topic Re: Alfresco 5.2 synchronization in Alfresco Forum

Alfresco 5.2 synchronization

amarques — Wed, 31 May 2017 07:02:28 GMT

Hi,i am trying to sync with active directory, but keep geting and error on log.""[org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [DefaultScheduler_Worker-5] Synchronization aborted due to errororg.alfresco.error.AlfrescoRuntimeException: 04310025 Error during LDAP Search. Reason:c

Re: Alfresco 5.2 synchronization

mrks_js1 — Wed, 31 May 2017 07:44:30 GMT

have your replaced "mycompany" with your values? from your pasted properties i can not see "ldap.authentication.java.naming.provider.url" which probably still contains the sample value

Re: Alfresco 5.2 synchronization

amarques — Wed, 31 May 2017 07:54:15 GMT

"mycompany" and "myadmin" are replaced values i just used here, on the file they are correct.

the ldap.authentication.java.naming.provider.url is also there

ldap.authentication.allowGuestLogin=false
ldap.authentication.active=true

ldap.authentication.java.naming.security.authentication=simple

ldap.authentication.java.naming.referral=follow

ldap.authentication.userNameFormat=%s@mycompany.com

ldap.authentication.java.naming.provider.url=ldap://myad:389

thanks

Re: Alfresco 5.2 synchronization

amarques — Wed, 31 May 2017 08:28:00 GMT

Also forgot to mention, i can loggin with an AD user and it creates the account on startup.

but the remaining vlaues are not synched from AD, for example, last name, mail... etc etc

Re: Alfresco 5.2 synchronization

mrks_js1 — Wed, 31 May 2017 08:29:16 GMT

can you reach the host (ping) and is the port open?

where is the alfresco global properties file (path and filename).

Re: Alfresco 5.2 synchronization

amarques — Wed, 31 May 2017 09:16:01 GMT

yes, i can reach it, no problem. both with ping to ip and telnet to ip port

Re: Alfresco 5.2 synchronization

mrks_js1 — Wed, 31 May 2017 11:41:31 GMT

can you post the full trace of the error?

and please try to escape "=" here as well:
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(!(modifyTimestamp<\={0})))

Re: Alfresco 5.2 synchronization

amarques — Wed, 31 May 2017 12:11:57 GMT

changed the line to add the \

ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(!(modifyTimestamp<={0})))

i believe it was this you mentioned.

and here is the full trace of the error :

2017-05-31 13:05:28,323 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'Synchronization' subsystem, ID: [Synchronization, default]
2017-05-31 13:05:28,698 INFO [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronizing users and groups with user registry 'ldap1'
2017-05-31 13:05:28,792 INFO [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Retrieving all groups from user registry 'ldap1'
2017-05-31 13:05:49,980 ERROR [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization aborted due to error
org.alfresco.error.AlfrescoRuntimeException: 04310016 Error during LDAP Search. Reason:company.com:389
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1326)
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.getGroups(LDAPUserRegistry.java:711)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.syncWithPlugin(ChainingUserRegistrySynchronizer.java:996)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.synchronizeInternal(ChainingUserRegistrySynchronizer.java:742)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.access$16(ChainingUserRegistrySynchronizer.java:474)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer$7.doWork(ChainingUserRegistrySynchronizer.java:2141)
   at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:555)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onBootstrap(ChainingUserRegistrySynchronizer.java:2135)
   at org.springframework.extensions.surf.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:56)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onApplicationEvent(ChainingUserRegistrySynchronizer.java:2498)
   at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:96)
   at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ChildApplicationContext.publishEvent(ChildApplicationContextFactory.java:569)
   at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:954)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:482)
   at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ApplicationContextState.start(ChildApplicationContextFactory.java:824)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.start(AbstractPropertyBackedBean.java:1098)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.onApplicationEvent(AbstractPropertyBackedBean.java:637)
   at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEventInternal(SafeApplicationEventMulticaster.java:214)
   at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEvent(SafeApplicationEventMulticaster.java:185)
   at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:334)
   at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:954)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:482)
   at org.springframework.web.context.ContextLoader.configureAndRefreshWebApplicationContext(ContextLoader.java:410)
   at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:306)
   at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:112)
   at org.alfresco.web.app.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:70)
   at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:5016)
   at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5524)
   at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
   at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
   at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)
   at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:649)
   at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:672)
   at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1859)
   at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)
   at java.util.concurrent.FutureTask.run(Unknown Source)
   at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
   at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
   at java.lang.Thread.run(Unknown Source)
Caused by: javax.naming.CommunicationException: company.com:389 [Root exception is java.net.ConnectException: Connection timed out: connect]
   at com.sun.jndi.ldap.LdapReferralContext.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapReferralException.getReferralContext(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.searchAux(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source)
   at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(Unknown Source)
   at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
   at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
   at javax.naming.directory.InitialDirContext.search(Unknown Source)
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1305)
   ... 38 more
Caused by: java.net.ConnectException: Connection timed out: connect
   at java.net.DualStackPlainSocketImpl.connect0(Native Method)
   at java.net.DualStackPlainSocketImpl.socketConnect(Unknown Source)
   at java.net.AbstractPlainSocketImpl.doConnect(Unknown Source)
   at java.net.AbstractPlainSocketImpl.connectToAddress(Unknown Source)
   at java.net.AbstractPlainSocketImpl.connect(Unknown Source)
   at java.net.PlainSocketImpl.connect(Unknown Source)
   at java.net.SocksSocketImpl.connect(Unknown Source)
   at java.net.Socket.connect(Unknown Source)
   at java.net.Socket.connect(Unknown Source)
   at java.net.Socket.<init>(Unknown Source)
   at java.net.Socket.<init>(Unknown Source)
   at com.sun.jndi.ldap.Connection.createSocket(Unknown Source)
   at com.sun.jndi.ldap.Connection.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapClient.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapClientFactory.createPooledConnection(Unknown Source)
   at com.sun.jndi.ldap.pool.Connections.<init>(Unknown Source)
   at com.sun.jndi.ldap.pool.Pool.getPooledConnection(Unknown Source)
   at com.sun.jndi.ldap.LdapPoolManager.getLdapClient(Unknown Source)
   at com.sun.jndi.ldap.LdapClient.getInstance(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.connect(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(Unknown Source)
   at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(Unknown Source)
   at com.sun.jndi.url.ldap.ldapURLContextFactory.getObjectInstance(Unknown Source)
   at javax.naming.spi.NamingManager.getURLObject(Unknown Source)
   at javax.naming.spi.NamingManager.processURL(Unknown Source)
   at javax.naming.spi.NamingManager.processURLAddrs(Unknown Source)
   at javax.naming.spi.NamingManager.getObjectInstance(Unknown Source)
   ... 47 more
2017-05-31 13:05:50,089 ERROR [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization aborted due to error
org.alfresco.error.AlfrescoRuntimeException: 04310016 Error during LDAP Search. Reason:company.com:389
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1326)
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.getGroups(LDAPUserRegistry.java:711)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.syncWithPlugin(ChainingUserRegistrySynchronizer.java:996)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.synchronizeInternal(ChainingUserRegistrySynchronizer.java:742)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.access$16(ChainingUserRegistrySynchronizer.java:474)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer$7.doWork(ChainingUserRegistrySynchronizer.java:2141)
   at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:555)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onBootstrap(ChainingUserRegistrySynchronizer.java:2135)
   at org.springframework.extensions.surf.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:56)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onApplicationEvent(ChainingUserRegistrySynchronizer.java:2498)
   at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:96)
   at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ChildApplicationContext.publishEvent(ChildApplicationContextFactory.java:569)
   at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:954)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:482)
   at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ApplicationContextState.start(ChildApplicationContextFactory.java:824)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.start(AbstractPropertyBackedBean.java:1098)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.onApplicationEvent(AbstractPropertyBackedBean.java:637)
   at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEventInternal(SafeApplicationEventMulticaster.java:214)
   at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEvent(SafeApplicationEventMulticaster.java:185)
   at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:334)
   at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:954)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:482)
   at org.springframework.web.context.ContextLoader.configureAndRefreshWebApplicationContext(ContextLoader.java:410)
   at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:306)
   at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:112)
   at org.alfresco.web.app.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:70)
   at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:5016)
   at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5524)
   at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
   at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
   at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)
   at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:649)
   at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:672)
   at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1859)
   at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)
   at java.util.concurrent.FutureTask.run(Unknown Source)
   at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
   at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
   at java.lang.Thread.run(Unknown Source)
Caused by: javax.naming.CommunicationException: company.com:389 [Root exception is java.net.ConnectException: Connection timed out: connect]
   at com.sun.jndi.ldap.LdapReferralContext.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapReferralException.getReferralContext(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.searchAux(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source)
   at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(Unknown Source)
   at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
   at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
   at javax.naming.directory.InitialDirContext.search(Unknown Source)
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1305)
   ... 38 more
Caused by: java.net.ConnectException: Connection timed out: connect
   at java.net.DualStackPlainSocketImpl.connect0(Native Method)
   at java.net.DualStackPlainSocketImpl.socketConnect(Unknown Source)
   at java.net.AbstractPlainSocketImpl.doConnect(Unknown Source)
   at java.net.AbstractPlainSocketImpl.connectToAddress(Unknown Source)
   at java.net.AbstractPlainSocketImpl.connect(Unknown Source)
   at java.net.PlainSocketImpl.connect(Unknown Source)
   at java.net.SocksSocketImpl.connect(Unknown Source)
   at java.net.Socket.connect(Unknown Source)
   at java.net.Socket.connect(Unknown Source)
   at java.net.Socket.<init>(Unknown Source)
   at java.net.Socket.<init>(Unknown Source)
   at com.sun.jndi.ldap.Connection.createSocket(Unknown Source)
   at com.sun.jndi.ldap.Connection.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapClient.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapClientFactory.createPooledConnection(Unknown Source)
   at com.sun.jndi.ldap.pool.Connections.<init>(Unknown Source)
   at com.sun.jndi.ldap.pool.Pool.getPooledConnection(Unknown Source)
   at com.sun.jndi.ldap.LdapPoolManager.getLdapClient(Unknown Source)
   at com.sun.jndi.ldap.LdapClient.getInstance(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.connect(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(Unknown Source)
   at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(Unknown Source)
   at com.sun.jndi.url.ldap.ldapURLContextFactory.getObjectInstance(Unknown Source)
   at javax.naming.spi.NamingManager.getURLObject(Unknown Source)
   at javax.naming.spi.NamingManager.processURL(Unknown Source)
   at javax.naming.spi.NamingManager.processURLAddrs(Unknown Source)
   at javax.naming.spi.NamingManager.getObjectInstance(Unknown Source)
   ... 47 more
2017-05-31 13:05:50,105 WARN [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Failed initial synchronize with user registries
org.alfresco.error.AlfrescoRuntimeException: 04310016 Error during LDAP Search. Reason:company.com:389
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1326)
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.getGroups(LDAPUserRegistry.java:711)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.syncWithPlugin(ChainingUserRegistrySynchronizer.java:996)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.synchronizeInternal(ChainingUserRegistrySynchronizer.java:742)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.access$16(ChainingUserRegistrySynchronizer.java:474)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer$7.doWork(ChainingUserRegistrySynchronizer.java:2141)
   at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:555)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onBootstrap(ChainingUserRegistrySynchronizer.java:2135)
   at org.springframework.extensions.surf.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:56)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onApplicationEvent(ChainingUserRegistrySynchronizer.java:2498)
   at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:96)
   at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ChildApplicationContext.publishEvent(ChildApplicationContextFactory.java:569)
   at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:954)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:482)
   at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ApplicationContextState.start(ChildApplicationContextFactory.java:824)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.start(AbstractPropertyBackedBean.java:1098)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.onApplicationEvent(AbstractPropertyBackedBean.java:637)
   at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEventInternal(SafeApplicationEventMulticaster.java:214)
   at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEvent(SafeApplicationEventMulticaster.java:185)
   at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:334)
   at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:954)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:482)
   at org.springframework.web.context.ContextLoader.configureAndRefreshWebApplicationContext(ContextLoader.java:410)
   at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:306)
   at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:112)
   at org.alfresco.web.app.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:70)
   at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:5016)
   at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5524)
   at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
   at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
   at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)
   at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:649)
   at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:672)
   at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1859)
   at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)
   at java.util.concurrent.FutureTask.run(Unknown Source)
   at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
   at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
   at java.lang.Thread.run(Unknown Source)
Caused by: javax.naming.CommunicationException: company.com:389 [Root exception is java.net.ConnectException: Connection timed out: connect]
   at com.sun.jndi.ldap.LdapReferralContext.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapReferralException.getReferralContext(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.searchAux(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source)
   at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(Unknown Source)
   at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
   at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
   at javax.naming.directory.InitialDirContext.search(Unknown Source)
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1305)
   ... 38 more
Caused by: java.net.ConnectException: Connection timed out: connect
   at java.net.DualStackPlainSocketImpl.connect0(Native Method)
   at java.net.DualStackPlainSocketImpl.socketConnect(Unknown Source)
   at java.net.AbstractPlainSocketImpl.doConnect(Unknown Source)
   at java.net.AbstractPlainSocketImpl.connectToAddress(Unknown Source)
   at java.net.AbstractPlainSocketImpl.connect(Unknown Source)
   at java.net.PlainSocketImpl.connect(Unknown Source)
   at java.net.SocksSocketImpl.connect(Unknown Source)
   at java.net.Socket.connect(Unknown Source)
   at java.net.Socket.connect(Unknown Source)
   at java.net.Socket.<init>(Unknown Source)
   at java.net.Socket.<init>(Unknown Source)
   at com.sun.jndi.ldap.Connection.createSocket(Unknown Source)
   at com.sun.jndi.ldap.Connection.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapClient.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapClientFactory.createPooledConnection(Unknown Source)
   at com.sun.jndi.ldap.pool.Connections.<init>(Unknown Source)
   at com.sun.jndi.ldap.pool.Pool.getPooledConnection(Unknown Source)
   at com.sun.jndi.ldap.LdapPoolManager.getLdapClient(Unknown Source)
   at com.sun.jndi.ldap.LdapClient.getInstance(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.connect(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(Unknown Source)
   at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(Unknown Source)
   at com.sun.jndi.url.ldap.ldapURLContextFactory.getObjectInstance(Unknown Source)
   at javax.naming.spi.NamingManager.getURLObject(Unknown Source)
   at javax.naming.spi.NamingManager.processURL(Unknown Source)
   at javax.naming.spi.NamingManager.processURLAddrs(Unknown Source)
   at javax.naming.spi.NamingManager.getObjectInstance(Unknown Source)
   ... 47 more
2017-05-31 13:05:50,105 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'Synchronization' subsystem, ID: [Synchronization, default] complete

Re: Alfresco 5.2 synchronization

mrks_js1 — Wed, 31 May 2017 13:25:10 GMT

so either you have not replaced "company.com:389" in your properties file or your ldap simply is not reachable from the machine where alfresco is installed. in which file did you set these properties?

Re: Alfresco 5.2 synchronization

amarques — Wed, 31 May 2017 13:33:19 GMT

alfresco-global.properties . The server answers to ping and telnet on that port.

let's assume me my admin is rabbit and password is carrot. my domain is free.priv

ldap.synchronization.java.naming.security.principal=rabbit@free.priv

ldap.synchronization.java.naming.security.credentials=carrot

If i logon with a user from AD it creates the user account , it simply doesn't get the remaining info i want and gives that error.

Re: Alfresco 5.2 synchronization

michael_s1 — Thu, 01 Jun 2017 08:07:19 GMT

Two suggestions.

1. have you tried to follow Example: authentication and synchronization with one ldap-ad subsystem | Alfresco Documentation ?

2. Does your security principal have access to read all properties in LDAP? You should run a test to make sure that the user can query LDAP properly using a test tool.

What LDAP system/server are you using?

I note you have used "ldap.synchronization.java.naming.security.authentication=simple". This is not recommended.

I am not sure why you have used all the settings that you have. The example provide in point 1 should allow you to synchronise.

I have set up the authentication chain as:

authentication.chain=alfinst:alfrescoNtlm,passthru1assthru,ad1:ldap-ad

The passthru allows users to open office documents without prompting for credentials and therefore I also set ldap.authentication.active=false

The other point I thought looked odd is the domain qualifications. I use ou=People,dc=xyz,dc=abc,dc=mycompany,dc=com as per example.

Re: Alfresco 5.2 synchronization

amarques — Fri, 02 Jun 2017 08:44:51 GMT

1. i have tried that sugestion and all sort of stuff i found while browsing for hints. But will try agian from the beggining.

2. the user i am using as all the properties on ldap ( after i do it ok i will make a new one just for alfresco )

i am using the Active Directory Users and Computers Version: 5.2.3790.3959 ona windows server 2003 r2 x64

Re: Alfresco 5.2 synchronization

michael_s1 — Sat, 03 Jun 2017 08:29:37 GMT

OK, let us know how you go. I am using Windows Active Directory and have got it working seamlessly. Happy to help if you need more information.

Please also refer to https://technet.microsoft.com/en-us/library/aa996205(v=exchg.65).aspx

Use the tool LDP included with Windows server 2003. Follow the instructions in the link above to validate your ldap user and password and access.

Re: Alfresco 5.2 synchronization

mehe — Sat, 03 Jun 2017 09:22:38 GMT

Hi Antonio,

I use the ldap client "apache directory studio" to test my ldap connection and queries.

My ldap configuration differs in

ldap.authentication.java.naming.provider.url=ldap://myad:389

I had to use the fully qualified name in the URL ldap://myad.mydom:389

Created an extra AD user for ldap sync "ldap.alfresco" which is referred to as

ldap.sychronization.java.naming.security.principal=ldap.alfresco@mydom

The user has be in the according groups if your AD is ACLed in some way. Normally it just has to be a Domain user.

Here are the only values I set (changed to example domain dom.local, domaincontroller server is dc).

I use searchbase dc=dom,dc=local because some users are in a special ou and wanted to import only users with email address - you should adapt this

DC is windows 2012, alfresco (5.2.0 r135134-b14) uses ubuntu 16.04.2 LTS

ldap.authentication.allowGuestLogin=false
ldap.authentication.userNameFormat=%s@dom.local
ldap.authentication.java.naming.provider.url=ldap://dc.dom.local:389
ldap.authentication.defaultAdministratorUserNames=Administrator
ldap.synchronization.java.naming.security.principal=ldap.alfresco@dom.local
ldap.synchronization.java.naming.security.credentials=XXXXXXXX

ldap.synchronization.groupSearchBase=dc=dom,dc=local
ldap.synchronization.userSearchBase=dc=dom,dc=local

#group Type = global groups
ldap.synchronization.groupQuery=(&((objectClass=group)(groupType:1.2.840.113556.1.4.803:=2)))
ldap.synchronization.groupDifferentialQuery=(&((objectClass=group)(groupType:1.2.840.113556.1.4.803:=2)))
#only enabled users with mail address
ldap.synchronisation.personQuery=(&((objectClass=person)(userAccountControl:1.2.840.113556.1.4.803:=512)(mail=*@*)))
ldap.synchronisation.personDifferentialQuery=(&((objectClass=person)(userAccountControl:1.2.840.113556.1.4.803:=512)(mail=*@*)))

### Sync Settings ###
synchronization.synchronizeChangesOnly=false
synchronization.syncOnStartup=true
synchronization.allowDeletions=true
synchronization.syncWhenMissingPeopleLogIn=true
synchronization.import.cron=0 0 * * * ?‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

This is the setup of my test system. So differential queries are the same as the full queries...

Re: Alfresco 5.2 synchronization

amarques — Tue, 06 Jun 2017 10:33:19 GMT

Got it working with pass- trough. Thanks all for the help