individual ldap user synchro at login

bparis — Thu, 30 Nov 2006 15:01:42 GMT

We want this authentication procedure:1) authenticate with LDAP, using an LDAP attribute as user name id ;2) synchronize user's data in repository with user's data in LDAP at logon time, each time the user successfully authenticated;1 - I have modified LDAPAuthenticationComponentImpl class to authen

Re: individual ldap user synchro at login

andy — Fri, 01 Dec 2006 15:18:28 GMT

Hi

I would simply get the details out of ldap and then use the "personService" bean to set the properties. You need to have done all the authentication first - as the call to setCurrentUser(uid) sets up the acegi context (which appears to be your problem here…it will cause this error if you call a public service bean before you are authenticated)

Regards

Andy

Re: individual ldap user synchro at login

bparis — Fri, 01 Dec 2006 16:43:36 GMT

Yes of course, I was trying to update the user data with a non-mutable authentication service.
Now I call setSystemUserAsCurrentUser() before doing the import and call setCurrentUser( userName ) after, but I get a null pointer exception !


Caused by: java.lang.NullPointerException 
at org.alfresco.repo.domain.NodeKey.<init>(NodeKey.java:44) 
at org.alfresco.repo.node.db.hibernate.HibernateNodeDaoServiceImpl.getNodeStatus(HibernateNodeDaoServiceImpl.java:314) 
at org.alfresco.repo.node.db.hibernate.HibernateNodeDaoServiceImpl.getNode(HibernateNodeDaoServiceImpl.java:413) 
at sun.reflect.GeneratedMethodAccessor95.invoke(Unknown Source) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
at java.lang.reflect.Method.invoke(Method.java:585) 
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:335) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:181) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:148) 
at org.alfresco.repo.transaction.TransactionalDaoInterceptor.invoke(TransactionalDaoInterceptor.java:60) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176) 
at $Proxy1.getNode(Unknown Source) 
at org.alfresco.repo.node.db.DbNodeServiceImpl.exists(DbNodeServiceImpl.java:135) 
at sun.reflect.GeneratedMethodAccessor165.invoke(Unknown Source) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
at java.lang.reflect.Method.invoke(Method.java:585) 
at org.alfresco.repo.service.StoreRedirectorProxyFactory$RedirectorInvocationHandler.invoke(StoreRedirectorProxyFactory.java:213) 
at $Proxy2.exists(Unknown Source) 
at sun.reflect.GeneratedMethodAccessor165.invoke(Unknown Source) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
at java.lang.reflect.Method.invoke(Method.java:585) 
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:335) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:181) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:148) 
at org.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:116) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:80) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:41) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.alfresco.repo.audit.AuditComponentImpl.auditImpl(AuditComponentImpl.java:210) 
at org.alfresco.repo.audit.AuditComponentImpl.audit(AuditComponentImpl.java:156) 
at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:61) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:96) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176) 
at $Proxy14.exists(Unknown Source) 
at org.alfresco.web.bean.LoginBean.login(LoginBean.java:305) 
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
at java.lang.reflect.Method.invoke(Method.java:585) 
at org.apache.myfaces.el.MethodBindingImpl.invoke(MethodBindingImpl.java:129) 
… 34 more 
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

You are probably right, I should use the personService instead.
Is this a correct way to use it ?


                QName qn = QName.createQName("http://www.alfresco.org/model/content/1.0", "email");
                HashMap properties = new HashMap();
                properties.put(qn, "toto@tata") ;
                personService.setPersonProperties(userName, properties );
‍‍‍‍‍‍

Using this code creates "null" users I cannot delete !
By the way, how could I subscribe a user into a group ?

Thanks for your help.
Bernard

Re: individual ldap user synchro at login

andy — Mon, 04 Dec 2006 09:46:10 GMT

Hi

This API call expects you to set all properties which you will have to get via the node service first. I will add the setProperty method at some point.

The authority service can be used to set group membership.

Regards

Andy

Re: individual ldap user synchro at login

bparis — Mon, 04 Dec 2006 16:01:46 GMT

Here is the way I've found to create groups and subscribe users in groups:


authorityService.createAuthority(AuthorityType.GROUP, null , "mainGroup") ;
authorityService.createAuthority(AuthorityType.GROUP, "GROUP_mainGroup" , "subGroup") ;
authorityService.addAuthority("GROUP_subGroup", userName) ; 
‍‍‍‍‍

I have a big question about that example:
suppose my user name is "mainGroup", this will put the super group into subGroup ? More generally, what when the user name is the name of an existing group name ?

Bernard

Re: individual ldap user synchro at login

andy — Wed, 06 Dec 2006 09:11:27 GMT

Hi

All group authorities will be prefixed by GROUP_. This is not allowed in a user name.

If your group structure is group A contains B contains C….

Then a user in group A is not in groups B and C.
A user in group C is in groups A and B as they both include group C.

Your user name would have to be GROUP_mainGroup to casue any problems.

See the AuthorityType enum.

Regards

Andy

Re: individual ldap user synchro at login

senthil_chinnai — Tue, 30 Jan 2007 03:37:36 GMT

Bernard,

I need to do the same thing on Active Directory. Could you please share the latest working code?

Thanks,
Senthil.

topic Re: individual ldap user synchro at login in Alfresco Archive

individual ldap user synchro at login

Re: individual ldap user synchro at login

Re: individual ldap user synchro at login

Re: individual ldap user synchro at login

Re: individual ldap user synchro at login

Re: individual ldap user synchro at login

Re: individual ldap user synchro at login