topic Re: Get Immutable Properties of LDAP with java alfresco service in Alfresco Forum

Get Immutable Properties of LDAP with java alfresco service

AlfrescoZZZ — Fri, 20 Apr 2018 10:44:38 GMT

Hi, i need to retrieve the immutable properties of ldap on the users of alfresco, with some java service of alfresco:For example://GET ALL USERNAME PagingResults<PersonInfo> users = personService.getPeople("*", new ArrayList<QName>(), new ArrayList<Pair<QName,Boolean>>(), new

Re: Get Immutable Properties of LDAP with java alfresco service

afaust — Sat, 21 Apr 2018 10:51:27 GMT

There is no Java service marked as public API that will give you the set of properties considered immutable because they have been synchronized from LDAP. Since LDAP integration is done via subsystems, there can also be multiple, differing sets of properties depending on which LDAP subsystem a specific user originated from.

Technically speaking - without regards to what Alfresco declares as "public API" - you can use the UserRegistrySynchronizer component (bean name "userRegistrySynchronizer") to retrieve the mapped person properties for any specific user, using the user name as the key. That component will automatically handle the question of "where does the user originate from" and check the correct LDAP subsystem for its set of mapped properties.

Re: Get Immutable Properties of LDAP with java alfresco service

AlfrescoZZZ — Mon, 23 Apr 2018 11:26:56 GMT

Sorry to bother faust , your suggestion seems correct , but i must doing something wrong, in the java code , can you tell me if it's enough to call the method userRegistrySynchronizer.createMissingPerson(username) or i must set up some authenticator object like the CIFS?

Below a litte example of the code i'm tring to use.

The code i come up until now.

service-context.xml

<property name="userRegistrySynchronizer" ref="userRegistrySynchronizer" />

<property name="CifsAuthenticator" ref="cifsAuthenticator" />
</bean>

testLdap.java

public class testLdap extends ActionExecuterAbstractBase {
    private NodeService nodeService;
    private OwnableService ownableService;
    private PersonService personService;
    private PermissionService permissionService;
    private AuthorityService authorityService;
    private SearchService searchService;
    private EnterpriseCifsAuthenticator cifsAuthenticator;

    private UserRegistrySynchronizer userRegistrySynchronizer

    
    private static org.slf4j.Logger logger = org.slf4j.LoggerFactory.getLogger(testLdap.class);
    
    @Override
    protected void executeImpl(Action action, NodeRef actionedUponNodeRef)  {
        logger.debug("Eseguo l'azione RiparaOwnerAction");
        try
        {

.......

//GET USERNAME OF USERS ON ALFRESCO FROM LOCAL AND LDAP

String userNameToAnalize = "XXXXXXXX":

if(isLdapUser(userNameToAnalize)){

......................

}

private boolean isLDAPUser(String userNameToAnalize){              
        try
        {

// IS THIS ENOUGH TO tell IS A LDAP USER?

boolean testLdap1 = userRegistrySynchronizer.createMissingPerson(username)

//OR I MUS USE SOME MORE ELABORATE authentication like cifs ?

//NOTE: THE CODE "getAuthenticationComponent()"SEEM ABSENT ON ALFRESCO 5.2 API

        ((AbstractAuthenticationComponent) cifsAuthenticator
.getAuthenticationComponent())
.setUserRegistrySynchronizer(userRegistrySynchronizer);

        
            String userNameLdap =               cifsAuthenticator.mapUserNameToPerson(userNameToAnalize, false);
            if(userNameToAnalize.equals(userNameLdap) || testLdap1){
                logger.info("User retrieve from LDAP");
                return true;
            }else{
                logger.warn("User that does not exist in repository should not login when autoCreatePeopleOnLogin is not allowed");
                return false;
            }
        }
        catch (AuthenticationException expected)
        {
            logger.error(expected.getMessage());
            return false;
        }
    }

}

Re: Get Immutable Properties of LDAP with java alfresco service

afaust — Mon, 23 Apr 2018 12:46:00 GMT

Why are you working with the CIFS authenticator for this? Why are you trying to set the user registry synchronizer to the authentication component? Also calling createMissingPerson() will create a person object if it does not already exist - this is way more than just asking if the user is an LDAP user and if your input is not sanitised / validated before may end up creating countless invalid / redundant person nodes.

Delete all code related to usage of the CIFS authenticator. You shouldn't have to map a user name to a person in the first place...

Do not call createMissingPerson for a read-only operation - ever...

Only call the operation you need to, i.e. userRegistrySynchronizer.getPersonMappedProperties(userName)

If the user does not originate from LDAP / an external user registry, the result will be an empty set.

Re: Get Immutable Properties of LDAP with java alfresco service

AlfrescoZZZ — Mon, 23 Apr 2018 12:58:48 GMT

ty i know i have been using the bean in a wrong way.