Removing users from repository during LDAP-synchronization

[bernard]

Hello,

I've problem with Alfresco 4.2.c.
I'd like to ask one question to specialists.

We have LDAP-synchronization users and groups in Alfresco (FULL and Differential With Removals). Now if I remove user from AD and he have role Editor in different documents Alfresco, Alfresco can't remove it during synchronization.
There is string <strong>synchronization.allowDeletions=true</strong> in the properties of file default-synchronization.

Our developers of content in Alfresco say that is normally because user-Editor is attached to document in repository. And we should change editor on other real user (in AD) in this document, then Alfresco can remove it.

Is this normal situation for process removing users during AD-sinchronization in Alfresco?
Can I configure Alfresco for removing local users if they have different roles in documents?

Thank you for reply.

[mlagneaux]

Hi,

I think that's a normal situation. Your users are removed by Alfresco but, if a node has one of the removed users login in creator or modifier property, Alfresco is going to create a "ghost" user with this login.

Take a look at one of the removed users in the node browser. I think it will be empty : no email address, no last name, …

[bernard]

Hello,

Thank you for your reply.
If I look one of the removed user I can see attributes: email, last name..

I 'd like to ask also other question, is parametr <strong>true</strong> for string <strong>synchronization.allowDeletions</strong> remove only users that are not have roles in any documents ?   

[bernard]

Is that realy difficult question?

[bhavikp]

Hi Bernard,

A scheduled job triggers synchronization in differential with removals mode every 24 hours.

What is the value of your following properties.

synchronization.import.cron

[bernard]

Hi Bhavikp,

synchronization.import.cron=0 0/50 * * * ?
But I think, that's not the reason, I tried to use different parametres of synchronization (full or differential with removals).

[bhavikp]

ldap.synchronization.personDifferentialQuery

The query to select objects that represent the users to import that have changed since a certain time.