topic Re: Unable to claim a task when used LDAP identitiy management in Alfresco Archive

Unable to claim a task when used LDAP identitiy management

ganeshr — Mon, 15 Oct 2012 07:57:49 GMT

I have integrated identitiy management succussfully and able to login using ldap and see the ldap groups in Queued tab in Activiti explorer, however claim button is not showing when task is opened in Queued tab and even complete task button is disabled.I have set group type as 'assignment' for ldap

Re: Unable to claim a task when used LDAP identitiy management

frederikherema1 — Mon, 15 Oct 2012 08:02:35 GMT

Conditions for showing the buttons are the following:
- Logged in user is not assignee
- User is a candidate for the given task (member of candidate group OR candidateUser)

Check if the method that get's groups for users works well in your custom identityManagemenr-t…


 protected void initClaimButton(HorizontalLayout layout) {
    if(!isCurrentUserAssignee() && canUserClaimTask()) {


return taskService.createTaskQuery()
     .taskCandidateUser(ExplorerApp.get().getLoggedInUser().getId())
     .taskId(task.getId())
     .count() == 1;

Re: Unable to claim a task when used LDAP identitiy management

ganeshr — Mon, 15 Oct 2012 08:53:22 GMT

for user task I have assigned activiti:candidateGroups = ldapgroupX and logged into activiti explorer with user who is member of that group.
In Queued Tab able to see the ldapgroupX(1) as one task, and when opened that group, task content is showing, only thing is claim and complete actions are not working.

Re: Unable to claim a task when used LDAP identitiy management

frederikherema1 — Mon, 15 Oct 2012 08:59:37 GMT

Can you debug the tomcat instance, and see what happens around the lines stated in my previous post? (org.activiti.explorer.ui.task.TaskDetailPanel line 177)

Re: Unable to claim a task when used LDAP identitiy management

ganeshr — Mon, 15 Oct 2012 09:30:56 GMT

canUserClaimTask() is returning false. But the user is a member of ldapGroupX.

Re: Unable to claim a task when used LDAP identitiy management

frederikherema1 — Mon, 15 Oct 2012 09:38:47 GMT

What about the group-manager, what does he return when this is called (TaskQueryImpl):


 protected List<String> getGroupsForCandidateUser(String candidateUser) {
    // TODO: Discuss about removing this feature? Or document it properly and maybe recommend to not use it
    // and explain alternatives
    List<Group> groups = Context
      .getCommandContext()
      .getGroupManager()
      .findGroupsByUser(candidateUser);
    List<String> groupIds = new ArrayList<String>();
    for (Group group : groups) {
      groupIds.add(group.getId());
    }
    return groupIds;
  }

That is the direction you should be looking, failing to claim is a result of the modification of the Identity-management, so you should double-check everything..

Re: Unable to claim a task when used LDAP identitiy management

ganeshr — Mon, 15 Oct 2012 10:03:54 GMT

Thanks for helping , now i am able to claim the task but after claiming the task task page is not showing any content and there is no complete task button. In tomcat console i could see the following error log…
org.activiti.engine.ActivitiException: LDAP user manager doesn't support finding a user by id
        at org.uprr.bpel.workflow.ldap.LDAPUserManager.findUserById(LDAPUserManager.java:50)
        at org.activiti.engine.impl.cmd.GetUserPictureCmd.execute(GetUserPictureCmd.java:41)
        at org.activiti.engine.impl.cmd.GetUserPictureCmd.execute(GetUserPictureCmd.java:28)
        at org.activiti.engine.impl.interceptor.CommandExecutorImpl.execute(CommandExecutorImpl.java:24)
        at org.activiti.engine.impl.interceptor.CommandContextInterceptor.execute(CommandContextInterceptor.java:42)
        at org.activiti.spring.SpringTransactionInterceptor$1.doInTransaction(SpringTransactionInterceptor.java:42)
        at org.springframework.transaction.support.TransactionTemplate.execute(TransactionTemplate.java:130)
        at org.activiti.spring.SpringTransactionInterceptor.execute(SpringTransactionInterceptor.java:40)
        at org.activiti.engine.impl.interceptor.LogInterceptor.execute(LogInterceptor.java:33)
        at org.activiti.engine.impl.IdentityServiceImpl.getUserPicture(IdentityServiceImpl.java:102)
        at org.activiti.explorer.ui.task.UserDetailsComponent.addUserPicture(UserDetailsComponent.java:85)

   Do i need to provide an option for finding user id in LDAP user manager class?

Re: Unable to claim a task when used LDAP identitiy management

ganeshr — Mon, 15 Oct 2012 13:23:29 GMT

Thanks..it is working now..

Re: Unable to claim a task when used LDAP identitiy management

frederikherema1 — Mon, 15 Oct 2012 13:28:29 GMT

Great to hear that! Are you willing to share your LDAP-implementation, or perhaps a how-to blog? I've come across many people wanting to use LDAP underneath activiti, so might be interesting to have somewhere on github, if you're willing to share this with the world…

Re: Unable to claim a task when used LDAP identitiy management

ganeshr — Mon, 15 Oct 2012 13:53:26 GMT

for more info on managing user identity in activiti engine..http://aganeshreddy.wordpress.com/2012/10/17/managing-user-identity-using-custom-ldap-in-activiti-engine/

Re: Unable to claim a task when used LDAP identitiy management

m2spring — Tue, 18 Dec 2012 00:01:40 GMT

for more info on managing user identity in activiti engine..http://aganeshreddy.wordpress.com/2012/10/17/managing-user-identity-using-custom-ldap-in-activiti-engine/

This blog entry seems to be a copy/paste from the examples from the Activiti in Action book.

The source code of these examples can be better found here:
http://code.google.com/p/activitiinaction/source/browse/trunk/bpmn-examples/src/main/java/org/bpmnwithactiviti/chapter10/ldap/?r=205

-Max