topic Re: Unable to sync various AD LDAP attributes in Alfresco Forum

Unable to sync various AD LDAP attributes

abhilashtvpm — Thu, 03 Aug 2017 11:43:21 GMT

I have a Windows 2016 AD environment. I have installed Alfresco and configured LDAP. The authentication works fine. I am trying to sync various attributes of LDAP. Its not working. Only the company field gets synced. Kindly help. Below is my configuration_____________________________________________

Re: Unable to sync various AD LDAP attributes

angelborroy — Mon, 07 Aug 2017 15:03:38 GMT

Only following attributes are included in synchronisation process:

<entry key="cm:userName">
	<!-- Must match the same attribute as userIdAttributeName -->
	<value>${ldap.synchronization.userIdAttributeName}</value>
	</entry>
	<entry key="cm:firstName">
	<!-- OpenLDAP: "givenName" -->
	<!-- Active Directory: "givenName" -->
	<value>${ldap.synchronization.userFirstNameAttributeName}</value>
	</entry>
	<entry key="cm:lastName">
	<!-- OpenLDAP: "sn" -->
	<!-- Active Directory: "sn" -->
	<value>${ldap.synchronization.userLastNameAttributeName}</value>
	</entry>
	<entry key="cm:email">
	<!-- OpenLDAP: "mail" -->
	<!-- Active Directory: "???" -->
	<value>${ldap.synchronization.userEmailAttributeName}</value>
	</entry>
	<entry key="cmrganization">
	<!-- OpenLDAP: "o" -->
	<!-- Active Directory: "???" -->
	<value>${ldap.synchronization.userOrganizationalIdAttributeName}</value>
	</entry>
	<!-- This deprecated property has been replaced by "cmrganization". We will use the same mapping -->
	<entry key="cmrganizationId">
	<!-- OpenLDAP: "o" -->
	<!-- Active Directory: "???" -->
	<value>${ldap.synchronization.userOrganizationalIdAttributeName}</value>

Look at https://github.com/Alfresco/community-edition-old/blob/2c1eff9953d3105e738f7b06ba9ba8a079ca4c24/projects/repository/config/alfresco/subsystems/Authentication/common-ldap-context.xml#L428

Re: Unable to sync various AD LDAP attributes

abhilashtvpm — Thu, 10 Aug 2017 07:59:07 GMT

Dear Borroy

Thank you for your kind reply. So you mean to say we cannot sync the Attributes from AD like title, telephoneNumber, mobile, thumbnailPhoto etc? Kindly advice is there any way we can sync the same with Alfresco.

Thanks in advance

Re: Unable to sync various AD LDAP attributes

angelborroy — Thu, 10 Aug 2017 08:52:16 GMT

You should extend that Spring Bean in order to add your AD properties.

Probably this would help: http://blog.seyfi.net/2010/05/adding-ad-attributes-to-alfresco-user.html

Re: Unable to sync various AD LDAP attributes

abhilashtvpm — Sun, 13 Aug 2017 00:47:24 GMT

Dear Borroy,

Thank you for the advice.. I have been trying since your reply and still no luck. I will explain what I did..

I am have added the following in opt/alfresco-community/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap-ad/ldap4/ldap4.xml file.

=========================================================================================

<property name="personAttributeMapping">
<map>
-----------------------------------

<entry key="cm:telephone">
<value>${ldap.synchronization.userCompanyTelephoneAttributeName}</value>
</entry>
<entry key="cm:jobtitle">
<value>${ldap.synchronization.userJobTitleAttributeName}</value>
</entry>
<entry key="cm:location">
<value>${ldap.synchronization.userLocationAttributeName}</value>
</entry>
<entry key="cm:mobile">
<value>${ldap.synchronization.userMobileAttributeName}</value>
</entry>
<entry key="cm:manager">
<value>${ldap.synchronization.userManagerAttributeName}</value>
</entry>

<entry key="cm:homeFolderProvider">
<null/>
</entry>
</map>
</property>

Added following values in the properties file.

ldap.synchronization.userJobTitleAttributeName=title
ldap.synchronization.userCompanyTelephoneAttributeName=telephoneNumber

Restarted the server. Still not syncing.. Please help

Re: Unable to sync various AD LDAP attributes

angelborroy — Sun, 13 Aug 2017 10:59:09 GMT

And also having "ldap4" on authentication chain?

Re: Unable to sync various AD LDAP attributes

abhilashtvpm — Mon, 14 Aug 2017 04:02:44 GMT

Yes..

authentication.chain=alfrescoNtlm1:alfrescoNtlm,ldap4:ldap-ad
synchronization.import.cron=0 0/1 * * * ?
synchronization.synchronizeChangesOnly=false

I want to populate title, mobile, telephoneNumber, thumbnailPhoto.

Re: Unable to sync various AD LDAP attributes

angelborroy — Mon, 14 Aug 2017 07:10:52 GMT

I understand you've included all Spring LDAP beans related configuration, right?

Probably this sample could help you https://github.com/magenta-aps/ldap-multi-search-base/blob/master/src/main/amp/config/alfresco/extension/subsystems/Authentication/ldap/ldap1/ldap-authentication-context.xml

Re: Unable to sync various AD LDAP attributes

abhilashtvpm — Mon, 14 Aug 2017 09:11:28 GMT

I have already gone through this link. It didn't help. It has no mention of job title, mobile number, telephone etc..

Re: Unable to sync various AD LDAP attributes

angelborroy — Mon, 14 Aug 2017 09:20:12 GMT

You can complete your task with the link, as it includes the different beans you have to override. Is not enough including just only "properties" bean (which in fact is not a bean, it's just only a property)

Re: Unable to sync various AD LDAP attributes

abhilashtvpm — Mon, 14 Aug 2017 10:14:05 GMT

Borroy,

I added the following in ldap-ad-authentication-context.xml file

<property name="jobtitle">
<value>${ldap.synchronization.userJobTitleAttributeName}</value>
</property>

After restart its throwing some errors in logs

Kindly give an example for adding a property.. for example job title... I will understand then.. I have been trying for a months time with no success..

Re: Unable to sync various AD LDAP attributes

angelborroy — Mon, 14 Aug 2017 10:57:45 GMT

I haven't tried, but this should be still working:

https://github.com/Vastra-Gotalandsregionen/oppna-program-alfresco/blob/master/repo/src/main/amp/config/alfresco/extension/subsystems/Authentication/ldap-ad/custom-ldap-context.xml#L11