topic Re: LDAP : User synchronisation failed in Alfresco Archive

LDAP : User synchronisation failed

grome — Wed, 03 May 2006 09:42:24 GMT

Hello all,I try to set up the synchronisation from a LDAP server on Alfresco 100% OpenSource 1.2.1This what i have in my configuration files :authentication-services-context.xml<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework

Re: LDAP : User synchronisation failed

andy — Wed, 03 May 2006 11:36:56 GMT


        <property name="userNameFormat">
            <!–
            
            This maps between what the user types in and what is passed through to the underlying LDAP authentication.
            
            "%s" - the user id is passed through without modification.
            Used for LDAP authentication such as DIGEST-MD5, anything that is not "simple".
            
            "dn=cn=%s,ou=London,dc=company,dc=com" - If the user types in "Joe Bloggs" the authentricate as "dn=cn=Joe Bloggs,ou=London,dc=company,dc=com" 
            Usually for simple authentication.
            
            –>
            <value>%s</value>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Regards

Andy

Re: LDAP : User synchronisation failed

grome — Wed, 03 May 2006 12:56:29 GMT

Hi Andy,
Thank you, but the probl?m is not the authentification, it's ok for that

The probl?m is for the synchronisation. I have a new error (the last has been solved )

log errors :


May 3, 2006 1:05:52 PM org.apache.coyote.http11.Http11BaseProtocol start
INFO: Starting Coyote HTTP/1.1 on http-8080
May 3, 2006 1:05:52 PM org.apache.jk.common.ChannelSocket init
INFO: JK: ajp13 listening on /0.0.0.0:8009
May 3, 2006 1:05:52 PM org.apache.jk.server.JkMain start
INFO: Jk running ID=0 time=0/36  config=null
May 3, 2006 1:05:52 PM org.apache.catalina.storeconfig.StoreLoader load
INFO: Find registry server-registry.xml at classpath resource
May 3, 2006 1:05:52 PM org.apache.catalina.startup.Catalina start
INFO: Server startup in 12983 ms
COUNT 0
TIME 0
User adergham
13:06:19,246 ERROR [quartz.core.JobRunShell] Job DEFAULT.ldapPeopleJobDetail threw an unhandled Exception:
org.alfresco.repo.importer.ExportSourceImporterException: Failed to import
        at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:165)
        at org.alfresco.repo.importer.ImporterJob.execute(ImporterJob.java:36)
        at org.quartz.core.JobRunShell.run(JobRunShell.java:191)
        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:516)
Caused by: java.lang.NullPointerException
        at org.alfresco.repo.security.authentication.ldap.LDAPPersonExportSource.generateExport(LDAPPersonExportSource.java:205)
        at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:149)
        … 3 more
13:06:19,247 ERROR [quartz.core.ErrorLogger] Job (DEFAULT.ldapPeopleJobDetail threw an exception.
org.quartz.SchedulerException: Job threw an unhandled exception. [See nested exception: org.alfresco.repo.importer.ExportSourceImporterException: Failed to import]
        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:516)
* Nested Exception (Underlying Cause) —————
org.alfresco.repo.importer.ExportSourceImporterException: Failed to import
        at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:165)
        at org.alfresco.repo.importer.ImporterJob.execute(ImporterJob.java:36)
        at org.quartz.core.JobRunShell.run(JobRunShell.java:191)
        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:516)
Caused by: java.lang.NullPointerException
        at org.alfresco.repo.security.authentication.ldap.LDAPPersonExportSource.generateExport(LDAPPersonExportSource.java:205)
        at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:149)
        … 3 more
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Thank you.

J?r?me

Re: LDAP : User synchronisation failed

grome — Wed, 03 May 2006 12:56:57 GMT

Hi Andy,
Thank you, but the probl?m is not the authentification, it's ok for that

The probl?m is for the synchronisation. I have a new error (the last has been solved )

log errors :


May 3, 2006 1:05:52 PM org.apache.coyote.http11.Http11BaseProtocol start
INFO: Starting Coyote HTTP/1.1 on http-8080
May 3, 2006 1:05:52 PM org.apache.jk.common.ChannelSocket init
INFO: JK: ajp13 listening on /0.0.0.0:8009
May 3, 2006 1:05:52 PM org.apache.jk.server.JkMain start
INFO: Jk running ID=0 time=0/36  config=null
May 3, 2006 1:05:52 PM org.apache.catalina.storeconfig.StoreLoader load
INFO: Find registry server-registry.xml at classpath resource
May 3, 2006 1:05:52 PM org.apache.catalina.startup.Catalina start
INFO: Server startup in 12983 ms
COUNT 0
TIME 0
User adergham
13:06:19,246 ERROR [quartz.core.JobRunShell] Job DEFAULT.ldapPeopleJobDetail threw an unhandled Exception:
org.alfresco.repo.importer.ExportSourceImporterException: Failed to import
        at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:165)
        at org.alfresco.repo.importer.ImporterJob.execute(ImporterJob.java:36)
        at org.quartz.core.JobRunShell.run(JobRunShell.java:191)
        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:516)
Caused by: java.lang.NullPointerException
        at org.alfresco.repo.security.authentication.ldap.LDAPPersonExportSource.generateExport(LDAPPersonExportSource.java:205)
        at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:149)
        … 3 more
13:06:19,247 ERROR [quartz.core.ErrorLogger] Job (DEFAULT.ldapPeopleJobDetail threw an exception.
org.quartz.SchedulerException: Job threw an unhandled exception. [See nested exception: org.alfresco.repo.importer.ExportSourceImporterException: Failed to import]
        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:516)
* Nested Exception (Underlying Cause) —————
org.alfresco.repo.importer.ExportSourceImporterException: Failed to import
        at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:165)
        at org.alfresco.repo.importer.ImporterJob.execute(ImporterJob.java:36)
        at org.quartz.core.JobRunShell.run(JobRunShell.java:191)
        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:516)
Caused by: java.lang.NullPointerException
        at org.alfresco.repo.security.authentication.ldap.LDAPPersonExportSource.generateExport(LDAPPersonExportSource.java:205)
        at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:149)
        … 3 more
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Thank you.

J?r?me

Re: LDAP : User synchronisation failed

grome — Wed, 03 May 2006 12:57:16 GMT

Hi Andy,
Thank you, but the probl?m is not the authentification, it's ok for that

The probl?m is for the synchronisation. I have a new error (the last has been solved )

log errors :


May 3, 2006 1:05:52 PM org.apache.coyote.http11.Http11BaseProtocol start
INFO: Starting Coyote HTTP/1.1 on http-8080
May 3, 2006 1:05:52 PM org.apache.jk.common.ChannelSocket init
INFO: JK: ajp13 listening on /0.0.0.0:8009
May 3, 2006 1:05:52 PM org.apache.jk.server.JkMain start
INFO: Jk running ID=0 time=0/36  config=null
May 3, 2006 1:05:52 PM org.apache.catalina.storeconfig.StoreLoader load
INFO: Find registry server-registry.xml at classpath resource
May 3, 2006 1:05:52 PM org.apache.catalina.startup.Catalina start
INFO: Server startup in 12983 ms
COUNT 0
TIME 0
User adergham
13:06:19,246 ERROR [quartz.core.JobRunShell] Job DEFAULT.ldapPeopleJobDetail threw an unhandled Exception:
org.alfresco.repo.importer.ExportSourceImporterException: Failed to import
        at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:165)
        at org.alfresco.repo.importer.ImporterJob.execute(ImporterJob.java:36)
        at org.quartz.core.JobRunShell.run(JobRunShell.java:191)
        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:516)
Caused by: java.lang.NullPointerException
        at org.alfresco.repo.security.authentication.ldap.LDAPPersonExportSource.generateExport(LDAPPersonExportSource.java:205)
        at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:149)
        … 3 more
13:06:19,247 ERROR [quartz.core.ErrorLogger] Job (DEFAULT.ldapPeopleJobDetail threw an exception.
org.quartz.SchedulerException: Job threw an unhandled exception. [See nested exception: org.alfresco.repo.importer.ExportSourceImporterException: Failed to import]
        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:516)
* Nested Exception (Underlying Cause) —————
org.alfresco.repo.importer.ExportSourceImporterException: Failed to import
        at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:165)
        at org.alfresco.repo.importer.ImporterJob.execute(ImporterJob.java:36)
        at org.quartz.core.JobRunShell.run(JobRunShell.java:191)
        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:516)
Caused by: java.lang.NullPointerException
        at org.alfresco.repo.security.authentication.ldap.LDAPPersonExportSource.generateExport(LDAPPersonExportSource.java:205)
        at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:149)
        … 3 more
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: LDAP : User synchronisation failed

grome — Wed, 03 May 2006 12:58:12 GMT

Oops, sorry for the spam, there was an error on submit…:s

Re: LDAP : User synchronisation failed

andy — Wed, 03 May 2006 13:49:45 GMT

Hi

There is a bug when people are missing one of the LDAP attributes.
This will be fixed in the latest code shortly

You can work around this by filtering for people with all the attributes or removing the mapping for the attribute in the import.

I thought I had got all of these ….

Regards

Andy

Re: LDAP : User synchronisation failed

grome — Wed, 03 May 2006 14:17:32 GMT

Andy,
I have done what you said :


        <bean id="ldapPeopleExportSource" class="org.alfresco.repo.security.authentication.ldap.LDAPPersonExportSource">
        <property name="personQuery">
                <value>(objectclass=inetOrgPerson)</value>
        </property>
        <property name="searchBase">
                <value>dc=excilys,dc=com</value>
        </property>
        <property name="userIdAttributeName">
                <value>uid</value>
        </property>
        <property name="LDAPInitialDirContextFactory">
                <ref bean="ldapInitialDirContextFactory" />
        </property>
        <property name="personService">
                <ref bean="personService"></ref>
        </property>
        <property name="namespaceService">
                <ref bean="namespaceService" />
        </property>
        <property name="defaultHomeFolder">
                <value>/app:company_home</value>
        </property>
        <!–<property name="attributeMapping">
                <map>
                <entry key="cm:userName">
                        <value>cn</value>
                </entry>
                <entry key="cm:firstName">
                        <value>sn</value>
                </entry>
                <entry key="cm:lastName">
                        <value>sn</value>
                </entry>
                <entry key="cm:email">
                        <value>mail</value>
                </entry>
                <entry key="cm:organizationId">
                        <value>uidNumber</value>
                </entry>
                </map>
        </property>–>
        </bean>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

And now i have this error :


User admin
16:14:37,754 ERROR [quartz.core.JobRunShell] Job DEFAULT.ldapPeopleJobDetail threw an unhandled Exception:
org.alfresco.repo.importer.ExportSourceImporterException: Failed to import
        at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:165)
        at org.alfresco.repo.importer.ImporterJob.execute(ImporterJob.java:36)
        at org.quartz.core.JobRunShell.run(JobRunShell.java:191)
        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:516)
Caused by: java.lang.NullPointerException
        at org.alfresco.repo.security.authentication.ldap.LDAPPersonExportSource.generateExport(LDAPPersonExportSource.java:194)
        at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:149)
        … 3 more
16:14:37,755 ERROR [quartz.core.ErrorLogger] Job (DEFAULT.ldapPeopleJobDetail threw an exception.
org.quartz.SchedulerException: Job threw an unhandled exception. [See nested exception: org.alfresco.repo.importer.ExportSourceImporterException: Failed to import]
        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:516)
* Nested Exception (Underlying Cause) —————
org.alfresco.repo.importer.ExportSourceImporterException: Failed to import
        at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:165)
        at org.alfresco.repo.importer.ImporterJob.execute(ImporterJob.java:36)
        at org.quartz.core.JobRunShell.run(JobRunShell.java:191)
        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:516)
Caused by: java.lang.NullPointerException
        at org.alfresco.repo.security.authentication.ldap.LDAPPersonExportSource.generateExport(LDAPPersonExportSource.java:194)
        at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:149)
        … 3 more
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Thanks for your help

Re: LDAP : User synchronisation failed

andy — Wed, 03 May 2006 15:03:47 GMT

Hi

Sorry I was not very clear there.

One or more of your people in LDAP does not have cn, sn, mail, or uidNumber

So you could comment out the single mapping, not all of them.

or use


 <property name="personQuery">
                <value><![CDATA[(&(objectclass=inetOrgPerson)(cn=*)(sn=*)(mail=*)(uidNumber=*)]]></value>
 </property> 
‍‍‍‍‍

This will only find people with all the attributes present in LDAP.

Regards

Andy

Re: LDAP : User synchronisation failed

grome — Thu, 04 May 2006 07:48:57 GMT

Hi Andy,
in


<entry key="cm:organizationId">
          <value>uidNumber</value>
</entry>
‍‍‍‍‍

What is cmrganizationId ? a number ? a string ? is the id must exist in Alfresco ? if yes how i do this please ?

Regards,
J?r?me.

Re: LDAP : User synchronisation failed

grome — Thu, 04 May 2006 07:49:18 GMT

Hi Andy,
in


<entry key="cm:organizationId">
          <value>uidNumber</value>
</entry>
‍‍‍‍‍

What is cmrganizationId ? a number ? a string ? is the id must exist in Alfresco ? if yes how i do this please ?

Regards,
Jerome

Re: LDAP : User synchronisation failed

rgauss — Thu, 11 May 2006 18:58:29 GMT

From alfresco/model/contentModel.xml:

      <type name="cm:person">
         <title>Person</title>
         <parent>sys:base</parent>
         <properties>
            <property name="cm:userName">
               <type>d:text</type>
               <mandatory>true</mandatory>
            </property>
            <property name="cm:homeFolder">
               <type>d:noderef</type>
               <mandatory>true</mandatory>
            </property>
             <property name="cm:firstName">
               <type>d:text</type>
               <mandatory>true</mandatory>
            </property>
            <property name="cm:lastName">
               <type>d:text</type>
               <mandatory>true</mandatory>
            </property>
            <property name="cm:middleName">
               <type>d:text</type>
            </property>
            <property name="cm:email">
               <type>d:text</type>
            </property>
            <property name="cm:organizationId">
               <type>d:text</type>
            </property>
         </properties>
      </type>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

So looks like yes, it's string and no, not required.

Also, looks like Andy's post is missing a parenthesis at the end, I think it should be:

 <property name="personQuery"> 
                <value><![CDATA[(&(objectclass=inetOrgPerson)(cn=*)(sn=*)(mail=*)(uidNumber=*))]]></value> 
 </property> ‍‍‍

I've got a problem with groups syncronizing with users. I can get the users to sync and the groups but not the group members. I believe the problem is the schema I'm trying to use only lists the members' uid in the repeating field and not the dn.

For instance a posixGroup might have:

memberUid
    rgauss
    anotheruser‍‍‍

Is there any way in 1.2.1 to have the groups and users sync if only the uid and not the dn is listed in the memberAttribute? Is there something analogous to the userNameFormat property that can be used somewhere to generate a dn?

Thanks.

Re: LDAP : User synchronisation failed

dems54 — Mon, 15 May 2006 13:27:59 GMT

Hello,

I have the same error problem than you have in you first post : InvalidNameException: "[LDAP: error code 34 - invalid DN]". You say that you solve this problem but how?

I think that is a problem of DN but I haven't find solution to resolve.

Can you help me?

Thank you

Nicolas

PS : Sorry for my english because I'm french

Re: LDAP : User synchronisation failed

unknown-user — Mon, 15 May 2006 23:34:53 GMT

Hi all!!!

Grome, I have the same error, Alfresco created groups perfect, but don't create users. what is the solution?

I have Active Directory on Windows2003 Enterprise Edition

This is my config file:
http://www.pixfolder.com/images/2812.zip

ERROR [org.quartz.core.JobRunShell] Job DEFAULT.ldapPeopleJobDetail threw an unhandled Exception: 
org.alfresco.repo.importer.ExportSourceImporterException: Failed to import
   at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:165)
   at org.alfresco.repo.importer.ImporterJob.execute(ImporterJob.java:36)
   at org.quartz.core.JobRunShell.run(JobRunShell.java:191)
   at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:516)
Caused by: java.lang.NullPointerException
   at org.alfresco.repo.security.authentication.ldap.LDAPPersonExportSource.generateExport(Unknown Source)
   at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:149)
   … 3 more
01:04:11,563 ERROR [org.quartz.core.ErrorLogger] Job (DEFAULT.ldapPeopleJobDetail threw an exception.
org.quartz.SchedulerException: Job threw an unhandled exception. [See nested exception: org.alfresco.repo.importer.ExportSourceImporterException: Failed to import]
   at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
   at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:516)
* Nested Exception (Underlying Cause) —————
org.alfresco.repo.importer.ExportSourceImporterException: Failed to import
   at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:165)
   at org.alfresco.repo.importer.ImporterJob.execute(ImporterJob.java:36)
   at org.quartz.core.JobRunShell.run(JobRunShell.java:191)
   at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:516)
Caused by: java.lang.NullPointerException
   at org.alfresco.repo.security.authentication.ldap.LDAPPersonExportSource.generateExport(Unknown Source)
   at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:149)
   … 3 more
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: LDAP : User synchronisation failed

andy — Tue, 16 May 2006 09:21:30 GMT

Hi

Apologies for losing the bracket there

At the moment groups only support members identified by DN.
We may support members by query in the future.

I have checked the intended use of the cmrganizationId attribute, It is meant for the users id in the organisation, usually some kind of HR number/identifier. I may have used it incorrectly in the examples.

There is a bug when importing people if attributes are missing.
This will be fixed at some point. The work around is to make sure the query selects only users that have all the information at the moment. See previous posts.

Regards

Andy

Re: LDAP : User synchronisation failed

andy — Fri, 14 Jul 2006 10:46:49 GMT

Hi

These issues are fixed in 1.3

Regards

Andy