topic NTLM and LDAP - can't delete user in Alfresco Archive

NTLM and LDAP - can't delete user

craig — Sun, 16 Dec 2007 20:16:09 GMT

When I try to delete user, I get the following message in web client…Failed to delete User due to error: Not implementedcatalina.out shows (small clip)12:25:16,132 ERROR [ui.common.Utils] Failed to delete User due to error: Not implementedorg.alfresco.error.AlfrescoRuntimeException: Not implemented

Re: NTLM and LDAP - can't delete user

craig — Thu, 20 Dec 2007 17:48:53 GMT

If I execute
mv ntlm-authentication-context.xml ntlm-authentication-context.xml-hold
and then restart tomcat
I can then delete users but without ntlm-authentication-context.xml, I can't use the CIFS server

so I have to move it back and restart tomcat again.

removing all of the commented lines from ntlm-authentication-context.xml leaves…

<beans>

    <bean id="authenticationDao" class="org.alfresco.repo.security.authentication.ntlm.NullMutableAuthenticationDao" />

    <bean id="authenticationComponent" class="org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl">
<!–
–>
        <property name="useLocalServer">
            <value>false</value>
        </property>
<!–
–>
        <property name="servers">
            <value>MY_OBSCURED_DOMAIN\MY_PDC</value>
        </property>
        <property name="personService">
            <ref bean="personService" />
        </property>
        <property name="nodeService">
            <ref bean="nodeService" />
        </property>
        <property name="transactionService">
            <ref bean="transactionComponent" />
        </property>
        <property name="guestAccess">
            <value>true</value>
        </property>
    </bean>

</beans>

Re: NTLM and LDAP - can't delete user

andy — Wed, 16 Jan 2008 11:40:21 GMT

Hi

The UI tries to delete the person from Alfresco and the user from the authentication system. If the authentication system is Alfresco this is fine. If authentication is external to Alfresco this can fail unless there is an appropriate DAO.

You could configure the DAO as
org.alfresco.repo.security.authentication.DefaultMutableAuthenticationDao which can then be configured to allow some operations to pass through without rejection (such as silently ignoring a delete of an authentication from LDAP or NTLM). See the default LDAP authentication configuration.
The user will remain in NTLM.

Andy

Re: NTLM and LDAP - can't delete user

craig — Thu, 17 Jan 2008 23:25:45 GMT

You could configure the DAO as
org.alfresco.repo.security.authentication.DefaultMutableAuthenticationDao which can then be configured to allow some operations to pass through without rejection (such as silently ignoring a delete of an authentication from LDAP or NTLM). See the default LDAP authentication configuration.
The user will remain in NTLM.

ldap-authentication-context.xml has…

    <bean name="authenticationDao" class="org.alfresco.repo.security.authentication.DefaultMutableAuthenticationDao" >
        <property name="allowDeleteUser">
            <value>true</value>
        </property>
    </bean>
‍‍‍‍‍‍

but I can't delete a user that no onger exists in LDAP (and thus would never be re-imported) and isn't available in NTLM because he isn't available in LDAP.

Craig