cancel
Showing results for 
Search instead for 
Did you mean: 

LDAP Import Question

hm
Champ in-the-making
Champ in-the-making
I have LDAP enabled to import users from AD. If one of the users in AD has a missing attribute that is being exported the trigger fails entirely instead of skipping records that have missing attributes.

org.alfresco.repo.importer.ExportSourceImporterException: Failed to import
        at org.alfresco.repo.importer.ExportSourceImporter.doImport(ExportSourceImporter.java:206)
        at org.alfresco.repo.importer.ImporterJob.execute(ImporterJob.java:36)
        at org.quartz.core.JobRunShell.run(JobRunShell.java:191)
        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:516)
5 REPLIES 5

andy
Champ on-the-rise
Champ on-the-rise
Hi

Does it matter which attribute is missing?

Is there more detail for the error?

Can you filter for users that have all the required attributes in the LDAP query?

Regards

Andy

csiege
Champ in-the-making
Champ in-the-making
We had this same problem…

If you enable the logging on the log4j.properties file…

log4j.logger.org.alfresco.repo.security.authentication.ldap=debug

you will see where it fails…  we just ended up correcting the missing
attributes for each user it would fail on… this wasn't too bad, but we only have about 100 users.

Chris

andy
Champ on-the-rise
Champ on-the-rise
Hi

Missing attributes should not be a problem, unless the key for the user or group is missing. 1.3.1 should cope with missing attributes and import the user without the missing attributes.

Which version are you using?
Which attribute is missing?
What is the error?

Regards

Andy

hm
Champ in-the-making
Champ in-the-making
The uid attribute was missing for 1 user and we ended up adding this to the record. I still think that the import process should catch the exception throw an error message and continue with the next record.

cblandin
Champ in-the-making
Champ in-the-making
Hello,

After an LDAP import, the authentication of the imported users doesn't work. I get this error : Could not find user by userName …

org.alfresco.repo.security.authentication.AuthenticationException: Could not find user by userName: xxxxx
   at org.alfresco.repo.security.authentication.AbstractAuthenticationComponent.setCurrentUser(AbstractAuthenticationComponent.java:100)
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
   at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
   at java.lang.reflect.Method.invoke(Method.java:585)
   at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:335)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:181)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:148)
   at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:96)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176)
   at $Proxy7.setCurrentUser(Unknown Source)
   at custom.CASAuthenticationFilter.setAuthenticatedUser(CASAuthenticationFilter.java:329)
   at custom.CASAuthenticationFilter.doFilter(CASAuthenticationFilter.java:188)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)

I just want to make an import of users but no authentication. The authentication is made by CAS, and it works fine with the users I created manually (it works also with "admin").

The XML file is correctly created, and the users are imported. I can see them in the users page (users.jsp). But they are not present in the Node Browser (I just see those I created).

Can you help me ?

Christophe