LDAP Import Group with member

[direccionregist]

Hello
I have configured Alfresco to import User and Group. But the Groups are import without member.

Is possible to import Group with its member?


This is my import Group config:

<bean id="ldapGroupExportSource" class="org.alfresco.repo.security.authentication.ldap.LDAPGroupExportSource">
        <property name="groupQuery">
            <value>(objectclass=groupOfNames)</value>
        </property>
        <property name="searchBase">
            <value>ou=Groups,dc=**,dc=**</value>
        </property>
        <property name="userIdAttributeName">
            <value>uid</value>
        </property>
        <property name="groupIdAttributeName">
            <value>cn</value>
        </property>
        <property name="groupType">
            <value>groupOfNames</value>
        </property>
        <property name="personType">
            <value>inetOrgPerson</value>
        </property>
        <property name="LDAPInitialDirContextFactory">
            <ref bean="ldapInitialDirContextFactory"/>
        </property>
        <property name="namespaceService">
            <ref bean="namespaceService"/>
        </property>
        <property name="memberAttribute">
            <value>member</value>
        </property>
        <property name="authorityDAO">
            <ref bean="authorityDAO"/>
        </property>
    </bean>
    
    
    <bean id="ldapGroupImport" class="org.alfresco.repo.importer.ExportSourceImporter">
        <property name="importerService">
            <ref bean="importerComponentWithBehaviour"/>
        </property>
        <property name="transactionService">
            <ref bean="transactionComponent"/>
        </property>
        <property name="authenticationComponent">
            <ref bean="authenticationComponent"/>
        </property>
        <property name="exportSource">
            <ref bean="ldapGroupExportSource"/>
        </property>
        <property name="storeRef">
            <value>${alfresco_user_store.store}</value>
        </property>
        <property name="path">
            <value>/${alfresco_user_store.system_container.childname}/${alfresco_user_store.authorities_container.childname}</value>
        </property>
        <property name="clearAllChildren">
            <value>false</value>
        </property>
        <property name="nodeService">
            <ref bean="nodeService"/>
        </property>
        <property name="searchService">
            <ref bean="searchService"/>
        </property>
        <property name="namespacePrefixResolver">
            <ref bean="namespaceService"/>
        </property>
        <property name="caches">
            <set>
                <ref bean="userToAuthorityCache"/>
                <ref bean="permissionsAccessCache"/>
            </set>
        </property>
    </bean>
   

    <bean id="ldapGroupTrigger" class="org.alfresco.util.TriggerBean">
        <property name="jobDetail">
            <bean id="ldapGroupJobDetail" class="org.springframework.scheduling.quartz.JobDetailBean">
                <property name="jobClass">
                    <value>org.alfresco.repo.importer.ImporterJob</value>
                </property>
                <property name="jobDataAsMap">
                    <map>
                        <entry key="bean">
                            <ref bean="ldapGroupImport"/>
                        </entry>
                    </map>
                </property>
            </bean>
        </property>
        <property name="startDelay">
            <value>30000</value>
        </property>
        <property name="repeatInterval">
            <value>3600000</value>
        </property>
        <property name="scheduler">
            <ref bean="schedulerFactory" />
        </property>
    </bean>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

thanks.

[direccionregist]

My log say:

12:33:00,999 DEBUG [org.alfresco.repo.security.authentication.ldap.LDAPPersonExportSource] Adding user for admin
12:33:00,999 DEBUG [org.alfresco.repo.security.authentication.ldap.LDAPPersonExportSource] Adding user for pepe
12:33:01,014 DEBUG [org.alfresco.repo.security.authentication.ldap.LDAPPersonExportSource] Adding user for juan
12:33:01,014 DEBUG [org.alfresco.repo.security.authentication.ldap.LDAPGroupExportSource] Found 2
12:33:01,014 DEBUG [org.alfresco.repo.security.authentication.ldap.LDAPGroupExportSource] Linking GROUP_TWO
12:33:01,014 DEBUG [org.alfresco.repo.security.authentication.ldap.LDAPGroupExportSource] … uid=pepe,ou=people,dc=**,dc=**
12:33:01,014 DEBUG [org.alfresco.repo.security.authentication.ldap.LDAPGroupExportSource] … uid=admin,ou=people,dc=**,dc=**
12:33:01,045 DEBUG [org.alfresco.repo.security.authentication.ldap.LDAPGroupExportSource] Linking GROUP_ONE
12:33:01,045 DEBUG [org.alfresco.repo.security.authentication.ldap.LDAPGroupExportSource] … uid=pepe,ou=people,dc=**,dc=**
12:33:01,045 DEBUG [org.alfresco.repo.security.authentication.ldap.LDAPGroupExportSource] Top 2
12:33:01,045 DEBUG [org.alfresco.repo.security.authentication.ldap.LDAPGroupExportSource] Secondary 0
‍‍‍‍‍‍‍‍‍‍‍‍‍

But "GROUP_TWO" y "GROUP_ONE" are empty.

thank

[pitt1]

You need to have the people import beans specified (ldapPeopleExportSource, ldapPeopleImport, ldapPeopleTrigger).  If you have both people and group imports enabled, then group membership should be imported.  See:

http://wiki.alfresco.com/wiki/Enterprise_Security_and_Authentication_Configuration#LDAP_People_synch...