topic Re: Autenticação de usuário pelo AD do Windows Server 2008 in Alfresco Archive

Autenticação de usuário pelo AD do Windows Server 2008

danillosoares — Mon, 09 May 2016 18:13:30 GMT

Boa tarde Pessoal.Sou iniciante no Alfresco Community 5.0. estou com ele funcionando e já em operação. Mas como a quantidade de usuário foi aumentando houve a necessidade de aproveitar a base de usuários que já temos no AD. Alguém poderia me orientar para que eu faça essa integração com o AD, sem qu

Re: Autenticação de usuário pelo AD do Windows Server 2008

douglascrp — Wed, 11 May 2016 01:11:58 GMT

Tudo o que você precisa para configurar a sincronização dos usuários com o AD está documentado aqui http://docs.alfresco.com/community/concepts/sync-intro.html

Jà para a autenticação é outra coisa, e para isso, você pode se basear no exemplo disponível aqui http://docs.alfresco.com/community/tasks/auth-example-twoldap-ad.html

Re: Autenticação de usuário pelo AD do Windows Server 2008

douglascrp — Wed, 11 May 2016 19:18:35 GMT

Boa tarde.

Remova o espaço entre os itens na propriedade authentication.chain

A sua configuração de groupSearchBase e userSearchBase parecem estar corretas, o único detalhe é que você deveria usar o \= ao invés do simples = nas strings de configuração. Algo assim:

ldap.synchronization.groupSearchBase=ou\=Alfresco,dc\=domain,dc\=com,dc\=br
ldap.synchronization.userSearchBase=ou\=Users,dc\=domain,dc\=com,dc\=br

Claro, você precisa alterar a string conforme sua configuração.

Veja se isso te ajuda.

Re: Autenticação de usuário pelo AD do Windows Server 2008

danillosoares — Wed, 11 May 2016 20:00:52 GMT

Boa tarde Douglas,

Fiz as alterações que me sugeriu, conforme o post. Salvei o arquivo, reinicio os serviços Alfresco normalmente, quando vou logar no Alfresco com qualquer usuário do meu AD ele não aceita, apresenta a seguinte mensagem de erro: <strong>Seus detalhes de autenticação não foram reconhecidos ou o Alfresco não está disponível no momento.</strong>
Os meus usuários internos Alfresco logan normalmente.
Então, aparentemente preparei o ambiente LDAP no arquivo alfresco-global.properties conforme as suas recomendações que são de acordo com a documentação. Além desse processo preciso realizar outros para que o Alfresco reconheça o Usuário do AD?

Agradeço mais uma vez pela atenção meu caro!

Re: Autenticação de usuário pelo AD do Windows Server 2008

douglascrp — Thu, 12 May 2016 12:18:36 GMT

Seria melhor se você postasse aqui o seu arquivo alfresco-global.properties.
Mas por favor, poste o arquivo texto, e não uma imagem.
Fica mais fácil copiar e colar do que redigitar.

Abraço

Re: Autenticação de usuário pelo AD do Windows Server 2008

danillosoares — Thu, 12 May 2016 13:34:00 GMT

SEGUE COMO O ARQUIVO alfresco-globol.properties ESTÁ:
_____________________________________________________________________________________________
#————————————————
#——- AUTHENTICATION LDAP ——————–
#————————————————

authentication.chain=alfinst:alfrescoNtlm,ldap1:ldap-ad

ntlm.authentication.sso.enabled=false

ldap.authentication.allowGuestLogin=false
ldap.authentication.userNameFormat=%s@palmas.to.ci.br
ldap.authentication.java.naming.provider.url=ldap://192.168.12.1.palmas.to.ci.br:389
ldap.authentication.defaultAdministratorUserNames=Administrador
ldap.synchronization.java.naming.security.principal=Administrador@palmas.to.ci.br
ldap.synchronization.java.naming.security.credentials=*****
ldap.synchronization.groupSearchBase=ou\=Alfresco_CI,ou\=Alfresco\,dc\=palmas,dc\=to,dc\=ci,dc\=br

ldap.synchronization.userSearchBase=ou\=Administrador,ou\=Alfresco,dc\=palmas,dc\=to,dc\=ci,dc\=br

#———- END AUTHENTICATION ——————-
____________________________________________________________________________________________
Lembrando que 'Alfresco_CI' no meu AD é um grupo da Unidade Organizacional OU: 'Alfresco'
O Usuário Administrador está como membro do grupo 'Alfresco_CI'
Então No AD o grupo 'Alfresco_CI' aparece como uma 'CN' e não como 'OU' e o que percebi é que no arquivo acima listado eu referencio o 'Alfresco_CI' como uma 'OU' e não como 'CN'.

No momento da autenticação do usuário Administrador do AD apresenta essa mensagem: <strong>(Seus detalhes de autenticação não foram reconhecidos ou o Alfresco não está disponível no momento.</strong>
Os usuários internos logan normalmente.

Re: Autenticação de usuário pelo AD do Windows Server 2008

douglascrp — Thu, 12 May 2016 19:47:08 GMT

Boa tarde.

Esta linha está errada:
ldap.synchronization.userSearchBase=ou\=Administrador,ou\=Alfresco,dc\=palmas,dc\=to,dc\=ci,dc\=br

Remova o usuário Administrador dali
ldap.synchronization.userSearchBase=ou\=Alfresco,dc\=palmas,dc\=to,dc\=ci,dc\=br

Assim que fizer a mudança, envie também o arquivo de log do alfresco (alfresco.log)

Com o log dá para saber o que pode estar acontecendo de errado.

Dúvida: Você considera seguro postar senhas aqui? rs

Abraço

Re: Autenticação de usuário pelo AD do Windows Server 2008

danillosoares — Thu, 12 May 2016 20:09:13 GMT

Tá certo Douglas,

Agora pra esclarecer algumas coisas. Eu tenho no meu AD a Unidade organizacional Alfresco, e dentro dessa unidade terei vários grupos com vários usuários. Hoje dentro da Unidade Organizacional 'Alfresco' eu tenho o grupo: Alfresco_CI, dentro desse grupo eu tenho o usuário danilosm.
Minha dúvida é a senguinte, como vou colocar essas informações no arquivo de configuração alfresco-global.properties, e se precisa realmente:
Na imagem eu tenho o meu arquivo de configuração alfresco-global.properties, por favor repare se tem algo errado.
_______________________________________________________
PARA QUE NÃO FIQUE NENHUMA DÚVIDA.
EU PRECISO APROVEITAR OS USUÁRIOS DO MEU AD NO ALFRESCO PARA QUE EU NÃO TENHA DUAS BASES DE USUÁRIOS.
PERGUNTA: EU TENHO QUE REALIZAR DOIS PROCESSOS?
1 - configurar a sincronização dos usuários com o AD.
2 - configurar a autenticação dos usuários.
_______________________________________________________
Meu arquivo alfresco-global.properties:
______________________________________________________

Meu amigo, muito obrigado por enquanto vou ficar no aguardo se poder contribuir mais uma vez, um forte abraço!

Re: Autenticação de usuário pelo AD do Windows Server 2008

danillosoares — Thu, 12 May 2016 20:25:00 GMT

Boa tarde Doulas,
Fiz a alteração, retirei o usuário Administrador e mesmo assim não funcionou.
Estou expondo o final do meu arquivo alfresco.log para que possa olhar e mais uma vez ajudar se possível.
____________________________________________________________________________________________________________________________
2016-05-11 16:39:23,117 INFO [org.springframework.extensions.webscripts.AbstractRuntimeContainer] [localhost-startStop-1] Initialised Public Api Web Script Container (in 2468.0364ms)
2016-05-11 16:39:23,165 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [asynchronouslyRefreshedCacheThreadPool1] Registered 11 Web Scripts (+0 failed), 82 URLs
2016-05-11 16:39:23,165 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [asynchronouslyRefreshedCacheThreadPool1] Registered 0 Package Description Documents (+0 failed)
2016-05-11 16:39:23,165 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [asynchronouslyRefreshedCacheThreadPool1] Registered 0 Schema Description Documents (+0 failed)
2016-05-11 16:41:00,261 WARN [org.alfresco.util.OpenOfficeConnectionTester] [DefaultScheduler_Worker-9] Error trying to query Open Office version information. OpenOffice.org's ConfigurationRegistry not implemented in this version of OOo. This should not affect the operation of OOo.
2016-05-11 16:41:00,262 INFO [org.alfresco.util.OpenOfficeConnectionTester] [DefaultScheduler_Worker-9] The OpenOffice connection was re-established.
2016-05-11 16:41:14,280 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopping 'googledocs' subsystem, ID: [googledocs, drive]
2016-05-11 16:41:14,287 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopped 'googledocs' subsystem, ID: [googledocs, drive]
2016-05-11 16:41:14,291 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopping 'Replication' subsystem, ID: [Replication, default]
2016-05-11 16:41:14,293 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopped 'Replication' subsystem, ID: [Replication, default]
2016-05-11 16:41:14,327 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopping 'Subscriptions' subsystem, ID: [Subscriptions, default]
2016-05-11 16:41:14,329 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopped 'Subscriptions' subsystem, ID: [Subscriptions, default]
2016-05-11 16:41:14,330 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopping 'email' subsystem, ID: [email, inbound]
2016-05-11 16:41:14,332 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopped 'email' subsystem, ID: [email, inbound]
2016-05-11 16:41:14,333 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopping 'fileServers' subsystem, ID: [fileServers, default]
2016-05-11 16:41:16,338 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopped 'fileServers' subsystem, ID: [fileServers, default]
2016-05-11 16:41:16,379 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopping 'ActivitiesFeed' subsystem, ID: [ActivitiesFeed, default]
2016-05-11 16:41:16,380 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopped 'ActivitiesFeed' subsystem, ID: [ActivitiesFeed, default]
2016-05-11 16:41:16,381 WARN [org.springframework.beans.factory.support.DisposableBeanAdapter] [localhost-startStop-2] Invocation of destroy method 'close' failed on bean with name 'solrSqlSessionTemplate': java.lang.UnsupportedOperationException: Manual close is not allowed over a Spring managed SqlSession
2016-05-11 16:41:16,382 WARN [org.springframework.beans.factory.support.DisposableBeanAdapter] [localhost-startStop-2] Invocation of destroy method 'close' failed on bean with name 'activitiesSqlSessionTemplate': java.lang.UnsupportedOperationException: Manual close is not allowed over a Spring managed SqlSession
2016-05-11 16:41:16,382 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopping 'OOoDirect' subsystem, ID: [OOoDirect, default]
2016-05-11 16:41:16,388 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopped 'OOoDirect' subsystem, ID: [OOoDirect, default]
2016-05-11 16:41:16,389 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopping 'ContentStore' subsystem, ID: [ContentStore, managed, unencrypted]
2016-05-11 16:41:16,390 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopped 'ContentStore' subsystem, ID: [ContentStore, managed, unencrypted]
2016-05-11 16:41:16,396 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopping 'Synchronization' subsystem, ID: [Synchronization, default]
2016-05-11 16:41:16,399 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopped 'Synchronization' subsystem, ID: [Synchronization, default]
2016-05-11 16:41:16,400 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopping 'email' subsystem, ID: [email, outbound]
2016-05-11 16:41:16,403 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopped 'email' subsystem, ID: [email, outbound]
2016-05-11 16:41:16,405 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopping 'imap' subsystem, ID: [imap, default]
2016-05-11 16:41:16,410 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopped 'imap' subsystem, ID: [imap, default]
2016-05-11 16:41:16,840 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopping 'Search' subsystem, ID: [Search, managed, solr4]
2016-05-11 16:41:17,207 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopped 'Search' subsystem, ID: [Search, managed, solr4]
2016-05-11 16:41:17,288 WARN [org.springframework.beans.factory.support.DisposableBeanAdapter] [localhost-startStop-2] Invocation of destroy method 'close' failed on bean with name 'locksSqlSessionTemplate': java.lang.UnsupportedOperationException: Manual close is not allowed over a Spring managed SqlSession
2016-05-11 16:41:17,289 WARN [org.springframework.beans.factory.support.DisposableBeanAdapter] [localhost-startStop-2] Invocation of destroy method 'close' failed on bean with name 'propertyValueSqlSessionTemplate': java.lang.UnsupportedOperationException: Manual close is not allowed over a Spring managed SqlSession
2016-05-11 16:41:17,291 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopping 'thirdparty' subsystem, ID: [thirdparty, default]
2016-05-11 16:41:17,293 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopped 'thirdparty' subsystem, ID: [thirdparty, default]
2016-05-11 16:41:17,294 WARN [org.springframework.beans.factory.support.DisposableBeanAdapter] [localhost-startStop-2] Invocation of destroy method 'close' failed on bean with name 'auditSqlSessionTemplate': java.lang.UnsupportedOperationException: Manual close is not allowed over a Spring managed SqlSession
2016-05-11 16:41:17,297 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopping 'Authentication' subsystem, ID: [Authentication, managed, alfinst]
2016-05-11 16:41:17,298 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopped 'Authentication' subsystem, ID: [Authentication, managed, alfinst]
2016-05-11 16:41:17,299 WARN [org.springframework.beans.factory.support.DisposableBeanAdapter] [localhost-startStop-2] Invocation of destroy method 'close' failed on bean with name 'contentSqlSessionTemplate': java.lang.UnsupportedOperationException: Manual close is not allowed over a Spring managed SqlSession
2016-05-11 16:41:17,301 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopping 'sysAdmin' subsystem, ID: [sysAdmin, default]
2016-05-11 16:41:17,302 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-2] Stopped 'sysAdmin' subsystem, ID: [sysAdmin, default]
2016-05-11 16:41:17,306 WARN [org.springframework.beans.factory.support.DisposableBeanAdapter] [localhost-startStop-2] Invocation of destroy method 'close' failed on bean with name 'repoSqlSessionTemplate': java.lang.UnsupportedOperationException: Manual close is not allowed over a Spring managed SqlSession
2016-05-11 16:48:07,283 INFO [org.alfresco.repo.admin] [localhost-startStop-1] Using database URL 'jdbcostgresql://localhost:5432/alfresco' with user 'alfresco'.
2016-05-11 16:48:07,799 INFO [org.alfresco.repo.admin] [localhost-startStop-1] Connected to database PostgreSQL version 9.3.6
2016-05-11 16:48:18,523 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'sysAdmin' subsystem, ID: [sysAdmin, default]
2016-05-11 16:48:18,574 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'sysAdmin' subsystem, ID: [sysAdmin, default] complete
2016-05-11 16:48:18,606 INFO [org.alfresco.repo.domain.schema.SchemaBootstrap] [localhost-startStop-1] Ignoring script patch (post-Hibernate): patch.db-V4.2-metadata-query-indexes
2016-05-11 16:48:34,877 INFO [org.springframework.extensions.webscripts.TemplateProcessorRegistry] [localhost-startStop-1] Registered template processor Repository Template Processor for extension ftl
2016-05-11 16:48:34,883 INFO [org.springframework.extensions.webscripts.ScriptProcessorRegistry] [localhost-startStop-1] Registered script processor Repository Script Processor for extension js
2016-05-11 16:48:41,129 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'ContentStore' subsystem, ID: [ContentStore, managed, unencrypted]
2016-05-11 16:48:41,201 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'ContentStore' subsystem, ID: [ContentStore, managed, unencrypted] complete
2016-05-11 16:48:41,239 INFO [org.alfresco.repo.domain.schema.SchemaBootstrap] [localhost-startStop-1] Connecting to database: jdbcostgresql://localhost:5432/alfresco, UserName=alfresco, PostgreSQL Native Driver
2016-05-11 16:48:41,239 INFO [org.alfresco.repo.domain.schema.SchemaBootstrap] [localhost-startStop-1] Schema managed by database dialect org.hibernate.dialect.PostgreSQLDialect.
2016-05-11 16:48:42,873 INFO [org.alfresco.repo.domain.schema.SchemaBootstrap] [localhost-startStop-1] No changes were made to the schema.
2016-05-11 16:48:43,674 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'Authentication' subsystem, ID: [Authentication, managed, alfinst]
2016-05-11 16:48:44,037 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'Authentication' subsystem, ID: [Authentication, managed, alfinst] complete
2016-05-11 16:48:44,037 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'Authentication' subsystem, ID: [Authentication, managed, ldap1]
2016-05-11 16:48:44,119 WARN [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'Authentication' subsystem, ID: [Authentication, managed, ldap1] failed
org.springframework.beans.factory.CannotLoadBeanClassException: Cannot find class [org.alfresco.web.app.servlet.ldapAuthenticationFilter] for bean with name 'globalAuthenticationFilter' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\ldap-ad\ldap-filter-context.xml]; nested exception is java.lang.ClassNotFoundException: org.alfresco.web.app.servlet.ldapAuthenticationFilter
   at org.springframework.beans.factory.support.AbstractBeanFactory.resolveBeanClass(AbstractBeanFactory.java:1278)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.predictBeanType(AbstractAutowireCapableBeanFactory.java:575)
   at org.springframework.beans.factory.support.AbstractBeanFactory.isFactoryBean(AbstractBeanFactory.java:1347)
   at org.springframework.beans.factory.support.AbstractBeanFactory.isFactoryBean(AbstractBeanFactory.java:913)
   at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:614)
   at org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:932)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:479)
   at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ApplicationContextState.start(ChildApplicationContextFactory.java:809)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.start(AbstractPropertyBackedBean.java:1018)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.getState(AbstractPropertyBackedBean.java:301)
   at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory.getApplicationContext(ChildApplicationContextFactory.java:437)
   at org.alfresco.repo.management.subsystems.DefaultChildApplicationContextManager$ApplicationContextManagerState.getApplicationContext(DefaultChildApplicationContextManager.java:360)
   at org.alfresco.repo.management.subsystems.DefaultChildApplicationContextManager$ApplicationContextManagerState.start(DefaultChildApplicationContextManager.java:306)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.start(AbstractPropertyBackedBean.java:1018)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.getState(AbstractPropertyBackedBean.java:301)
   at org.alfresco.repo.management.subsystems.DefaultChildApplicationContextManager.getInstanceIds(DefaultChildApplicationContextManager.java:180)
   at org.alfresco.repo.security.authentication.subsystems.SubsystemChainingAuthenticationService.refreshBeans(SubsystemChainingAuthenticationService.java:89)
   at org.alfresco.repo.security.authentication.subsystems.SubsystemChainingAuthenticationService.getUsableAuthenticationServices(SubsystemChainingAuthenticationService.java:185)
   at org.alfresco.repo.security.authentication.AbstractChainingAuthenticationService.getDefaultAdministratorUserNames(AbstractChainingAuthenticationService.java:566)
   at org.alfresco.repo.security.authority.AuthorityServiceImpl.getRoleAuthorities(AuthorityServiceImpl.java:260)
   at org.alfresco.repo.security.authority.AuthorityServiceImpl.access$000(AuthorityServiceImpl.java:53)
   at org.alfresco.repo.security.authority.AuthorityServiceImpl$UserAuthoritySet.<init>(AuthorityServiceImpl.java:747)
   at org.alfresco.repo.security.authority.AuthorityServiceImpl.getAuthoritiesForUser(AuthorityServiceImpl.java:251)
   at org.alfresco.repo.security.authority.AuthorityServiceImpl.isAdminAuthority(AuthorityServiceImpl.java:169)
   at org.alfresco.service.cmr.workflow.WorkflowPermissionInterceptor.invoke(WorkflowPermissionInterceptor.java:52)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:46)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:159)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.transaction.interceptor.TransactionInterceptor$1.proceedWithInvocation(TransactionInterceptor.java:96)
   at org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:260)
   at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:94)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
   at com.sun.proxy.$Proxy59.isDefinitionDeployed(Unknown Source)
   at org.alfresco.repo.workflow.WorkflowDeployer.init(WorkflowDeployer.java:293)
   at org.alfresco.repo.workflow.WorkflowDeployer$1$1.doWork(WorkflowDeployer.java:506)
   at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:548)
   at org.alfresco.repo.workflow.WorkflowDeployer$1.execute(WorkflowDeployer.java:502)
   at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:457)
   at org.alfresco.repo.workflow.WorkflowDeployer.onBootstrap(WorkflowDeployer.java:497)
   at org.springframework.extensions.surf.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:56)
   at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEventInternal(SafeApplicationEventMulticaster.java:209)
   at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEvent(SafeApplicationEventMulticaster.java:180)
   at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:334)
   at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:948)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:482)
   at org.springframework.web.context.ContextLoader.configureAndRefreshWebApplicationContext(ContextLoader.java:410)
   at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:306)
   at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:112)
   at org.alfresco.web.app.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:63)
   at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:5016)
   at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5524)
   at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
   at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
   at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)
   at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:649)
   at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:1081)
   at org.apache.catalina.startup.HostConfig$DeployWar.run(HostConfig.java:1877)
   at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)
   at java.util.concurrent.FutureTask.run(Unknown Source)
   at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
   at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
   at java.lang.Thread.run(Unknown Source)
Caused by: java.lang.ClassNotFoundException: org.alfresco.web.app.servlet.ldapAuthenticationFilter
   at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1720)
   at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1571)
   at org.springframework.util.ClassUtils.forName(ClassUtils.java:266)
   at org.springframework.beans.factory.support.AbstractBeanDefinition.resolveBeanClass(AbstractBeanDefinition.java:419)
   at org.springframework.beans.factory.support.AbstractBeanFactory.doResolveBeanClass(AbstractBeanFactory.java:1299)
   at org.springframework.beans.factory.support.AbstractBeanFactory.resolveBeanClass(AbstractBeanFactory.java:1270)
   … 64 more
2016-05-11 16:48:44,727 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'thirdparty' subsystem, ID: [thirdparty, default]
2016-05-11 16:48:44,921 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'thirdparty' subsystem, ID: [thirdparty, default] complete
2016-05-11 16:48:44,927 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'OOoDirect' subsystem, ID: [OOoDirect, default]
2016-05-11 16:48:47,564 WARN [org.alfresco.util.OpenOfficeConnectionTester] [localhost-startStop-1] An initial OpenOffice connection could not be established.
2016-05-11 16:48:47,568 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'OOoDirect' subsystem, ID: [OOoDirect, default] complete
2016-05-11 16:48:47,584 INFO [org.alfresco.repo.admin.ConfigurationChecker] [localhost-startStop-1] The Alfresco root data directory ('dir.root') is: C:\Alfresco\alf_data
2016-05-11 16:48:47,588 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'Search' subsystem, ID: [Search, managed, solr4]
2016-05-11 16:48:48,059 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'Search' subsystem, ID: [Search, managed, solr4] complete
2016-05-11 16:48:48,091 INFO [org.alfresco.repo.admin.patch.PatchExecuter] [localhost-startStop-1] Checking for patches to apply …
2016-05-11 16:48:48,552 INFO [org.alfresco.repo.admin.patch.PatchExecuter] [localhost-startStop-1] No patches were required.
2016-05-11 16:48:48,588 INFO [org.alfresco.repo.module.ModuleServiceImpl] [localhost-startStop-1] Found 2 module(s).
2016-05-11 16:48:48,628 INFO [org.alfresco.repo.module.ModuleServiceImpl] [localhost-startStop-1] Starting module 'org.alfresco.integrations.google.docs' version 3.0.0.
2016-05-11 16:48:48,649 INFO [org.alfresco.repo.module.ModuleServiceImpl] [localhost-startStop-1] Starting module 'org.alfresco.module.vti' version 1.3.
2016-05-11 16:48:48,657 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'fileServers' subsystem, ID: [fileServers, default]
2016-05-11 16:48:49,605 WARN [org.alfresco.fileserver] [localhost-startStop-1] CIFS server name is longer than 15 characters, truncated to SERVERALFRESCO2
2016-05-11 16:48:49,663 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'fileServers' subsystem, ID: [fileServers, default] complete
2016-05-11 16:48:49,664 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'imap' subsystem, ID: [imap, default]
2016-05-11 16:48:49,879 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'imap' subsystem, ID: [imap, default] complete
2016-05-11 16:48:49,879 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'email' subsystem, ID: [email, outbound]
2016-05-11 16:48:50,012 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'email' subsystem, ID: [email, outbound] complete
2016-05-11 16:48:50,012 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'email' subsystem, ID: [email, inbound]
2016-05-11 16:48:50,140 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'email' subsystem, ID: [email, inbound] complete
2016-05-11 16:48:50,141 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'Subscriptions' subsystem, ID: [Subscriptions, default]
2016-05-11 16:48:50,173 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'Subscriptions' subsystem, ID: [Subscriptions, default] complete
2016-05-11 16:48:50,203 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'Synchronization' subsystem, ID: [Synchronization, default]
2016-05-11 16:48:50,430 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'Synchronization' subsystem, ID: [Synchronization, default] complete
2016-05-11 16:48:50,522 INFO [org.alfresco.service.descriptor.DescriptorService] [localhost-startStop-1] Alfresco JVM - v1.8.0_31-b13; maximum heap size 2189,500MB
2016-05-11 16:48:50,523 INFO [org.alfresco.service.descriptor.DescriptorService] [localhost-startStop-1] Server Mode :UNKNOWN
2016-05-11 16:48:50,524 INFO [org.alfresco.service.descriptor.DescriptorService] [localhost-startStop-1] Alfresco started (Community). Current version: 5.0.0 (d r99759-b2) schema 8.022. Originally installed version: 5.0.0 (d r99759-b2) schema 8.022.
2016-05-11 16:48:50,537 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'ActivitiesFeed' subsystem, ID: [ActivitiesFeed, default]
2016-05-11 16:48:50,977 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'ActivitiesFeed' subsystem, ID: [ActivitiesFeed, default] complete
2016-05-11 16:48:50,978 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'Replication' subsystem, ID: [Replication, default]
2016-05-11 16:48:51,003 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'Replication' subsystem, ID: [Replication, default] complete
2016-05-11 16:48:52,748 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'googledocs' subsystem, ID: [googledocs, drive]
2016-05-11 16:48:52,933 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'googledocs' subsystem, ID: [googledocs, drive] complete
2016-05-11 16:48:53,038 INFO [org.alfresco.module.vti.VtiServer] [localhost-startStop-1] Vti server started successfully on port: 7070
2016-05-11 16:48:53,039 INFO [org.alfresco.module.vti.VtiServer] [localhost-startStop-1] Vti server SessionIdManagerWorkerName: jetty1
2016-05-11 16:48:57,399 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [asynchronouslyRefreshedCacheThreadPool1] Registered 418 Web Scripts (+0 failed), 560 URLs
2016-05-11 16:48:57,404 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [asynchronouslyRefreshedCacheThreadPool1] Registered 1 Package Description Documents (+0 failed)
2016-05-11 16:48:57,404 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [asynchronouslyRefreshedCacheThreadPool1] Registered 0 Schema Description Documents (+0 failed)
2016-05-11 16:48:59,822 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [localhost-startStop-1] Registered 418 Web Scripts (+0 failed), 560 URLs
2016-05-11 16:48:59,823 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [localhost-startStop-1] Registered 1 Package Description Documents (+0 failed)
2016-05-11 16:48:59,823 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [localhost-startStop-1] Registered 0 Schema Description Documents (+0 failed)
2016-05-11 16:48:59,828 INFO [org.springframework.extensions.webscripts.AbstractRuntimeContainer] [localhost-startStop-1] Initialised Repository Web Script Container (in 6726.875ms)
2016-05-11 16:48:59,881 INFO [org.springframework.extensions.webscripts.TemplateProcessorRegistry] [localhost-startStop-1] Registered template processor freemarker for extension ftl
2016-05-11 16:48:59,884 INFO [org.springframework.extensions.webscripts.ScriptProcessorRegistry] [localhost-startStop-1] Registered script processor javascript for extension js
2016-05-11 16:49:02,118 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [asynchronouslyRefreshedCacheThreadPool1] Registered 418 Web Scripts (+0 failed), 560 URLs
2016-05-11 16:49:02,119 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [asynchronouslyRefreshedCacheThreadPool1] Registered 1 Package Description Documents (+0 failed)
2016-05-11 16:49:02,119 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [asynchronouslyRefreshedCacheThreadPool1] Registered 0 Schema Description Documents (+0 failed)
2016-05-11 16:49:02,212 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [asynchronouslyRefreshedCacheThreadPool1] Registered 11 Web Scripts (+0 failed), 82 URLs
2016-05-11 16:49:02,212 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [asynchronouslyRefreshedCacheThreadPool1] Registered 0 Package Description Documents (+0 failed)
2016-05-11 16:49:02,213 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [asynchronouslyRefreshedCacheThreadPool1] Registered 0 Schema Description Documents (+0 failed)
2016-05-11 16:49:02,324 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [localhost-startStop-1] Registered 11 Web Scripts (+0 failed), 82 URLs
2016-05-11 16:49:02,325 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [localhost-startStop-1] Registered 0 Package Description Documents (+0 failed)
2016-05-11 16:49:02,325 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [localhost-startStop-1] Registered 0 Schema Description Documents (+0 failed)
2016-05-11 16:49:02,328 INFO [org.springframework.extensions.webscripts.AbstractRuntimeContainer] [localhost-startStop-1] Initialised Public Api Web Script Container (in 2374.416ms)
2016-05-11 16:49:02,376 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [asynchronouslyRefreshedCacheThreadPool1] Registered 11 Web Scripts (+0 failed), 82 URLs
2016-05-11 16:49:02,377 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [asynchronouslyRefreshedCacheThreadPool1] Registered 0 Package Description Documents (+0 failed)
2016-05-11 16:49:02,377 INFO [org.springframework.extensions.webscripts.DeclarativeRegistry] [asynchronouslyRefreshedCacheThreadPool1] Registered 0 Schema Description Documents (+0 failed)
2016-05-11 16:50:00,396 WARN [org.alfresco.util.OpenOfficeConnectionTester] [DefaultScheduler_Worker-4] Error trying to query Open Office version information. OpenOffice.org's ConfigurationRegistry not implemented in this version of OOo. This should not affect the operation of OOo.
2016-05-11 16:50:00,398 INFO [org.alfresco.util.OpenOfficeConnectionTester] [DefaultScheduler_Worker-4] The OpenOffice connection was re-established.
________________________________________________________________________________________________________________________________________________________

Em relação as senhas, antes de postar eu alterei os dados como ip, senha e domínio, na verdade os dados reais não foram expostos.

Mais uma vez agradeço a força irmão.
Abraços

Re: Autenticação de usuário pelo AD do Windows Server 2008

douglascrp — Fri, 13 May 2016 14:08:34 GMT

Bom dia.

Pela mensagem de erro abaixo, eu imagino que você mexeu em arquivos da pasta <tomcat>/webapps/alfresco, certo?

startStop-1] Starting 'Authentication' subsystem, ID: [Authentication, managed, ldap1]
2016-05-11 16:48:44,119 WARN [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'Authentication' subsystem, ID: [Authentication, managed, ldap1] failed
org.springframework.beans.factory.CannotLoadBeanClassException: Cannot find class [org.alfresco.web.app.servlet.ldapAuthenticationFilter] for bean with name 'globalAuthenticationFilter' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\ldap-ad\ldap-filter-context.xml]; nested exception is java.lang.ClassNotFoundException: org.alfresco.web.app.servlet.ldapAuthenticationFilter
at org.springframework.beans.factory.support.AbstractBeanFactory.resolveBeanClass(AbstractBeanFactory.java:1278)

Você precisa corrigir esse erro antes de tentar qualquer outra coisa.
Meu conselho. Apague as pastas alfresco e share e deixe que o Tomcat faça o redeploy dos arquivos alfresco.war e share.war.
Mas faça backup das customizações que você possa ter feito dentro das pastas. Essa é uma coisa bem comum de se ver por aí, mas que deve ser evitada a todo custo.

Abraço

Re: Autenticação de usuário pelo AD do Windows Server 2008

danillosoares — Fri, 13 May 2016 19:27:46 GMT

Boa tarde,

Quero agradecer pela força e paciência e dizer que segui todas as suas orientações inclusive a última de apagar os diretórios Alfresco e share, por fim tudo revolvido.

Forte abraço e sucesso!

Re: Autenticação de usuário pelo AD do Windows Server 2008

douglascrp — Sat, 14 May 2016 01:21:49 GMT

Legal.
Abraço

Re: Autenticação de usuário pelo AD do Windows Server 2008

danillosoares — Mon, 16 May 2016 20:21:35 GMT

Boa tarde,
Gostaria de saber mais uma coisa.

Fiz a autenticação dos meus usuários a partir do meu AD, ok. Minha dúvida agora é a seguinte, eu tenho mais um servidor AD em uma VPN onde tenho redes remotamente distantes entre si, porém cada uma tem sua base de usuários, cada uma tenho um servidor AD. Em todas as redes terei alguns usuários que precisarão utilizar o Alfresco.
A pergunta é eu posso configurar o Alfresco para buscar autenticações de usuários em mais de um servidor de dominio? Tenho 3 servidores, nos 3 tenho usuários que precisam de acesso.

Desde já agradeço.

Re: Autenticação de usuário pelo AD do Windows Server 2008

douglascrp — Tue, 17 May 2016 18:28:44 GMT

Respondido na outra thread que você iniciou.
https://forums.alfresco.com/pt/comment/163538#comment-163538

Re: Autenticação de usuário pelo AD do Windows Server 2008

titan — Wed, 21 Jun 2017 13:55:50 GMT

Bom dia, estou tentando autenticar meu Alfresco pelo meu Ad e sempre me retorna erro a seguir

org.quartz.SchedulerException: Job threw an unhandled exception. [See nested exception: org.alfresco.repo.security.authentication.AuthenticationException: 05210006 Falha ao se comunicar com ldap://192.168.10.2.rededoctum.intranet:389. Razão javax.naming.CommunicationException, 192.168.10.2.rededoctum.intranet:389, java.net.UnknownHostException, 192.168.10.2.rededoctum.intranet]

Configuração alfresco-global.properties

authentication.chain=alfinst:alfrescoNtlm,ldap1:ldap-ad

ntlm.authentication.sso.enabled=false

ldap.authentication.allowGuestLogin=false
ldap.authentication.userNameFormat=%s@redoctum.intranet
ldap.authentication.java.naming.provider.url=ldap://192.168.10.2.rededoctum.intranet:389
ldap.authentication.defaultAdministratorUserNames=Administrator
ldap.synchronization.java.naming.security.principal=Administrator@rededoctum.intranet
ldap.synchronization.java.naming.security.credentials=*****
ldap.synchronization.groupSearchBase=ou\=10_Caratinga\,dc\=rededoctum,dc\=intranet
ldap.synchronization.userSearchBase=ou\=10_Caratinga,dc\=rededoctum,dc\=intranet

#———- END AUTHENTICATION ——————-

Re: Autenticação de usuário pelo AD do Windows Server 2008

titan — Wed, 21 Jun 2017 14:17:44 GMT

Atualizando:

consegui resolver esse problema, onde estava ldap://192.168.10.2.rededoctum.intranet:389 alterei para ldap://192.168.10.2:389, ele sicronizou os usuarios, sem problema, meu problema agora autenticação, vejo todos usuários dentro do alfresco, com grupos, porém não autentica

Re: Autenticação de usuário pelo AD do Windows Server 2008

douglascrp — Thu, 22 Jun 2017 00:47:55 GMT

Boa noite.

Acho que o que está faltando para você é habilitar a autenticação pelo AD.

Para isso, inclua a linha abaixo no arquivo alfresco-global.properties:

ldap.authentication.active=true

Re: Autenticação de usuário pelo AD do Windows Server 2008

titan — Thu, 22 Jun 2017 12:31:03 GMT

Bom dia Douglas

Obrigado pela ajuda, autenticação funcionando.

Pode me ajudar em mais uma questão, no meu AD, eu possuo varias OU e vários Grupos, no meu exemplo eu sincronizei a OU 10_Caratinga.

ldap.synchronization.groupSearchBase=ou\=10_Caratinga\,dc\=rededoctum,dc\=intranet
ldap.synchronization.userSearchBase=ou\=10_Caratinga,dc\=rededoctum,dc\=intranet

Eu queria na verdade, sincronizar todas OU existentes no meu AD, quando eu troco 10_Caratinga por outra OU, ele não sincroniza mais, depois que sincronizou a primeira vez, ele autentica 100%, porém as informações dos login não vão, como e-mail, entre outras, ja com usuarios que ja estavam sincronizados, todas vão, Grupo que ele participa, Email, entre outros

existe modo que Sincronizo todas OU do Ad e não de apenas uma?

Re: Autenticação de usuário pelo AD do Windows Server 2008

douglascrp — Fri, 23 Jun 2017 20:38:22 GMT

Você pode fazer a sincronização partindo da raíz da estrutura do AD, ou então criar múltiplas configurações, uma para cada OU, ou mesmo para diferentes servidores.

A documentação oficial tem um exemplo disso.

Example: authentication and synchronization with two ldap-ad subsystems | Alfresco Documentation

Re: Autenticação de usuário pelo AD do Windows Server 2008

titan — Mon, 03 Jul 2017 14:10:46 GMT

Obrigado Douglas, consegui sincronizar todas minhas OU usando esse exemplo que vc enviou, usei varias arquivos dentro de Authentication e correu tudo bem.

Agora meu único problema é, se eu criar um usuário novo, dentro dessa OU ou grupo, ele não sincroniza,

tem algum tutorial que ensine, ja reiniciei o alfresco, deixei de um dia para outro e reiniciei, e os usuários cadastrados após a primeira sincronização não aparecem nem os grupos.

pode me ajudar?