is the important bit from configuration file:&lt;/SPAN&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;&lt;BR /&gt;### Authentication ###&lt;BR /&gt;authentication.chain=alfinst:alfrescoNtlm,ldap-ad1:ldap-ad&lt;BR /&gt;&lt;BR /&gt;### LDAP-AD Auth ###&lt;BR /&gt;ldap.authentication.active=false&lt;BR /&gt;ldap.authentication.allowGuestLogin=false&lt;BR /&gt;ldap.authentication.userNameFormat=%s&lt;BR /&gt;ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory&lt;BR /&gt;ldap.authentication.java.naming.provider.url=ldap://192.168.0.111:389&lt;BR /&gt;ldap.authentication.java.naming.security.authentication=simple&lt;BR /&gt;ldap.authentication.escapeCommasInBind=false&lt;BR /&gt;ldap.authentication.escapeCommasInUid=false&lt;BR /&gt;ldap.authentication.defaultAdministratorUserNames=Administrator,admin&lt;BR /&gt;&lt;BR /&gt;### LDAP-AD Synch ###&lt;BR /&gt;ldap.synchronization.active=true&lt;BR /&gt;ldap.synchronization.java.naming.security.authentication=simple&lt;BR /&gt;ldap.synchronization.java.naming.security.principal=MyAdminUser@MyDomain.Com&lt;BR /&gt;ldap.synchronization.java.naming.security.credentials=MyPassword&lt;BR /&gt;ldap.synchronization.queryBatchSize=1000&lt;BR /&gt;ldap.synchronization.attributeBatchSize=1000&lt;BR /&gt;ldap.synchronization.groupQuery=(objectclass\=group)&lt;BR /&gt;ldap.synchronization.groupDifferentialQuery=(&amp;amp;(objectclass\=group)(!(modifyTimestamp&amp;lt;\={0})))&lt;BR /&gt;ldap.synchronization.personQuery=(&amp;amp;(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))&lt;BR /&gt;ldap.synchronization.personDifferentialQuery=(&amp;amp;(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp&amp;lt;\={0})))&lt;BR /&gt;ldap.synchronization.groupSearchBase=ou\=UK,ou\=Wockhardt Pharma Ltd,dc=wockhardt,dc=net&lt;BR /&gt;ldap.synchronization.userSearchBase=ou\=UK,ou\=Wockhardt Pharma Ltd,dc=wockhardt,dc=net&lt;BR /&gt;ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp&lt;BR /&gt;ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'&lt;BR /&gt;ldap.synchronization.userIdAttributeName=sAMAccountName&lt;BR /&gt;ldap.synchronization.userFirstNameAttributeName=givenName&lt;BR /&gt;ldap.synchronization.userLastNameAttributeName=sn&lt;BR /&gt;ldap.synchronization.userEmailAttributeName=mail&lt;BR /&gt;ldap.synchronization.userOrganizationalIdAttributeName=company&lt;BR /&gt;ldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProvider&lt;BR /&gt;ldap.synchronization.groupIdAttributeName=cn&lt;BR /&gt;ldap.synchronization.groupDisplayNameAttributeName=displayName&lt;BR /&gt;ldap.synchronization.groupType=group&lt;BR /&gt;ldap.synchronization.personType=user&lt;BR /&gt;ldap.synchronization.groupMemberAttributeName=member&lt;BR /&gt;ldap.synchronization.enableProgressEstimation=true&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Thanks&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Mon, 13 Apr 2015 14:43:04 GMT</pubDate>
    <dc:creator>psuplat</dc:creator>
    <dc:date>2015-04-13T14:43:04Z</dc:date>
    <item>
      <title>LDAP users disabled</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-users-disabled/m-p/307816#M260946</link>
      <description>Hello,I'm completely new to Alfresco so please be mindful of my ignorance &lt;IMG id="smileyhappy" class="emoticon emoticon-smileyhappy" src="https://migration33.stage.lithium.com/i/smilies/16x16_smiley-happy.png" alt="Smiley Happy" title="Smiley Happy" /&gt;I have just set up alfresco 5.0 server (on a windows vm) and after an entire day of sweat, blood and tears I managed to connect it to our AD - in a way.When server stars the groups and users are synchronized and I can see th</description>
      <pubDate>Mon, 13 Apr 2015 14:43:04 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-users-disabled/m-p/307816#M260946</guid>
      <dc:creator>psuplat</dc:creator>
      <dc:date>2015-04-13T14:43:04Z</dc:date>
    </item>
    <item>
      <title>Re: LDAP users disabled</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-users-disabled/m-p/307817#M260947</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hello,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Your first row of the configuration is:&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.active=false&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;But it should be enable, so it should be equials to "true"&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.active=true&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;This way all the users will be able to authenticate with their account from the AD into the Alfresco.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Here is the specs about "ldap.authentication.active" from the alfresco wiki from hree &lt;/SPAN&gt;&lt;A href="http://docs.alfresco.com/community/concepts/auth-ldap-props.html" rel="nofollow noopener noreferrer"&gt;http://docs.alfresco.com/community/concepts/auth-ldap-props.html&lt;/A&gt;&lt;SPAN&gt;:&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.authentication.active&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; This Boolean flag, when true enables use of this LDAP subsystem for authentication. It might be that this subsystem should only be used for user registry export, in which case this flag should be set to false and you would have to chain an additional subsystem such as passthru or kerberos to provide authentication functions.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Regards!&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 14 Apr 2015 08:26:00 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-users-disabled/m-p/307817#M260947</guid>
      <dc:creator>borisstankov</dc:creator>
      <dc:date>2015-04-14T08:26:00Z</dc:date>
    </item>
  </channel>
</rss>

