cancel
Showing results for 
Search instead for 
Did you mean: 

Groups sync but are empty - Alfresco 3.1

kregers
Champ in-the-making
Champ in-the-making
Hello Everyone,

We are currently installing Alfresco 3.1 on our system and have just run into a problem that I've seen on the forums, but have not seen a resolution.

We have setup LDAP authentication chained with Alfresco authentication and it works wonderfully.

We have also configured LDAP synchronization for both users and groups. The users are imported without a problem, as are the groups. However, when I login to Alfresco Explorer as admin and take a look at System Groups, all the groups imported are empty, despite the fact that there are members in my Directory Server.

The alfreso.log file is set to capture the ldap debig statements and I can clearly see the members of the group in the debug file. However, usernames never appear in the XML document located in the /opt/Alfresco/tomcat/temp/Alfresco directory, just the group definition.

Is there something I'm missing?
1 REPLY 1

ofrxnz
Champ in-the-making
Champ in-the-making
What directory server are you using?

you have to configure the following section to be able to identify
1.) what should i query to get a list of groups
2.) what folder should i look in and recurese through
3.) what identifies a group
4.) what identifies a person
5.) what attribute in the group holds the members

you will need an LDAP browser of some kind to pick them out of a groups attributes.

# The query to find group objects
ldap.synchronisation.groupQuery=(objectclass=groupOfNames)

# The search base to use to find group objects
ldap.synchronisation.groupSearchBase=dc=company,dc=com

# The attribute on LDAP group objects to map to the gid property in Alfrecso
ldap.synchronisation.groupIdAttributeName=cn

# The group type in LDAP
ldap.synchronisation.groupType=groupOfNames

# The person type in LDAP
ldap.synchronisation.personType=inetOrgPerson

# The attribute in LDAP on group objects that defines the DN for its members
ldap.synchronisation.groupMemberAttributeName=member