Moving Alfresco to new AD Domain after AD Migration

[mfischer]

Hey Folks,

today i have a very special question belonging to the AD integration of Alfresco. We're using ALF 3.2r on Ubuntu 8.04 Server, users are authenticated against a Active Directory Domain.

Due to fusing with another company we're going to migrate our Active Directory objects to a new forest were we'll have a own domain tree. All users have to be copied to the new domain including their SIDHistory (via MS ADMT). Does anyone know if Alfresco will accept users after the migration, if they were able to access it in the old domain? Are the groups working which are used for managing access rights in Share and Alfresco Web Client?

A usual MS Windows ressource would be accept them if the SIDHistory contains a SID which the ressource knowed before the migration.

Is there anyone who did this before?

And can the SIDHistory be cleaned after all users logged in as recommended by Microsoft to prevent a SID overflow? But if Alfresco doesn't use the SID this all wouldn't matter 

[mfischer]

Ok, just for testing i brought up a copy of the Alfresco-VM to the new domain and created a user whith the same userename as in the old domain - voila, it works. So i guess Alfresco works only with the sAMAccountName so the users haven't to be migrated. Creating them with their old usernames should do the trick.

Well, but now i run into another problem: the new company should use its own naming convention, so if all users get login names wich differ from the old ones they won't be able to login anymore. If Alfresco is configured to use the new OU structure and the new groups, the won't get their self modified dashboards after login. But Alf Share shouldn't be the problem, all access rights are granted via AD groups. But what's with the Alf Web Client, if there has anybody setted its own rights for workspaces?