topic Re: Active Directory import users and groups in Alfresco Archive

Active Directory import users and groups

daniele001 — Tue, 02 Oct 2007 14:24:27 GMT

HiI'm working to use our AD to import in Alfresco 2.1 users and grups I'll use in my organization.While AD groups are correctly imported with correcte members, I've problems to import users.I'm able to import just 1000 names, but all the others are missing.I'm also one of the missing, but I can logi

Re: Active Directory import users and groups

andy — Tue, 16 Oct 2007 15:07:26 GMT

Hi

You will need to up the page size that AD supports at the moment.

Andy

Re: Active Directory import users and groups

daniele001 — Wed, 17 Oct 2007 09:37:51 GMT

Thank you Andy for your feedback

I've no access to the AD domain controller server, so I cannot change nothing over there.

I tried to reduce the scopes and run the application several times to import users, but this is a workaround and doesn't guarantee me to have new users added.

Other option is to run indipendent and sequential import tasks. This will reduce the massive requests to the AD box. I don't know if this is possible…. for sure should be a workaround and not a permanent solution….

Thanks in advance for your help and support

Regards

Daniele

Re: Active Directory import users and groups

andy — Wed, 17 Oct 2007 13:05:56 GMT

Hi

You can run many import jobs. So you could run sync jobs based on alphabetical ranges of user id, or surname etc (select in the LDAP query). These jobs would not have to be sequential. This is probably the only work around in your situation. LDAP paging support is on the list - so far it has not made it to the top.

Andy

Re: Active Directory import users and groups

daniele001 — Wed, 17 Oct 2007 13:20:34 GMT

Hi

You can run many import jobs. So you could run sync jobs based on alphabetical ranges of user id, or surname etc (select in the LDAP query). These jobs would not have to be sequential. This is probably the only work around in your situation. LDAP paging support is on the list - so far it has not made it to the top.

Andy

Thank you Andy, but where I can specify the different jobs? in ldap-authentication-context.xml I've to create several sections of
<bean id="ldapPeopleExportSource" class="org.alfresco.repo.security.authentication.ldap.LDAPPersonExportSource">

to handle the different searches? and how setting the schedule?

sorry for my request that may sound like a little bizzare, but I'm really new in kind of task.

Thanks again

Daniele

Re: Active Directory import users and groups

andy — Thu, 18 Oct 2007 09:36:17 GMT

Hi

Yes you need to create

<bean id="ldapGroupExportSource_1" …… />

and wire it up to a new

<bean id="ldapPeopleImport_1" …./>

and then wire this up to a new

<bean id="ldapPeopleTrigger" class="org.alfresco.util.CronTriggerBean" …/>

For each subsection of users.

You can do this as many times as you like and define new settings for each ldapPeopleExportSource_* bean. You could use abstract beans for common properties - see the examples in the config xml with abstrct="true" that do not define class="…")

Andy