<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic LDAP Sync issue in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/ldap-sync-issue/m-p/309777#M262907</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hi all,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I'm just update to alfresco community 4.2.e.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Alfresco is configure with SSO and LDAP Sync to my AD 2008R2.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;SSO is working.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;LDAP sync don't show any error but it don't update the properties.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;For example, a new user is allow to connect to alfresco. SSO is working for this user but his propertie are not update from AD.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;LDAP Sync show the message in log :&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;&lt;BR /&gt;2013-11-29 16:10:00,341&amp;nbsp; INFO&amp;nbsp; [security.sync.ChainingUserRegistrySynchronizer] [DefaultScheduler_Worker-5] Synchronizing users and groups with user registry 'ldap-ad1'&lt;BR /&gt;2013-11-29 16:10:00,363&amp;nbsp; WARN&amp;nbsp; [security.sync.ChainingUserRegistrySynchronizer] [DefaultScheduler_Worker-5] Full synchronization with user registry 'ldap-ad1'&lt;BR /&gt;2013-11-29 16:10:00,363&amp;nbsp; WARN&amp;nbsp; [security.sync.ChainingUserRegistrySynchronizer] [DefaultScheduler_Worker-5] Some users and groups previously created by synchronization with this user registry may be removed.&lt;BR /&gt;2013-11-29 16:10:00,414&amp;nbsp; INFO&amp;nbsp; [security.sync.ChainingUserRegistrySynchronizer] [DefaultScheduler_Worker-5] Retrieving groups changed since 12 juin 2013 08:37:45 from user registry 'ldap-ad1'&lt;BR /&gt;2013-11-29 16:10:00,485&amp;nbsp; INFO&amp;nbsp; [security.sync.ChainingUserRegistrySynchronizer] [DefaultScheduler_Worker-5] Synchronization,Category=directory,id1=ldap-ad1,id2=1 Group Analysis: Commencing batch of 0 entries&lt;BR /&gt;2013-11-29 16:10:00,486&amp;nbsp; INFO&amp;nbsp; [security.sync.ChainingUserRegistrySynchronizer] [DefaultScheduler_Worker-5] Synchronization,Category=directory,id1=ldap-ad1,id2=1 Group Analysis: Completed batch of 0 entries&lt;BR /&gt;2013-11-29 16:10:00,603&amp;nbsp; INFO&amp;nbsp; [security.sync.ChainingUserRegistrySynchronizer] [DefaultScheduler_Worker-5] Retrieving users changed since 19 août 2013 11:26:47 from user registry 'ldap-ad1'&lt;BR /&gt;2013-11-29 16:10:00,613&amp;nbsp; INFO&amp;nbsp; [security.sync.ChainingUserRegistrySynchronizer] [DefaultScheduler_Worker-5] Synchronization,Category=directory,id1=ldap-ad1,id2=6 User Creation and Association: Commencing batch of 0 entries&lt;BR /&gt;2013-11-29 16:10:00,616&amp;nbsp; INFO&amp;nbsp; [security.sync.ChainingUserRegistrySynchronizer] [DefaultScheduler_Worker-5] Synchronization,Category=directory,id1=ldap-ad1,id2=6 User Creation and Association: Completed batch of 0 entries&lt;BR /&gt;2013-11-29 16:10:00,647&amp;nbsp; INFO&amp;nbsp; [security.sync.ChainingUserRegistrySynchronizer] [DefaultScheduler_Worker-5] Finished synchronizing users and groups with user registry 'ldap-ad1'&lt;BR /&gt;2013-11-29 16:10:00,649&amp;nbsp; INFO&amp;nbsp; [security.sync.ChainingUserRegistrySynchronizer] [DefaultScheduler_Worker-5] 0 utilisateur(s) et 0 groupe(s) traité(s)&lt;BR /&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;here is my ldap sync config :&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;&lt;BR /&gt;synchronization.import.cron=0 0/10 * ? * *&lt;BR /&gt;ldap.authentication.active=false&lt;BR /&gt;ldap.authentication.java.naming.security.authentication=simple&lt;BR /&gt;ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory&lt;BR /&gt;ldap.synchronization.active=true&lt;BR /&gt;ldap.authentication.userNameFormat=%s@domain.local&lt;BR /&gt;ldap.authentication.allowGuestLogin=false&lt;BR /&gt;ldap.authentication.java.naming.provider.url=ldap://domain.local:3268&lt;BR /&gt;ldap.synchronization.java.naming.security.principal=administrateur@domain.local&lt;BR /&gt;ldap.synchronization.java.naming.security.credentials=mypassword&lt;BR /&gt;ldap.synchronization.queryBatchSize=1000&lt;BR /&gt;ldap.synchronization.groupQuery=(&amp;amp;(objectclass=group)(memberOf=cn=Groupes Alfresco,ou=Security Groups,ou=MyBusiness,dc=domain,dc=local))&lt;BR /&gt;ldap.synchronization.groupDifferentialQuery=(&amp;amp;(objectclass=group)(memberOf=cn=Groupes Alfresco,ou=Security Groups,ou=MyBusiness,dc=domain,dc=local)(!(whenChanged&amp;lt;={0})))&lt;BR /&gt;ldap.synchronization.personQuery=(&amp;amp;(objectclass=user)(|(memberOf=CN=Collaborateurs Alfresco,OU=Security Groups,OU=MyBusiness,DC=domain,DC=local))(userAccountControl:1.2.840.113556.1.4.803:=512))&lt;BR /&gt;ldap.synchronization.personDifferentialQuery=(&amp;amp;(objectclass=user)(|(memberOf=CN=Collaborateurs Alfresco,OU=Security Groups,OU=MyBusiness,DC=domain,DC=local))(userAccountControl:1.2.840.113556.1.4.803:=512)(!(whenChanged&amp;lt;={0})))&lt;BR /&gt;ldap.synchronization.groupSearchBase=dc\=domain,dc\=local&lt;BR /&gt;ldap.synchronization.userSearchBase=dc\=domain,dc\=local&lt;BR /&gt;ldap.synchronization.modifyTimestampAttributeName=whenChanged&lt;BR /&gt;ldap.synchronization.timestampFormat=yyyyMMddHHmmss’.0Z’&lt;BR /&gt;ldap.synchronization.userIdAttributeName=sAMAccountName&lt;BR /&gt;ldap.synchronization.userFirstNameAttributeName=givenName&lt;BR /&gt;ldap.synchronization.userLastNameAttributeName=sn&lt;BR /&gt;ldap.synchronization.userEmailAttributeName=mail&lt;BR /&gt;ldap.synchronization.userOrganizationalIdAttributeName=company&lt;BR /&gt;ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider&lt;BR /&gt;ldap.synchronization.groupIdAttributeName=cn&lt;BR /&gt;ldap.synchronization.groupType=group&lt;BR /&gt;ldap.synchronization.personType=user&lt;BR /&gt;ldap.synchronization.groupMemberAttributeName=member&lt;BR /&gt;synchronization.synchronizeChangesOnly=true&lt;BR /&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Thanks for help,&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Yannick&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Fri, 29 Nov 2013 15:40:22 GMT</pubDate>
    <dc:creator>ymolinet</dc:creator>
    <dc:date>2013-11-29T15:40:22Z</dc:date>
    <item>
      <title>LDAP Sync issue</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-sync-issue/m-p/309777#M262907</link>
      <description>Hi all,I'm just update to alfresco community 4.2.e.Alfresco is configure with SSO and LDAP Sync to my AD 2008R2.SSO is working.LDAP sync don't show any error but it don't update the properties.For example, a new user is allow to connect to alfresco. SSO is working for this user but his propertie are</description>
      <pubDate>Fri, 29 Nov 2013 15:40:22 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-sync-issue/m-p/309777#M262907</guid>
      <dc:creator>ymolinet</dc:creator>
      <dc:date>2013-11-29T15:40:22Z</dc:date>
    </item>
    <item>
      <title>Re: LDAP Sync issue</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/ldap-sync-issue/m-p/309778#M262908</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Can't see any error above.&amp;nbsp;&amp;nbsp;&amp;nbsp; &lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Are there anything in the alfresco logs?&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I note that the differential sync reported no users and groups to update so would suggest that you review the following:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.groupDifferentialQuery=(&amp;amp;(objectclass=group)(memberOf=cn=Groupes Alfresco,ou=Security Groups,ou=MyBusiness,dc=domain,dc=local)(!(whenChanged&amp;lt;={0})))&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.personQuery=(&amp;amp;(objectclass=user)(|(memberOf=CN=Collaborateurs Alfresco,OU=Security Groups,OU=MyBusiness,DC=domain,DC=local))(userAccountControl:1.2.840.113556.1.4.803:=512))&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.personDifferentialQuery=(&amp;amp;(objectclass=user)(|(memberOf=CN=Collaborateurs Alfresco,OU=Security Groups,OU=MyBusiness,DC=domain,DC=local))(userAccountControl:1.2.840.113556.1.4.803:=512)(!(whenChanged&amp;lt;={0})))&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;ldap.synchronization.modifyTimestampAttributeName=whenChanged&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 29 Nov 2013 16:00:12 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/ldap-sync-issue/m-p/309778#M262908</guid>
      <dc:creator>mrogers</dc:creator>
      <dc:date>2013-11-29T16:00:12Z</dc:date>
    </item>
  </channel>
</rss>

