Alfresco user only from specific AD group member

buhaiqi — Fri, 13 Nov 2015 04:15:36 GMT

Hi,I'm very beginner in Alfresco and coding.I need to configure my Alfresco user only sync from specific AD group member.For several days, I already search and try every info that I got to fulfill what I need.But still not get proper answer.Please somebody, helplatest, I use Alfresco Community 4.2d

Re: Alfresco user only from specific AD group member

buhaiqi — Thu, 19 Nov 2015 03:00:21 GMT

solved

below is my additional configuration, hope it will help others


authentication.chain=alfrescoNtlm1:alfrescoNtlm,passthru1:passthru,ldap-ad1:ldap-ad
passthru.authentication.useLocalServer=false
# change dc-server with your current dc, domain with your current domain, and x.x.x.x with your dc server ip address
passthru.authentication.servers=dc-server.domain\\x.x.x.x

ntlm.authentication.sso.enabled=false
alfresco.authentication.allowGuestLogin=false
ntlm.authentication.mapUnknownUserToGuest=false
passthru.authentication.authenticateCIFS=true
passthru.authentication.authenticateFTP=false
passthru.authentication.guestAccess=false
passthru.authentication.defaultAdministratorUserNames=Administrator
passthru.authentication.offlineCheckInterval=300

ldap.authentication.allowGuestLogin=false
# change domain with your current
ldap.authentication.userNameFormat=%s@domain
# change dc-server with your current dc and domain with your current domain
ldap.authentication.java.naming.provider.url=ldap://dc-server.domain:389
ldap.authentication.defaultAdministratorUserNames=Administrator
# change user with your ad alfresco account and domain with your current domain
ldap.synchronization.java.naming.security.principal=user@domain
# change password with your ad alfresco account password
ldap.synchronization.java.naming.security.credentials=password

ldap.synchronization.queryBatchSize=1000
ldap.synchronization.personType=user
# change your-group with group CN, your-ou with ou where your-group exist, and domain with your current domain
ldap.synchronization.personQuery=(&(memberof\=CN\=your-group,OU\=your-ou,DC\=domain)(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(memberof\=CN\=your-group,OU\=your-ou,DC\=domain)(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp<\={0})))
ldap.synchronization.userSearchBase=DC\=domain
# if you dont want sync group, add empty ou before DC
#ldap.synchronization.groupSearchBase=OU\=empty-ou,DC\=domain
ldap.synchronization.groupSearchBase=DC\=domain

# Sync
synchronization.synchronizeChangesOnly=false
synchronization.allowDeletions=true
synchronization.syncOnStartup=true
synchronization.autoCreatePeopleOnLogin=false
synchronization.syncWhenMissingPeopleLogIn=false
# Synchron every 10 menit
synchronization.import.cron=0 0/10 * * * ?
ldap.synchronization.enableProgressEstimation=true
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: Alfresco user only from specific AD group member

vijayendra — Tue, 18 Dec 2018 07:16:17 GMT

The above memberof query for user is not working in my case. I am able to fetch groups but not users from a group.

topic Alfresco user only from specific AD group member in Alfresco Archive

Alfresco user only from specific AD group member

Re: Alfresco user only from specific AD group member

Re: Alfresco user only from specific AD group member