Disable LDAP Group Sync

[warren_h]

Hi,

The version of Alfresco I'm installing is 2.0.  I am working through the file ldap-authentication-context.xml and have decided that although I want ldap user sync, I'll probably not want ldap group sync.

So my question is : What is the cleanest or simplest way to turn off group sync in ldap-authentication-context.xml?

I've searched for a suitable true or false attribute that I can set but have not found it.

I have two reasons for wanting to turn off the group sync feature.  The first is that I do not subscribe to the "GroupOfNames" implementation.  My preferred method for populating groups from the directory is to create customised searches for objects with matching attributes.  This way groups with large populations can be created quickly with very little effort, the Sympa mailing list manager for example allows for this approach.  My second reason for wanting to disable group sync is that I prefer to push the responsibilities for creating and maintaining groups onto designated users rather than the admins.

Thanks,


Warren.

[andy]

Hi

Just comment out the scheduler from the bean defintion, or remove all the bean definitions to do with group import. You could create and wire up your own group import bean. It needs to build an acp xml file for import.

It is intended to add better group support (like groups defined by query etc, members can be a uid and not just a DN, …) but it is not at the top of the list.

Andy