topic Re: How to stop AD synchronization? in Alfresco Forum

How to stop AD synchronization?

amiclat — Wed, 31 Jul 2019 07:14:48 GMT

How to stop AD synchronization?

Re: How to stop AD synchronization?

dharmendra_pan3 — Wed, 31 Jul 2019 07:37:26 GMT

set this to global properties file to disable ldap synchronization

ldap.synchronization.active=false

Re: How to stop AD synchronization?

dharmendra_pan3 — Wed, 31 Jul 2019 07:44:45 GMT

Another way you can disable ldap schedule job to never run..

synchronization.syncOnStartup=false synchronization.import.cron=* * * * * ? 2099

Re: How to stop AD synchronization?

amiclat — Wed, 31 Jul 2019 07:57:42 GMT

Hi Dharmendra,

Thanks for you email. Where to do i change this setting (synchronization.syncOnStartup=false synchronization.import.cron=* * * * * ? 2099)?

BTW, i dont have this settings on the global properties (ldap.synchronization.active=false)

this the configuration the global properties, looks like it using passthru..

authentication.chain=passthru1assthru,alfrescoNtlm1:alfrescoNtlm,ldap1:ldap-ad,ldap2:ldap-ad,ldap3:ldap-ad

ntlm.authentication.sso.enabled=false

alfresco.authentication.allowGuestLogin=true

alfresco.authentication.authenticateCIFS=false

passthru.authentication.useLocalServer=false

passthru.authentication.domain=ONG-ONG

passthru.authentication.servers=ONG-ONG
10.25.1.9,10.25.1.7,RANKINE-HILL
10.66.1.15,SGSCA
10.191.0.10

passthru.authentication.guestAccess=true

passthru.authentication.defaultAdministratorUserNames=administrator,ypong

passthru.authentication.connectTimeout=5000

passthru.authentication.offlineCheckInterval=300

passthru.authentication.protocolOrder=NetBIOS,TCPIP

passthru.authentication.authenticateCIFS=true

passthru.authentication.authenticateFTP=false

If you set the following to true, accounts are only created when they login, rather than being imported
from LDAP all at once. The downside with having them be created at first login is that (for some
reason) you can't subsequently modify the account in Alfresco.

synchronization.authCreatePeopleOnLogin=false

looking further find this

looking into the ldap properties this properties is set to false, not sure if its related to this./

Re: How to stop AD synchronization?

amiclat — Wed, 31 Jul 2019 08:00:33 GMT

Hi Dharmendra,

Thanks for you email. Where to do i change this setting (synchronization.syncOnStartup=false synchronization.import.cron=* * * * * ? 2099)?

BTW, i dont have this settings on the global properties (ldap.synchronization.active=false)

this the configuration the global properties, looks like it using passthru..

authentication.chain=passthru1assthru,alfrescoNtlm1:alfrescoNtlm,ldap1:ldap-ad,ldap2:ldap-ad,ldap3:ldap-ad
ntlm.authentication.sso.enabled=false
alfresco.authentication.allowGuestLogin=true
alfresco.authentication.authenticateCIFS=false
passthru.authentication.useLocalServer=false
passthru.authentication.domain=ONG-ONG
passthru.authentication.servers=ONG-ONG\\10.25.1.9,10.25.1.7,RANKINE-HILL\\10.66.1.15,SGSCA\\10.191.0.10
passthru.authentication.guestAccess=true
passthru.authentication.defaultAdministratorUserNames=administrator,ypong
passthru.authentication.connectTimeout=5000
passthru.authentication.offlineCheckInterval=300
passthru.authentication.protocolOrder=NetBIOS,TCPIP
passthru.authentication.authenticateCIFS=true
passthru.authentication.authenticateFTP=false
# If you set the following to true, accounts are only created when they login, rather than being imported
# from LDAP all at once. The downside with having them be created at first login is that (for some
# reason) you can't subsequently modify the account in Alfresco.
synchronization.authCreatePeopleOnLogin=false

looking further find this

looking into the ldap properties this properties is set to false, not sure if its related to this./

Re: How to stop AD synchronization?

dharmendra_pan3 — Wed, 31 Jul 2019 08:35:40 GMT

You can add this to alfresco-globale.properties if these attributes are missing.

synchronization.syncOnStartup=false

synchronization.import.cron=* * * * * ? 2099

As per authentication.chain you have configured 3 different authentication subsystem to use.

1. passthru

2. alfrescoNtlm (this is default which alfresco uses)

3. ldap-ad ( You are 3 different LDAP-AD ,ldap1,ldap2,ldap3 )

Re: How to stop AD synchronization?

amiclat — Wed, 31 Jul 2019 08:51:48 GMT

OK, saw these properties on the ldap-ad-authentication.properties

ldap.synchronization.active=true - - - > I set these parameters to false and I restarted the service and so far the changes I've made it doesn't replicate over to alfresco.

I will monitor and keep you posted. Thanks!