topic Re: Multiple non-chained ADs - local group merge possible ? in Alfresco Forum

Multiple non-chained ADs - local group merge possible ?

spam — Tue, 12 Mar 2019 17:03:37 GMT

Hi,I want to ask if it is possible to configure multiple subsystems (ADs) not chained together in a way that groups from ADs will be merged in alfresco to respective groups.Example :AD01 - domain.com (ldap.synchronization.groupSearchBase=OU=Afresco,OU=Security groups,DC=domain,DC=com)AD02 - domain2.

Re: Multiple non-chained ADs - local group merge possible ?

afaust — Wed, 13 Mar 2019 18:38:52 GMT

The Alfresco synchronisation does not allow merging users of identically named groups from different user directories. This would disrupt the correct operation of the synchronisation components which always inspect individual user directories in isolation, without some significant re-implementation / customisation of the core synchronisation code of Alfresco. It could technically/logically be done with proper source tracking / differentiation logic, but not without any changes to Alfresco core code.

Re: Multiple non-chained ADs - local group merge possible ?

alxgomz — Thu, 14 Mar 2019 09:24:39 GMT

As Axel mentionned that's not something Alfresco can do as it is basically LDAP manipulation.

If you don't feel like implementing it at the Alfresco level, you can use either an LDAP proxy (see openLDAP back-ldap or back-meta: OpenLDAP Software 2.4 Administrator's Guide: Backends ) Or you can create a aggregating LDAP directory using tools like LDAP Synchronization Connector [LSC]

There are probably others but those are the one I know are working quite nicely.

You would then have to configure Alfresco to sync the proxy/aggregated directory