Authenication issue

[nektod]

Hi, all.

Alfresco 5.0.d CE, Ubuntu 14.04 x64

Authentication and syncronization with AD works fine except for the one moment. We've defined specific DN at "User Search Base" property. But any user from AD domain can successfully login to Alfresco.

Is it bug or feature?

Our config:
ldap.authentication.active=true
ldap.authentication.allowGuestLogin=false
ldap.authentication.userNameFormat=%s@foo.local
ldap.authentication.java.naming.provider.url=ldap://DC01.foo.local:389
ldap.authentication.defaultAdministratorUserNames=Administrator
ldap.synchronization.java.naming.security.principal=AlfrescoLDAP@foo.local
ldap.synchronization.java.naming.security.credentials=secret
ldap.synchronization.groupSearchBase=ou=office1,dc=foo,dc=local
ldap.synchronization.userSearchBase=ou=office1,dc=foo,dc=local

[mrogers]

Synchronization is not the same as authentication so that's a "feature" rather than any bug.  

The authentication code will not use ldap.synchronization.groupSearchBase.

[nektod]

OK, Thanks. How to restrict access to alfresco by specific OU? Is it possible?