AD Sync doesn't work

[firetux]

Hey guys,
I got alfresco 4.2.f community on debian wheezy working so far.
My AD Auhtentication works but there is no userprofile data synced

When a new AD User login into alfresco he will get access but the userprofile
stays empty:

here is my alfresco-global.properties: (secret data are hidden)

###############################
## Common Alfresco Properties #
###############################

dir.root=/opt/alfresco/alf_data

alfresco.context=alfresco
alfresco.host=x.x.x.x
alfresco.port=8080
alfresco.protocol=http

share.context=share
share.host=x.x.x.x
share.port=8080
share.protocol=http

### database connection properties ###
db.driver=org.postgresql.Driver
db.username=alfresco
db.password=xxxxxxxxxxxx
db.name=alfresco
db.url=jdbc:postgresql://localhost:5432/${db.name}

### FTP Server Configuration ###
ftp.enabled=true
ftp.port=21

### RMI service ports ###
alfresco.rmi.services.port=50500
avm.rmi.service.port=0
avmsync.rmi.service.port=0
attribute.rmi.service.port=0
authentication.rmi.service.port=0
repo.rmi.service.port=0
action.rmi.service.port=0
deployment.rmi.service.port=0

### External executable locations ###
ooo.exe=/opt/alfresco/libreoffice/program/soffice.bin
ooo.enabled=true
ooo.port=8100
img.root=/opt/alfresco/common
img.dyn=${img.root}/lib
img.exe=${img.root}/bin/convert
swf.exe=/opt/alfresco/common/bin/pdf2swf
swf.languagedir=/opt/alfresco/common/japanese

jodconverter.enabled=false
jodconverter.officeHome=/opt/alfresco/libreoffice
jodconverter.portNumbers=8100

### Initial admin password ###
alfresco_user_store.adminpassword=xxxxxxxxxxxxxxxxxxxx

### E-mail site invitation setting ###
notification.email.siteinvite=true
mail.host=mxrelay.xxxxxx
mail.port=25
mail.from.default=alfresco@xxx.de
mail.protocol=smtp
mail.smtp.auth=false

### License location ###
dir.license.external=/opt/alfresco

### Solr indexing ###
index.subsystem.name=solr
dir.keystore=${dir.root}/keystore
solr.port.ssl=8443

### BPM Engine ###
system.workflow.engine.jbpm.enabled=false



### LDAP Configuration ###
authentication.chain=passthru1:passthru,ldap1:ldap
#authentication.chain=ldap-ad1:ldap-ad,alfrescoNtlm1:alfrescoNtlm

passthru.authentication.sso.enabled=false
passthru.authentication.allowGuestLogin=false
passthru.authentication.authenticateCIFS=false
passthru.authentication.authenticateFTP=false

passthru.authentication.servers=xxx.de
passthru.authentication.domain=xxx.de
passthru.authentication.useLocalServer=false
passthru.authentication.defaultAdministratorUserNames=axxx315,axxx444,axxx470
passthru.authentication.connectTimeout=5000
passthru.authentication.offlineCheckInterval=300
passthru.authentication.protocolOrder=TCPIP,NETBIOS

ldap.authentication.active=false
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.userNameFormat=%s@xxx.de
ldap.authentication.allowGuestLogin=false
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://xxx.de:389
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false

ldap.synchronization.active=true
ldap.synchronization.java.naming.security.principal=yyyy\\qdbem03
ldap.synchronization.java.naming.security.credentials=UED$~Mf4[5MftD=dFwBU
ldap.synchronization.queryBatchSize=1000
ldap.synchronization.groupDifferentialQuery=(&(objectclass=group)(!(modifyTimestamp<\={0})))
ldap.synchronization.personQuery=(&(objectclass=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass=user)(!(modifyTimestamp<\={0})))
ldap.synchronization.groupQuery=(objectclass\=group)

ldap.synchronization.groupSearchBase=DC\=xxx,DC\=de
ldap.synchronization.userSearchBase=DC\=xxx,DC\=de

ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss’.0Z’
ldap.synchronization.userIdAttributeName=sAMAccountName
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=department
ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupType=group
ldap.synchronization.personType=user
ldap.synchronization.groupMemberAttributeName=member

#synchronization.synchronizeChangesOnly=true
#synchronization.import.cron=55 10 * * *
cifs.enabled=false

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Thank you for help!!!!!!!

[lolu]

Hello firetux,

I hope my comment really does help you because I am also just beginning to find my way around the murky waters of Alfresco. And so far so good.

So I had a similar problem. Started from syncing errors which I was able to fix by configuring ldap-ad properties in the shared/classes/alfresco/extension/subsystems/ldap1 folder and also in alfresco-global.properties file.

All users from the AD was successfully synced but I discovered some user profiles were empty. So I went back to the AD to check these profiles and found that some user profile data were missing. I filled in all missing data on the AD, restarted Alfresco server and all user profiles are now properly synced and appearing in the user profile page in Alfresco.

So maybe you could check your AD user account properties. Or look through the ldap-ad-authentication.properties file in your tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap-ad sub-folder.

Hope this helps!