LDAP Group Sync

[bensewell]

Just a general question for the Alfresco config people out there.

At the moment i've got Alfresco authenticating against AD when people try to logon, then chaining to to the local Alfresco users if there is no match.  This involves some licensing issues.

So just want to know when Alfresco does its LDAP AD sync does it sync both the username and password hash?  If this works then my understanding is that i can setup the Alfresco server to do a nightly sync.

When users logon to the system they will be authenticating via the LDAP sync data that Alfresco holds internally rather than going to AD?

Thanks in Advance Peeps! 

[jpotts]

Quite an old thread. Sorry that you didn't get an answer at the time you asked it.

When you do a sync, only the username and a subset of metadata gets stored in Alfresco. The password, however, does not. When you are set up for LDAP authentication, Alfresco always depends on the directory to validate that the user can bind with their username and password.

The value of a sync is to populate the Alfresco directory with usernames so that Alfresco users can find other users who may have never logged in.

Jeff