topic How to configure Alfresco to show user's logon name property from active directory? in Alfresco Forum

How to configure Alfresco to show user's logon name property from active directory?

wandss — Fri, 06 Oct 2017 13:09:08 GMT

Hello everyone! I've been working with an ECM/BPM platform as System Administrator as well as a developer. I'm new to Alfresco as well as to Alfresco Community. Before anything else. Congratulations for everyone at Alfresco and Alfresco Community, Alfresco is really an amazing software and I humbly

Re: How to configure Alfresco to show user's logon name property from active directory?

afaust — Fri, 06 Oct 2017 17:44:17 GMT

You can alter any of the default mappings between LDAP/AD and Alfresco via the configuration properties. E.g. for the user name you have

ldap.synchronization.userIdAttributeName=sAMAccountName‍

as default when using AD, which you could change. Though I would be surprsed if your AD isn't using that sAMAccountName property for the actual login name. If users can login just fine, I would say that part is working fine. What looks like not working at all is the first / last name synchronisation, which is why users are shown as "undefined undefined" (Alfresco code doesn't really expect these properties to have no value at all, and client code will just concatenate even non-values). So you might want to check

ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn‍‍

Re: How to configure Alfresco to show user's logon name property from active directory?

wandss — Fri, 06 Oct 2017 19:12:39 GMT

Hello Mr. Axel Faust‌, thanks for the help!

The problem for sure isn't with Alfresco. You got it right, is my AD that has empty values for first/last name fields

So, if I correctly understood, I can switch between AD properties in the alfresco-global.properties and instead of using:

ldap.syncronization.userFirstNameAttributeName=givenName
‍‍‍

I could use:

ldap.syncronization.userFirstNameAtributeName=displayName‍‍

Just to conclude, after changing this, It didn't affect the already synchronized LDAP/AD accounts, so I had to "force" a new synchronization.

That's a lot of information and documentation all over Alfresco community about this, but I'll enforce here what I've done.

Inside alfresco-global.properties file I've included:

synchronization.syncOnStartup=true
synchronization.synchronizeChangesOnly=false‍‍

and then restarted alfresco.

Checking the alfresco.log file, I saw that the whole user base from LDAP/AD has been synchronized hence, after checking at Alfresco's share that everything worked, I commented the above lines to let Alfresco works as it standard way and synchronize only the updates from LDAP/AD, and do this in it's own schedule dates.

Thanks again!