LDAP Synchronization error

henrychoi_yw — Sat, 25 Apr 2015 10:50:10 GMT

Hey guys,From my last post, I found out my Alfresco does not sync user groups from AD. So I tried to look around and follow the posts, end up broke Alfresco and removed all the users and user groups. So I tried reconfig the whole alfresco-global.properties, this is my properties file:<blockcode&g

Re: LDAP Synchronization error

rednevals — Wed, 29 Apr 2015 16:29:00 GMT

Are you still having this issue? I've been struggling with LDAP setting as well. In this case, it is the LDAP server that is hanging up on you. Do you know how many groups/users it is trying to synch. There should be a count higher up in the log. Mine was 576/13706… Way to many.

But when I try to limit it to a smaller specific group, it sees 0/0.

We have a set of groups, one for each environment: dev/prod/qa/uat. I want to focus this Alfresco installation to one of those groups. So, I tried the following for group and user base:

ldap.synchronization.groupSearchBase=CN=petcms-dev,OU=petcms,OU=appgroups,OU=accessmgmnt,DC=ers,DC=equifax,DC=com
ldap.synchronization.userSearchBase=OU=useraccounts,OU=accounts,OU=accessmgmnt,DC=ers,DC=equifax,DC=com

This resulted on 0/13706. No groups and the synch of users failed. It appears from the Alfresco documentation, that the value must start with an OU, so I cannot use the individual groups, but I can use the parent:

OU=petcms,OU=appgroups,OU=accessmgmnt,DC=ers,DC=equifax,DC=com

CN=petcms-dev,OU=petcms,OU=appgroups,OU=accessmgmnt,DC=ers,DC=equifax,DC=com
CN=petcms-prod,OU=petcms,OU=appgroups,OU=accessmgmnt,DC=ers,DC=equifax,DC=com
CN=petcms-qa,OU=petcms,OU=appgroups,OU=accessmgmnt,DC=ers,DC=equifax,DC=com
CN=petcms-uat,OU=petcms,OU=appgroups,OU=accessmgmnt,DC=ers,DC=equifax,DC=com

But this defeats the purpose of the groups. From the docs…

ldap.synchronization.groupSearchBase — The Distinguished Name (DN) of the Organizational Unit (OU) below which security groups can be found. You can determine the appropriate DN by browsing to security groups in an LDAP browser.
ldap.synchronization.userSearchBase — The distinguished name (DN) of the Organizational Unit (OU) below which user accounts can be found. You can determine the appropriate DN by browsing to user accounts in an LDAP browser.

Notice the phrase, "The Distinguished Name (DN) of the Organizational Unit (OU) below which…". This does not make sense. I have to specify the parent node, which will pull in all the groups, or all the users? I can't specify a group?

Re: LDAP Synchronization error

rednevals — Wed, 29 Apr 2015 17:17:22 GMT

There are 4 groups and 13
ldap.synchronization.groupSearchBase=OU=petcms,OU=appgroups,OU=accessmgmnt,DC=ers,DC=equifax,DC=com
ldap.synchronization.userSearchBase=OU=useraccounts,OU=accounts,OU=accessmgmnt,DC=ers,DC=equifax,DC=com
ldap.synchronization.queryBatchSize=10000
ldap.synchronization.attributeBatchSize=10000


 2015-04-29 16:53:49,390  INFO  [security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronizing users and groups with user registry 'ldap1'
 2015-04-29 16:53:50,296  INFO  [security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Retrieving groups changed since Apr 28, 2015 3:24:52 PM from user registry 'ldap1'
 2015-04-29 16:53:50,348  INFO  [security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap1,id2=1 Group Analysis: Commencing batch of 0 entries
 2015-04-29 16:53:50,349  INFO  [security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap1,id2=1 Group Analysis: Completed batch of 0 entries
 2015-04-29 16:53:50,436  INFO  [security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Retrieving all users from user registry 'ldap1'
 2015-04-29 16:53:51,322  INFO  [security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap1,id2=6 User Creation and Association: Commencing batch of 13665 entries
 2015-04-29 16:54:00,080  WARN  [alfresco.util.OpenOfficeConnectionTester] [DefaultScheduler_Worker-3] Error trying to query Open Office version information. OpenOffice.org's ConfigurationRegistry not implemented in this version of OOo. This should not affect the operation of OOo.
 2015-04-29 16:54:00,082  INFO  [alfresco.util.OpenOfficeConnectionTester] [DefaultScheduler_Worker-3] The OpenOffice connection was re-established.
 2015-04-29 17:01:37,923  INFO  [security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap1,id2=6 User Creation and Association: Processed 100 entries out of 13665. 1% complete. Rate: 0 per second. 0 failures detected.
 2015-04-29 17:08:53,407  INFO  [security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap1,id2=6 User Creation and Association: Processed 180 entries out of 13665. 1% complete. Rate: 0 per second. 0 failures detected.
 2015-04-29 17:08:53,407  INFO  [security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap1,id2=6 User Creation and Association: Completed batch of 13665 entries
 2015-04-29 17:08:53,412  ERROR [security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization aborted due to error
 org.alfresco.error.AlfrescoRuntimeException: 03290167 Failed to import people.
        at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry$PersonCollection$PersonIterator.next(LDAPUserRegistry.java:1599)
        at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry$PersonCollection$PersonIterator.next(LDAPUserRegistry.java:1518)
        at org.alfresco.repo.batch.BatchProcessor$WorkProviderIterator.next(BatchProcessor.java:609)
        at org.alfresco.repo.batch.BatchProcessor.process(BatchProcessor.java:386)
        at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.syncWithPlugin(ChainingUserRegistrySynchronizer.java:1818)
        at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.synchronizeInternal(ChainingUserRegistrySynchronizer.java:700)
        at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.access$1800(ChainingUserRegistrySynchronizer.java:96)
        at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer$7.doWork(ChainingUserRegistrySynchronizer.java:2033)
        at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:548)
        at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onBootstrap(ChainingUserRegistrySynchronizer.java:2027)
        at org.springframework.extensions.surf.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:56)
        at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onApplicationEvent(ChainingUserRegistrySynchronizer.java:2390)
        at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:96)
        at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ChildApplicationContext.publishEvent(ChildApplicationContextFactory.java:554)
        at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:948)
        at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:482)
        at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ApplicationContextState.start(ChildApplicationContextFactory.java:809)
        at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.start(AbstractPropertyBackedBean.java:991)
        at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.onApplicationEvent(AbstractPropertyBackedBean.java:530)
        at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEventInternal(SafeApplicationEventMulticaster.java:209)
        at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEvent(SafeApplicationEventMulticaster.java:180)
        at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:334)
        at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:948)
        at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:482)
        at org.springframework.web.context.ContextLoader.configureAndRefreshWebApplicationContext(ContextLoader.java:410)
        at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:306)
        at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:112)
        at org.alfresco.web.app.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:63)
        at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:4973)
        at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5467)
        at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:632)
        at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:1073)
        at org.apache.catalina.startup.HostConfig$DeployWar.run(HostConfig.java:1857)
        at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)
        at java.util.concurrent.FutureTask.run(Unknown Source)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
        at java.lang.Thread.run(Unknown Source)
Caused by: javax.naming.CommunicationException: Connection reset [Root exception is java.net.SocketException: Connection reset]
        at com.sun.jndi.ldap.LdapCtx.getSearchReply(Unknown Source)
        at com.sun.jndi.ldap.LdapNamingEnumeration.getNextBatch(Unknown Source)
        at com.sun.jndi.ldap.LdapNamingEnumeration.hasMoreImpl(Unknown Source)
        at com.sun.jndi.ldap.LdapNamingEnumeration.hasMore(Unknown Source)
        at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry$PersonCollection$PersonIterator.fetchNext(LDAPUserRegistry.java:1617)
        at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry$PersonCollection$PersonIterator.next(LDAPUserRegistry.java:1595)
        … 40 more
Caused by: java.net.SocketException: Connection reset
        at java.net.SocketInputStream.read(Unknown Source)
        at java.net.SocketInputStream.read(Unknown Source)
        at java.io.BufferedInputStream.fill(Unknown Source)
        at java.io.BufferedInputStream.read1(Unknown Source)
        at java.io.BufferedInputStream.read(Unknown Source)
        at com.sun.jndi.ldap.Connection.run(Unknown Source)
        … 1 more
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

topic LDAP Synchronization error in Alfresco Archive

LDAP Synchronization error

Re: LDAP Synchronization error

Re: LDAP Synchronization error