topic AD user status Sync in Alfresco Forum

AD user status Sync

muthu_domain — Thu, 02 Aug 2018 06:48:35 GMT

Hi,we have alfresco 5.2 in our environment. we have a couple of active directory domain and which is mapped in alfresco. previously we have all the users (including disabled and active users) in the alfresco.issue 1: we have modified the person query and enabled "synchronization.allowDeletions" in l

Re: AD user status Sync

hardik1512 — Thu, 02 Aug 2018 10:39:57 GMT

Changing synchronization.synchronizeChangesOnly to false means the scheduled job for synchronization runs in Full Mode. Not sure that full mode is triggered in server startup as well.

You can try running the job by either changing the cron or using jconsole.

Re: AD user status Sync

cesarista — Thu, 02 Aug 2018 16:19:37 GMT

In fact, it is not. Full mode is not triggered in startup. A trick for doing this in the startup is doing ldap.synchronization.personQuery the same as ldap.synchronization.personDifferentialQuery

Regards.

--C.

Re: AD user status Sync

muthu_domain — Tue, 07 Aug 2018 17:12:52 GMT

Hi Cesar,

still the issue is not resolved. even i have made changes in alfresco-global.properties and ldap-ad subsystem properties with below values:

on both alfresco-global.properties and ldap-ad.properties:

synchronization.synchronizeChangesOnly=false
synchronization.allowDeletions=true

On alfresco-global.properties:

synchronization.syncWhenMissingPeopleLogIn=true
synchronization.syncOnStartup=false
#synchronization.import.cron=* * * * * ?
synchronization.import.cron=* 0/10 * * * ?
ldap.synchronization.enableProgressEstimation=true

ldap.synchronization.userAccountStatusInterpreter=ldapadUserAccountStatusInterpreter

### user account status syncronization ###
synchronization.externalUserControl=true
synchronization.externalUserControlSubsystemName=ad2,ad4
ldap.synchronization.userAccountStatusProperty=userAccountControl
ldap.synchronization.disabledAccountPropertyValue=514

after i restarted alfresco service, still i can see old users in alfresco and their user status also NOT synced. let me know is this functionality will work with alfresco with AD configuration or is there something which i'm missing.

Re: AD user status Sync

cesarista — Thu, 09 Aug 2018 18:50:46 GMT

Try with this aprox:

Technical Tips & Tricks: Best Practices for Managing User Import into Alfresco from Active Directory

Regards.

--C.