individual ldap user synchro at login

bparis — Thu, 30 Nov 2006 15:01:42 GMT

We want this authentication procedure:1) authenticate with LDAP, using an LDAP attribute as user name id ;2) synchronize user's data in repository with user's data in LDAP at logon time, each time the user successfully authenticated;1 - I have modified LDAPAuthenticationComponentImpl class to authen

Re: individual ldap user synchro at login

andy — Fri, 01 Dec 2006 15:18:28 GMT

Hi

I would simply get the details out of ldap and then use the "personService" bean to set the properties. You need to have done all the authentication first - as the call to setCurrentUser(uid) sets up the acegi context (which appears to be your problem here…it will cause this error if you call a public service bean before you are authenticated)

Regards

Andy

Re: individual ldap user synchro at login

bparis — Fri, 01 Dec 2006 16:43:36 GMT

Yes of course, I was trying to update the user data with a non-mutable authentication service.
Now I call setSystemUserAsCurrentUser() before doing the import and call setCurrentUser( userName ) after, but I get a null pointer exception !


Caused by: java.lang.NullPointerException 
at org.alfresco.repo.domain.NodeKey.<init>(NodeKey.java:44) 
at org.alfresco.repo.node.db.hibernate.HibernateNodeDaoServiceImpl.getNodeStatus(HibernateNodeDaoServiceImpl.java:314) 
at org.alfresco.repo.node.db.hibernate.HibernateNodeDaoServiceImpl.getNode(HibernateNodeDaoServiceImpl.java:413) 
at sun.reflect.GeneratedMethodAccessor95.invoke(Unknown Source) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
at java.lang.reflect.Method.invoke(Method.java:585) 
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:335) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:181) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:148) 
at org.alfresco.repo.transaction.TransactionalDaoInterceptor.invoke(TransactionalDaoInterceptor.java:60) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176) 
at $Proxy1.getNode(Unknown Source) 
at org.alfresco.repo.node.db.DbNodeServiceImpl.exists(DbNodeServiceImpl.java:135) 
at sun.reflect.GeneratedMethodAccessor165.invoke(Unknown Source) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
at java.lang.reflect.Method.invoke(Method.java:585) 
at org.alfresco.repo.service.StoreRedirectorProxyFactory$RedirectorInvocationHandler.invoke(StoreRedirectorProxyFactory.java:213) 
at $Proxy2.exists(Unknown Source) 
at sun.reflect.GeneratedMethodAccessor165.invoke(Unknown Source) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
at java.lang.reflect.Method.invoke(Method.java:585) 
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:335) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:181) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:148) 
at org.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:116) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:80) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:41) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.alfresco.repo.audit.AuditComponentImpl.auditImpl(AuditComponentImpl.java:210) 
at org.alfresco.repo.audit.AuditComponentImpl.audit(AuditComponentImpl.java:156) 
at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:61) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:96) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176) 
at $Proxy14.exists(Unknown Source) 
at org.alfresco.web.bean.LoginBean.login(LoginBean.java:305) 
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
at java.lang.reflect.Method.invoke(Method.java:585) 
at org.apache.myfaces.el.MethodBindingImpl.invoke(MethodBindingImpl.java:129) 
… 34 more 
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

You are probably right, I should use the personService instead.
Is this a correct way to use it ?


                QName qn = QName.createQName("http://www.alfresco.org/model/content/1.0", "email");
                HashMap properties = new HashMap();
                properties.put(qn, "toto@tata") ;
                personService.setPersonProperties(userName, properties );
‍‍‍‍‍‍

Using this code creates "null" users I cannot delete !
By the way, how could I subscribe a user into a group ?

Thanks for your help.
Bernard

Re: individual ldap user synchro at login

andy — Mon, 04 Dec 2006 09:46:10 GMT

Hi

This API call expects you to set all properties which you will have to get via the node service first. I will add the setProperty method at some point.

The authority service can be used to set group membership.

Regards

Andy

Re: individual ldap user synchro at login

bparis — Mon, 04 Dec 2006 16:01:46 GMT

Here is the way I've found to create groups and subscribe users in groups:


authorityService.createAuthority(AuthorityType.GROUP, null , "mainGroup") ;
authorityService.createAuthority(AuthorityType.GROUP, "GROUP_mainGroup" , "subGroup") ;
authorityService.addAuthority("GROUP_subGroup", userName) ; 
‍‍‍‍‍

I have a big question about that example:
suppose my user name is "mainGroup", this will put the super group into subGroup ? More generally, what when the user name is the name of an existing group name ?

Bernard

Re: individual ldap user synchro at login

andy — Wed, 06 Dec 2006 09:11:27 GMT

Hi

All group authorities will be prefixed by GROUP_. This is not allowed in a user name.

If your group structure is group A contains B contains C….

Then a user in group A is not in groups B and C.
A user in group C is in groups A and B as they both include group C.

Your user name would have to be GROUP_mainGroup to casue any problems.

See the AuthorityType enum.

Regards

Andy

Re: individual ldap user synchro at login

senthil_chinnai — Tue, 30 Jan 2007 03:37:36 GMT

Bernard,

I need to do the same thing on Active Directory. Could you please share the latest working code?

Thanks,
Senthil.

topic individual ldap user synchro at login in Alfresco Archive

individual ldap user synchro at login

Re: individual ldap user synchro at login

Re: individual ldap user synchro at login

Re: individual ldap user synchro at login

Re: individual ldap user synchro at login

Re: individual ldap user synchro at login

Re: individual ldap user synchro at login