Thanks NGUser1, I have read your reply right now and I can't test the conf in that blog, but I'll try it.
Now a days the authentication process is working, but the synchronization process is not working. Here is the log about it:
Synchronizing users and groups with user registry 'ldap1'
Retrieving all groups from user registry 'ldap1'
ldap1 Group Analysis: Commencing batch of 0 entries
ldap1 Group Analysis: Completed batch of 0 entries
Retrieving all users from user registry 'ldap1'
ldap1 User Creation and Association: Commencing batch of 0 entries
ldap1 User Creation and Association: Completed batch of 0 entries
Finished synchronizing users and groups with user registry 'ldap1'
0 user(s) and 0 group(s) processed
My ldap properties file is:
Here are some images from my LDAP, to check my parameters in the config file:
[img]http://ubuntuone.com/p/9Hz/[/img]
[img]http://ubuntuone.com/p/9Hx/[/img]
[img]http://ubuntuone.com/p/9Hy/[/img]
If some one find errors in my conf to help me in the synchronization process, I'll appreciate it very much
.
Now a days the authentication process is working, but the synchronization process is not working. Here is the log about it:
Synchronizing users and groups with user registry 'ldap1'
Retrieving all groups from user registry 'ldap1'
ldap1 Group Analysis: Commencing batch of 0 entries
ldap1 Group Analysis: Completed batch of 0 entries
Retrieving all users from user registry 'ldap1'
ldap1 User Creation and Association: Commencing batch of 0 entries
ldap1 User Creation and Association: Completed batch of 0 entries
Finished synchronizing users and groups with user registry 'ldap1'
0 user(s) and 0 group(s) processed
My ldap properties file is:
ldap.authentication.active=trueldap.authentication.allowGuestLogin=falseldap.authentication.userNameFormat=uid=%s,ou=People,ou=Departamento de Informatica,o=Universidad de Oviedo,c=esldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactoryldap.authentication.java.naming.provider.url=<url>ldap.authentication.java.naming.security.authentication=SIMPLEldap.authentication.escapeCommasInBind=falseldap.authentication.escapeCommasInUid=falseldap.authentication.defaultAdministratorUserNames=ldap.synchronization.active=trueldap.synchronization.java.naming.security.principal=<ldap admin user>ldap.synchronization.java.naming.security.credentials=<pass>ldap.synchronization.queryBatchSize=1000ldap.synchronization.attributeBatchSize=1000ldap.synchronization.groupQuery=ou=Group,ou=Departamento de Informatica,o=Universidad de Oviedo,c=esldap.synchronization.groupDifferentialQuery=(objectclass=posixGroup)ldap.synchronization.personQuery=ou=People,ou=Departamento de Informatica,o=Universidad de Oviedo,c=esldap.synchronization.personDifferentialQuery=(objectclass=inetOrgPerson)ldap.synchronization.groupSearchBase=ou=Group,ou=Departamento de Informatica,o=Universidad de Oviedo,c=esldap.synchronization.userSearchBase=ou=People,ou=Departamento de Informatica,o=Universidad de Oviedo,c=esldap.synchronization.modifyTimestampAttributeName=ldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'ldap.synchronization.userIdAttributeName=uidldap.synchronization.userFirstNameAttributeName=givenNameldap.synchronization.userLastNameAttributeName=snldap.synchronization.userEmailAttributeName=mailldap.synchronization.userOrganizationalIdAttributeName=oldap.synchronization.defaultHomeFolderProvider=homeDirectoryldap.synchronization.groupIdAttributeName=cnldap.synchronization.groupDisplayNameAttributeName=descriptionldap.synchronization.groupType=posixGroupldap.synchronization.personType=inetOrgPersonldap.synchronization.groupMemberAttributeName=memberUidldap.synchronization.enableProgressEstimation=trueHere are some images from my LDAP, to check my parameters in the config file:
[img]http://ubuntuone.com/p/9Hz/[/img]
[img]http://ubuntuone.com/p/9Hx/[/img]
[img]http://ubuntuone.com/p/9Hy/[/img]
If some one find errors in my conf to help me in the synchronization process, I'll appreciate it very much
.
It Works!.
Finally here is my ldap-authentication.properties file:
Thanks a lot dward, you save my life. Congrats for the Alfresco program and for your work helping people in the forums. One point to your post.
Finally here is my ldap-authentication.properties file:
# This flag enables use of this LDAP subsystem for authentication. It may be# that this subsytem should only be used for synchronization, in which case# this flag should be set to false.ldap.authentication.active=true## This properties file brings together the common options for LDAP authentication rather than editing the bean definitions#ldap.authentication.allowGuestLogin=false# How to map the user id entered by the user to that passed through to LDAP# - simple # - this must be a DN and would be something like# uid=%s,ou=People,dc=company,dc=com# - digest# - usually pass through what is entered# %s# If not set, an LDAP query involving ldap.synchronization.personQuery and ldap.synchronization.userIdAttributeName will # be performed to resolve the DN dynamically. This allows directories to be structured and doesn't require the user ID to# appear in the DN.ldap.authentication.userNameFormat=uid=%s,ou=People,ou=Departamento de Informatica,o=Universidad de Oviedo,c=es# The LDAP context factory to useldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory# The URL to connect to the LDAP server ldap.authentication.java.naming.provider.url=<ldap url># The authentication mechanism to useldap.authentication.java.naming.security.authentication=SIMPLE# Escape commas entered by the user at bind time# Useful when using simple authentication and the CN is part of the DN and contains commasldap.authentication.escapeCommasInBind=false# Escape commas entered by the user when setting the authenticated user# Useful when using simple authentication and the CN is part of the DN and contains commas, and the escaped \, is # pulled in as part of an LDAP sync# If this option is set to true it will break the default home folder provider as space names can not contain \ldap.authentication.escapeCommasInUid=false# Comma separated list of user names who should be considered administrators by defaultldap.authentication.defaultAdministratorUserNames=# This flag enables use of this LDAP subsystem for user and group# synchronization. It may be that this subsytem should only be used for # authentication, in which case this flag should be set to false.ldap.synchronization.active=true# The default principal to use (only used for LDAP sync)ldap.synchronization.java.naming.security.principal=<admin user uid># The password for the default principal (only used for LDAP sync)ldap.synchronization.java.naming.security.credentials=<admin user uid pass># If positive, this property indicates that RFC 2696 paged results should be# used to split query results into batches of the specified size. This# overcomes any size limits imposed by the LDAP server.ldap.synchronization.queryBatchSize=1000# If positive, this property indicates that range retrieval should be used to fetch# multi-valued attributes (such as member) in batches of the specified size.# Overcomes any size limits imposed by Active Directory. ldap.synchronization.attributeBatchSize=1000# The query to select all objects that represent the groups to import.ldap.synchronization.groupQuery=(objectclass\=posixGroup)# The query to select objects that represent the groups to import that have changed since a certain time.ldap.synchronization.groupDifferentialQuery=(&(objectclass\=posixGroup)(!(modifyTimestamp<\={0})))# The query to select all objects that represent the users to import.ldap.synchronization.personQuery=(objectclass\=inetOrgPerson)# The query to select objects that represent the users to import that have changed since a certain time.ldap.synchronization.personDifferentialQuery=(&(objectclass\=inetOrgPerson)(!(modifyTimestamp<\={0})))# The group search base restricts the LDAP group query to a sub section of tree on the LDAP server.ldap.synchronization.groupSearchBase=ou=Group,ou=Departamento de Informatica,o=Universidad de Oviedo,c=es# The user search base restricts the LDAP user query to a sub section of tree on the LDAP server.ldap.synchronization.userSearchBase=ou=People,ou=Departamento de Informatica,o=Universidad de Oviedo,c=es# The name of the operational attribute recording the last update time for a group or user.ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp# The timestamp format. Unfortunately, this varies between directory servers.ldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'# The attribute name on people objects found in LDAP to use as the uid in Alfrescoldap.synchronization.userIdAttributeName=uid# The attribute on person objects in LDAP to map to the first name property in Alfrescoldap.synchronization.userFirstNameAttributeName=givenName# The attribute on person objects in LDAP to map to the last name property in Alfrescoldap.synchronization.userLastNameAttributeName=sn# The attribute on person objects in LDAP to map to the email property in Alfrescoldap.synchronization.userEmailAttributeName=mail# The attribute on person objects in LDAP to map to the organizational id property in Alfrescoldap.synchronization.userOrganizationalIdAttributeName=o# The default home folder provider to use for people created via LDAP importldap.synchronization.defaultHomeFolderProvider=homeDirectory# The attribute on LDAP group objects to map to the authority name property in Alfrescoldap.synchronization.groupIdAttributeName=cn# The attribute on LDAP group objects to map to the authority display name property in Alfrescoldap.synchronization.groupDisplayNameAttributeName=description# The group type in LDAPldap.synchronization.groupType=posixGroup# The person type in LDAPldap.synchronization.personType=inetOrgPerson# The attribute in LDAP on group objects that defines the DN for its membersldap.synchronization.groupMemberAttributeName=memberUid# If true progress estimation is enabled. When enabled, the user query has to be run twice in order to count entries.ldap.synchronization.enableProgressEstimation=trueThanks a lot dward, you save my life. Congrats for the Alfresco program and for your work helping people in the forums. One point to your post
.
It Works!.
Finally here is my ldap-authentication.properties file:
…….
Thanks a lot dward, you save my life. Congrats for the Alfresco program and for your work helping people in the forums. One point to your post
Even users<–>group mapping works too ?
