LDAP Sync - Two OU- Ignoring non-existent member Issue

[maruthuv]

Hi

I am very new to Alfresco. Please help me to find solution. I have configured two LDAP AD sync and my authentication chain looks like below

authentication.chain=ldap1:ldap-ad,ldap2:ldap-mailer,alfrescoNtlm1:alfrescoNtlm‍

The requirement is that i need to sync two different OU's. So i configured two ldap configuration

ldap1 configuration sync users + groups and my configuration looks like below

ldap.synchronization.groupSearchBase=OU\=Grouper,OU\=Groups,DC=domain,DC=com
ldap.synchronization.groupQuery=(objectclass\=group)
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(whenChanged<\={0})))

ldap.synchronization.userSearchBase=OU\=Employees,OU\=Users,DC=domain,DC=com
ldap.synchronization.personQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(whenChanged<\={0})))‍‍‍‍‍‍‍

ldap2 configuration want that to sync only Mailer groups and no users since i already the users are synced in ldap1

ldap.synchronization.groupSearchBase=OU\=Mailer,OU\=Groups,DC=domain,DC=com
ldap.synchronization.groupQuery=(objectclass\=group)
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(whenChanged<\={0})))

ldap.synchronization.userSearchBase=OU\=Employees,OU\=Users,DC=domain,DC=com
ldap.synchronization.personQuery=(&(objectclass\=<strong>skiballusers</strong>)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=<strong>skiballusers</strong>)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(whenChanged<\={0})))‍‍‍‍‍‍‍

The ldap1 sync works find and when i try to syn the ldap2, the sync doesn't add missing users to the groups. I am getting following warning and there is no sync happen. But the removal of the user is working fine.

<strong>Ignoring non-existent member 'user1' in groups {'groupname1', 'groupname2'}</strong>

Please help me to find out where is the mistake.

Thanks
Mars

[bopolissimus]

Hi all,

I'm seeing exactly this same thing with OpenLDAP and Alfresco CE 5.0.d.  Is this a known issue?

Gerald Quimpo

[bopolissimus]

https://issues.alfresco.com/jira/browse/ALF-21388

indicates that this is a feature, not a bug.  It's a bit frustrating since it seems this has worked in the past but the behavior has changed.

https://forums.alfresco.com/forum/installation-upgrades-configuration-integration/authentication-lda...

and mroger's conjecture that it should work:

https://forums.alfresco.com/forum/installation-upgrades-configuration-integration/authentication-lda...

[bopolissimus]

posting this since a previous similar post was queued for admins to review (and I've been away from this forum for a while so I don't know when that's likely to be accepted).  Here's hoping this doesn't trip any review-required filters.  although I'm not that helpful.

https://issues.alfresco.com/jira/browse/ALF-21388

https://forums.alfresco.com/forum/installation-upgrades-configuration-integration/authentication-lda...