Ldap Sync warning

[billyboy]

Me again 🙂

I get the following error at startup for ldap sync:

[sync.ldap.LDAPUserRegistry] [Thread-1] User returned by user search does not have mandatory user id attribute {mail=mail: Bilbo@MiddleEarth.com, modifytimestamp=modifyTimeStamp: 20120404103421.0Z, givenname=givenName: Bilbo, sn=sn: Baggins}

The ldap sync from the global properties is:

ldap.authentication.active=false
ldap.authenticatiion.java.naming.security.authentication=simple
ldap.authentication.userNameFormat=%s
ldap.authentication.allowGuestLogin-false
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://10.0.0.10:389
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.principal=admin@MiddleEarth.com
ldap.synchronization.java.naming.security.credentials=<password>
ldap.synchronization.queryBatchSize=1000
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(modifyTimestamp<\={0})))
ldap.synchronization.personQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp<\={0})))
ldap.synchronisation.groupQuery=(objectclass\=group)
ldap.synchronization.groupSearchBase=dc\=MiddleEarth,dc\=com
ldap.synchronization.userSearchBase=dc\=MiddleEarth,dc\=com
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.OZ'
ldap.synchronization.userIdAttributeName=sAMAcountName
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupType=group
ldap.synchronization.personType=user
ldap.synchronization.groupMemberAttributeName=member
synchronization.synchronizeChangesOnly=true
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Is the Attributename causing this issue?  This is a windows server if that helps?

Thanks

[afaust]

Hello,

it appears your LDAP does not have a sAMAccountName field. Could you provide a full example LDAP entry for a user / person? There might be alternatives that can be used, e.g. "uid".

Regards
Axel

[billyboy]

Thanks for the reply Alex

Spotted it!  Typo in the string only one c for sAMAccount, corrected that but now getting this:

ERROR [security.sync.ChainingUserRegistrySynchronizer] [Thread-1] Synchronization aborted due to error
org.alfresco.error.AlfrescoRuntimeException: 03120000 Failed to parse timestamp.

[billyboy]

Sorry Axel 🙂

Spotted something else too:
Caused by: java.text.ParseException: Unparseable date: "20120316053314.0Z"

[billyboy]

Sussed it, took the OZ part of the query in global properties, now works a treat!