topic Re: Synchronizing user account status with Kerberos SSO in Alfresco Forum

Synchronizing user account status with Kerberos SSO

fedorow — Thu, 16 May 2019 13:57:06 GMT

Hi!I have a problem synchronizing user account status. It worked fine with ldap authentication before I add kerberos to authentication chain.Configurations:alfresco-global.properties ### The authentication chainauthentication.chain=kerberos1:kerberos,ldap1:ldap-ad,alfinst:alfrescoNtlmntlm.authentica

Re: Synchronizing user account status with Kerberos SSO

fedorow — Tue, 21 May 2019 10:01:39 GMT

I think the problem isn't in synchronization subsystem. Some process block Account status (Disable Account check box) and I cant check it manually even with synchronization.externalUserControl=false. Without kerberos sso all works fine.

to be continue...

Re: Synchronizing user account status with Kerberos SSO

fedorow — Tue, 28 May 2019 06:07:37 GMT

It's a bug of share. User account have disabled status in database and can't login (usr:enabled = false). But admin see him with green button.