individual ldap user synchro at login

[bparis]

We want this authentication procedure:
1) authenticate with LDAP, using an LDAP attribute as user name id ;
2) synchronize user's data in repository with user's data in LDAP at logon time, each time the user successfully authenticated;


1 - I have modified LDAPAuthenticationComponentImpl class to authenticate using an LDAP attribute as user name id
instead of the full dn and that's'ok
(see http://forums.alfresco.com/viewtopic.php?t=4302)


2 - now I'm trying to synchronize the user data just after he has been authenticated, using the import features in Alfresco.
As I don't want to change other classes than LDAPAuthenticationComponentImpl, I've defined some more attributes
in LDAPAuthenticationComponentImpl class :

 
    private ExportSourceImporter exportSourceImporter ; 
    private LDAPPersonExportSource exportSource;
    private PersonService personService;
‍‍‍‍‍

Then I've changed the LDAPAuthenticationComponentImpl.authenticate() method simply like this:

  //… code to authenticate user et load ldap user's data (cn, givenName, …)
  // do the synchro for this user only
  exportSource.setPersonQuery("uid=" + userName);
  exportSourceImporter.setClearAllChildren(false);
  exportSourceImporter.doImport();
  logger.debug("user '" + cn + "' imported.");                
  if (personService.personExists(userName)) logger.debug("user exists after; id=" + personService.getPerson(userName).getId() );
‍‍‍‍‍‍‍‍‍

When I log into Alfresco with an LDAP user account, say user "bernard", I see in the debug log the import succeeds.
The file ExportSourceImporter-19981.xml looks like:

<?xml version="1.0" encoding="UTF-8"?>
<view:view xmlns: …………….  xmlns="">
   <cm:person view:childName="cm:person">
      <cm:ownable></cm:ownable>
      <cm:owner>bernard</cm:owner>
      <cm:userName>bernard</cm:userName>
      <cm:firstName>beber</cm:firstName>
      <cm:lastName>Beber</cm:lastName>
      <cm:email>beber@ipsp.ucl.ac.be</cm:email>
<cm:organizationId>123</cm:organizationId>
<cm:homeFolderProvider>personalHomeFolderProvider</cm:homeFolderProvider>
      <sys:node-uuid>c77ef628-807f-11db-aae0-13020744cd5d</sys:node-uuid>
   </cm:person>
</view:view>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

(the line <sys:node-uuid> appears after seconds trial).
But the login fails: I get the following error message.

javax.faces.FacesException: Error calling action method of component with id loginForm:submit
caused by:
javax.faces.el.EvaluationException: Exception while invoking expression #{LoginBean.login}
caused by:
net.sf.acegisecurity.AuthenticationCredentialsNotFoundException: A valid SecureContext was not provided in the RequestContext

Hide Details

javax.faces.FacesException: Error calling action method of component with id loginForm:submit 
at org.apache.myfaces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:74) 
at javax.faces.component.UICommand.broadcast(UICommand.java:106) 
at javax.faces.component.UIViewRoot._broadcastForPhase(UIViewRoot.java:90) 
at javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:164) 
at org.apache.myfaces.lifecycle.LifecycleImpl.invokeApplication(LifecycleImpl.java:316) 
at org.apache.myfaces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:86) 
at javax.faces.webapp.FacesServlet.service(FacesServlet.java:105) 
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:237) 
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157) 
at org.alfresco.web.app.servlet.AuthenticationFilter.doFilter(AuthenticationFilter.java:86) 
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:186) 
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157) 
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:214) 
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104) 
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520) 
at org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:198) 
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:152) 
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104) 
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520) 
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:137) 
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104) 
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:118) 
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:102) 
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520) 
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) 
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104) 
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520) 
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:929) 
at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:160) 
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:799) 
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:705) 
at org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:577) 
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:683) 
at java.lang.Thread.run(Thread.java:595) 
Caused by: javax.faces.el.EvaluationException: Exception while invoking expression #{LoginBean.login} 
at org.apache.myfaces.el.MethodBindingImpl.invoke(MethodBindingImpl.java:153) 
at org.apache.myfaces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:63) 
… 33 more 
Caused by: net.sf.acegisecurity.AuthenticationCredentialsNotFoundException: A valid SecureContext was not provided in the RequestContext 
at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.credentialsNotFound(AbstractSecurityInterceptor.java:477) 
at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:355) 
at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:41) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.alfresco.repo.audit.AuditComponentImpl.auditImpl(AuditComponentImpl.java:210) 
at org.alfresco.repo.audit.AuditComponentImpl.audit(AuditComponentImpl.java:156) 
at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:61) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:96) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176) 
at $Proxy21.getCurrentUserName(Unknown Source) 
at org.alfresco.web.bean.LoginBean.login(LoginBean.java:291) 
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
at java.lang.reflect.Method.invoke(Method.java:585) 
at org.apache.myfaces.el.MethodBindingImpl.invoke(MethodBindingImpl.java:129) 
… 34 more 
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I can successfully login as user "admin" (I use chaining of course) and in the console manager, I see bernard user in the user list.
Anyway I get a new error when I try to look at bernard's properties. 

javax.faces.el.EvaluationException: Exception while invoking expression #{NewUserWizard.startWizardForEdit} 
at org.apache.myfaces.el.MethodBindingImpl.invoke(MethodBindingImpl.java:153) 
at javax.faces.component.UICommand.broadcast(UICommand.java:86) 
at javax.faces.component.UIViewRoot._broadcastForPhase(UIViewRoot.java:90) 
at javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:164) 
at org.apache.myfaces.lifecycle.LifecycleImpl.invokeApplication(LifecycleImpl.java:316) 
at org.apache.myfaces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:86) 
at javax.faces.webapp.FacesServlet.service(FacesServlet.java:105) 
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:237) 
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157) 
at org.alfresco.web.app.servlet.AdminAuthenticationFilter.doFilter(AdminAuthenticationFilter.java:72) 
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:186) 
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157) 
at org.alfresco.web.app.servlet.AuthenticationFilter.doFilter(AuthenticationFilter.java:73) 
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:186) 
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157) 
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:214) 
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104) 
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520) 
at org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:198) 
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:152) 
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104) 
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520) 
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:137) 
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104) 
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:118) 
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:102) 
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520) 
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) 
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104) 
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520) 
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:929) 
at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:160) 
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:799) 
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:705) 
at org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:577) 
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:683) 
at java.lang.Thread.run(Thread.java:595) 
Caused by: java.lang.NullPointerException 
at org.alfresco.repo.domain.NodeKey.<init>(NodeKey.java:44) 
at org.alfresco.repo.node.db.hibernate.HibernateNodeDaoServiceImpl.getNodeStatus(HibernateNodeDaoServiceImpl.java:314) 
at org.alfresco.repo.node.db.hibernate.HibernateNodeDaoServiceImpl.getNode(HibernateNodeDaoServiceImpl.java:413) 
at sun.reflect.GeneratedMethodAccessor95.invoke(Unknown Source) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
at java.lang.reflect.Method.invoke(Method.java:585) 
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:335) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:181) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:148) 
at org.alfresco.repo.transaction.TransactionalDaoInterceptor.invoke(TransactionalDaoInterceptor.java:60) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176) 
at $Proxy1.getNode(Unknown Source) 
at org.alfresco.repo.node.db.DbNodeServiceImpl.exists(DbNodeServiceImpl.java:135) 
at sun.reflect.GeneratedMethodAccessor153.invoke(Unknown Source) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
at java.lang.reflect.Method.invoke(Method.java:585) 
at org.alfresco.repo.service.StoreRedirectorProxyFactory$RedirectorInvocationHandler.invoke(StoreRedirectorProxyFactory.java:213) 
at $Proxy2.exists(Unknown Source) 
at sun.reflect.GeneratedMethodAccessor153.invoke(Unknown Source) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
at java.lang.reflect.Method.invoke(Method.java:585) 
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:335) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:181) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:148) 
at org.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:116) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:80) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:41) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.alfresco.repo.audit.AuditComponentImpl.auditImpl(AuditComponentImpl.java:210) 
at org.alfresco.repo.audit.AuditComponentImpl.audit(AuditComponentImpl.java:156) 
at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:61) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:96) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176) 
at $Proxy14.exists(Unknown Source) 
at org.alfresco.web.bean.wizard.NewUserWizard.populate(NewUserWizard.java:185) 
at org.alfresco.web.bean.wizard.NewUserWizard.startWizardForEdit(NewUserWizard.java:582) 
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
at java.lang.reflect.Method.invoke(Method.java:585) 
at org.apache.myfaces.el.MethodBindingImpl.invoke(MethodBindingImpl.java:129) 
… 36 more 
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Then I do the following:
I stop tomcat, edit my source code and comment the import line to deactivate the import, then restart alfresco.
I login as user "admin" and delete the "corrupted" user "bernard".
I logout as user admin then relogin as user "bernard" so the user is "cleanly" created in alfresco repository.

I reactivate the import feature in my source code, recompile…, restart tomcat again.
Try bernard login and fails again.
But now when I login as admin I can see bernard's properties in the user manager ans see there have been correctly imported.

Could anybody help me how I could get rid of these errors ??

We use OpenLDAP, tomcat and Alfresco version 1.4.0 (build-105) schema 21 (community)
Thanks a lot,
Bernard.

[andy]

Hi

I would simply get the details out of ldap and then use the "personService" bean to set the properties. You need to have done all the authentication first - as the call to setCurrentUser(uid) sets up the acegi context (which appears to be your problem here…it will cause this error if you call a public service bean before you are authenticated)

Regards

Andy

[bparis]

Yes of course, I was trying to update the user data with a non-mutable authentication service.
Now I call setSystemUserAsCurrentUser() before doing the import and call setCurrentUser( userName ) after, but I get a null pointer exception !

Caused by: java.lang.NullPointerException 
at org.alfresco.repo.domain.NodeKey.<init>(NodeKey.java:44) 
at org.alfresco.repo.node.db.hibernate.HibernateNodeDaoServiceImpl.getNodeStatus(HibernateNodeDaoServiceImpl.java:314) 
at org.alfresco.repo.node.db.hibernate.HibernateNodeDaoServiceImpl.getNode(HibernateNodeDaoServiceImpl.java:413) 
at sun.reflect.GeneratedMethodAccessor95.invoke(Unknown Source) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
at java.lang.reflect.Method.invoke(Method.java:585) 
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:335) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:181) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:148) 
at org.alfresco.repo.transaction.TransactionalDaoInterceptor.invoke(TransactionalDaoInterceptor.java:60) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176) 
at $Proxy1.getNode(Unknown Source) 
at org.alfresco.repo.node.db.DbNodeServiceImpl.exists(DbNodeServiceImpl.java:135) 
at sun.reflect.GeneratedMethodAccessor165.invoke(Unknown Source) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
at java.lang.reflect.Method.invoke(Method.java:585) 
at org.alfresco.repo.service.StoreRedirectorProxyFactory$RedirectorInvocationHandler.invoke(StoreRedirectorProxyFactory.java:213) 
at $Proxy2.exists(Unknown Source) 
at sun.reflect.GeneratedMethodAccessor165.invoke(Unknown Source) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
at java.lang.reflect.Method.invoke(Method.java:585) 
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:335) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:181) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:148) 
at org.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:116) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:80) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:41) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.alfresco.repo.audit.AuditComponentImpl.auditImpl(AuditComponentImpl.java:210) 
at org.alfresco.repo.audit.AuditComponentImpl.audit(AuditComponentImpl.java:156) 
at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:61) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:96) 
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) 
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176) 
at $Proxy14.exists(Unknown Source) 
at org.alfresco.web.bean.LoginBean.login(LoginBean.java:305) 
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
at java.lang.reflect.Method.invoke(Method.java:585) 
at org.apache.myfaces.el.MethodBindingImpl.invoke(MethodBindingImpl.java:129) 
… 34 more 
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

You are probably right, I should use the personService instead.
Is this a correct way to use it ?

                QName qn = QName.createQName("http://www.alfresco.org/model/content/1.0", "email");
                HashMap properties = new HashMap();
                properties.put(qn, "toto@tata") ;
                personService.setPersonProperties(userName, properties );
‍‍‍‍‍‍

Using this code creates "null" users I cannot delete !
By the way, how could I subscribe a user into a group ?

Thanks for your help.
Bernard

[andy]

Hi

This API call expects you to set all properties which you will have to get via the node service first. I will add the setProperty method at some point.

The authority service can be used to set group membership.

Regards

Andy

[bparis]

Here is the way I've found to create groups and subscribe users in groups:

authorityService.createAuthority(AuthorityType.GROUP, null , "mainGroup") ;
authorityService.createAuthority(AuthorityType.GROUP, "GROUP_mainGroup" , "subGroup") ;
authorityService.addAuthority("GROUP_subGroup", userName) ; 
‍‍‍‍‍

I have a big question about that example:
suppose my user name is "mainGroup", this will put the super group into subGroup ?  More generally, what when the user name is the name of an existing group name ?

Bernard

[andy]

Hi

All group authorities will be prefixed by GROUP_. This is not allowed in a user name. 

If your group structure is group A contains B contains C….

Then a user in group A is not in groups B and C.
A user in group C is in groups A and B as they both include group C.

Your user name would have to be GROUP_mainGroup to casue any problems.

See the AuthorityType enum.

Regards

Andy

[senthil_chinnai]

Bernard,

I need to do the same thing on Active Directory. Could you please share the latest working code?

Thanks,
Senthil.