Active Directory Sync allowing logins using email address

[mvanpelt]

Hello,

We have had Active directory sync up and running for a few months now on Alfresco 4.2.c.  Everything seemed to be working fine until I noticed that users were logging in using their email addresses and Alfresco was creating a separate user for them.  For example, I log in using my active directory account and everything is as it should be.  I log out and log in using my email address and domain password, and it creates/log me in to a new account.  I would like to make it so that logging in with email addresses does not work, but I am not sure how to accomplish that.  Any help would be greatly appreciated.

[afaust]

Hello,

you can not prevent a successfull authentication when the Active Directory allows email addresses as user names, BUT you can prevent the on-demand creation of Alfresco users with such a user name and by doing so, prevent a successfull login. You simply have to disable the on-demand creation of people when they have not been created by synchronizing with the AD. This can be done by setting the property createMissingPeople of the peopleService (found in authentication-services-context.xml) to false. You should duplicate the entire bean in your Alfresco extension directory in a new *-context.xml.

Regards
Axel