topic Re: Space problem in AD Path in Alfresco Forum

Space problem in AD Path

mdubois — Tue, 04 Jun 2019 12:51:03 GMT

Hi,I need to establish a LDAP authentification but when I want my AD groups, i don't recover them but for users it's OK.I think my problem is the space in my line, see it :ldap.synchronization.groupSearchBase=OU=Groupes d'accès,OU=RAPIDO,OU=CCAR,OU=RAPIDO_VDL, DC=rapido53,DC=comHow can I replace thi

Re: Space problem in AD Path

heiko_robert — Wed, 05 Jun 2019 10:14:41 GMT

Escape the space with a backslash?

Re: Space problem in AD Path

mdubois — Wed, 05 Jun 2019 11:32:46 GMT

Yes i tried :

ldap.synchronization.groupSearchBase=OU=Groupes \d'accès,OU=RAPIDO,OU=CCAR,OU=RAPIDO_VDL, DC=rapido53,DC=com

ldap.synchronization.groupSearchBase=OU=Groupes\d'accès,OU=RAPIDO,OU=CCAR,OU=RAPIDO_VDL, DC=rapido53,DC=com

Re: Space problem in AD Path

heiko_robert — Wed, 05 Jun 2019 13:13:49 GMT

escape character is a prefix notation. ' ' should be used as '\ '

Re: Space problem in AD Path

mdubois — Wed, 05 Jun 2019 13:21:44 GMT

So OU=Groupes\d'accès is good ?

did my ' un d'accès can be a problem too ?

Re: Space problem in AD Path

mdubois — Wed, 05 Jun 2019 14:40:30 GMT

I just try with an other OU

ldap.synchronization.groupSearchBase=OU=Alfresco,DC=rapido53,DC=com

With one group but when I go in admin tools et browse group, i don't have group....

This is all line about authentification in my file :

authentication.chain=alfinst:alfrescoNtlm,ldap1:ldap
ldap.authentification.active=true
ntlm.authentication.sso.enabled=false
ldap.synchronization.active=false

ldap.authentication.userNameFormat=%s@domain.com
ldap.authentication.java.naming.provider.url=ldap://SRVDC01.domain.com
ldap.synchronization.userSearchBase=ou=User,dc=domain,dc=com
ldap.synchronization.groupSearchBase=ou=Alfresco,dc=domain,dc=com

ldap.synchronization.java.naming.security.principal=test@domain.com
ldap.synchronization.java.naming.security.credentials=SECRET
ldap.authentication.allowGuestLogin=false
ldap.authentication.defaultAdministratorUserNames=Administrator,alfresco
ldap.synchronization.groupQuery=(objectclass\=group)
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(whenChanged<\={0})))

Re: Space problem in AD Path

cesarista — Wed, 05 Jun 2019 18:36:58 GMT

Hi:

Try adding this logger in custom-log4j.properties in extension directory to debug your ldap sync

log4j.logger.org.alfresco.repo.security.sync=debug

And then resync. Some tips are here:

https://www.zylk.net/en/web-2-0/blog/-/blogs/how-to-sync-ldap-users-and-groups-in-alfresco-ecm

I also recommend you to check the ldap queries with Apache Directory Studio, for example.

Kind regards.

--C.

Re: Space problem in AD Path

mdubois — Thu, 06 Jun 2019 07:36:33 GMT

I will be honest I begin to be lost

I add your line but i really don't understand if i got all my user (they just need 1 connection to appear in my user list) why group don't appear in my alfresco group ? did I need to "connect" the group to appear or my line is not good ?

I install Apache directory studio and it work, i can connect to my AD, How it can help me ?

Re: Space problem in AD Path

cesarista — Fri, 07 Jun 2019 19:02:06 GMT

Hi Mathis:

- With the debug option, you can see all the details of the ldap sync in Alfresco. It is specially useful when getting problems with a given path or search base, for users and/or groups.

- With Apache Directory Studio you may check and debug the ldap queries for groups and users. So you can see the results that they should be obtained in group syncronization. If ldap query in Apache Directory Studio is not giving the group that you mention, it never will be synced in Alfresco. Browsing with Apache Directory Studio, you can check too the full config of user and group objects of your LDAP/AD.

Kind regards.

--C.

Re: Space problem in AD Path

mdubois — Tue, 11 Jun 2019 12:22:14 GMT

Ok so know it work with a classic path but when i use path with ou=Groupes d'accès, it didn't work cause of the space

Re: Space problem in AD Path

mdubois — Tue, 11 Jun 2019 12:57:47 GMT

How did I use debug option, where can i see all the details if my path is good or not

Re: Space problem in AD Path

fedorow — Tue, 11 Jun 2019 13:16:16 GMT

No, it's not good. Did you try like this: ou=Groupes\ d'accès ?

Re: Space problem in AD Path

mdubois — Tue, 11 Jun 2019 13:36:38 GMT

Yes, i tried it and it didn't work.

I think " ' " and " è " block it too

Re: Space problem in AD Path

cesarista — Wed, 12 Jun 2019 19:49:19 GMT

Hi:

Probably you need to put this ou in UTF8 in the configuration files. Something like ou=Groupes d'acc\u00e8s

Regards.

--C.

P.S: Avoid to use these accented names in such basic services, this may be problematic not only for Alfresco. I would use ou=Groupes

Re: Space problem in AD Path

cesarista — Wed, 12 Jun 2019 19:51:53 GMT

With the debug option enabled, you may try to see how is shown the group search base. Probably is not correctly written in the log, so you don't find any group.

Regards.

--C.

Re: Space problem in AD Path

mdubois — Thu, 13 Jun 2019 06:49:44 GMT

I will try it ! Where do you find a table to translate "è" " ' " and " " in UTF8 like your example ?

Re: Space problem in AD Path

cesarista — Sat, 15 Jun 2019 06:57:32 GMT

In JDK you can use native2ascii command line program. It is useful for i18n properties files too.

Regards.

--C.