kerberos ad integration ldap synchronization only for accoun

[cobradevil]

Hello People,

I have succesfully integrated kerberos with cifs and http.

Now i have a question about the acccounts that will be created/synchronized.

I have a directory server with 100000+ accounts i do not want that all people to get synchronized because most of the people will not use alfresco.

What i do with other applications is when a user logs with kerberos and there is no account information then the user information will be searched in (anonymous ldap) where the rest of the attributes will be retrieved.

I wanna do this also with alfresco.

So when someone logs in for the first time and he doesn't have an account the account where he is logging in with should be used to create his account on the fly.

Does someone know such a setup or how this can be accomplished?

With kind regards

William van de Velde

[jarrett]

Hello,

When I logged in using an AD account that has never been used to log into Alfresco the user account and home space were automatically created. My problem was the rest of the user attributes were not filled in. Is this similar to what you are talking about?

[naveenkumar]

Yes, I have the same question "rest of the user attributes were not filled in". Do you have a solution for this ? thanks

[subemontes]

I just dont belive that u make Kerberos +AD working. 
Theres LTOS of post asking for the same…
Have been fighthing for 3 days now

¿Will u put the steps ?

More detailed that wiki (that doestn work) and ur system confi =?

[lshaki]

We have similar problem: We were able to integrate it with AD so when the user logs in it creates the account and the user space without any detail information about the user

However we are facing another issue: In this scenario you cannot grant permissions to the users unless they have logged in at least once.

To resolve this problem, Alfresco has a crone job that should (periodically) import the AD Users and Groups into Alfresco  but it does not work.

Any idea?