cancel
Showing results for 
Search instead for 
Did you mean: 

Solved -Alfresco 4.0d LDAP groups not synced

vikramsra
Champ in-the-making
Champ in-the-making
Hi All,

I am done with the ldap integration and all my users can login now but a problem again only users of one ou are avaliable in the user section of alfresco. But once the user from other ou logs in i can see them also. But no group has been syncd. my config file is


ldap.authentication.active=true
ldap.authentication.allowGuestLogin=true
ldap.authentication.userNameFormat=
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://ip:389
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.defaultAdministratorUserNames=
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.authentication=simple
ldap.synchronization.java.naming.security.principal=uid=noreply,ou=Admin,ou=staff,dc=example,dc=com
ldap.synchronization.java.naming.security.credentials=password
ldap.synchronization.queryBatchSize=0
ldap.synchronization.attributeBatchSize=0
#ldap.synchronization.groupQuery=(objectclass\=groupOfNames)
ldap.synchronization.groupQuery=(objectclass\=inetOrgPerson)
#ldap.synchronization.groupDifferentialQuery=(&(objectclass\=groupOfNames)(!(modifyTimestamp<\={0})))
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=inetOrgPerson)(!(modifyTimestamp<\={0})))
ldap.synchronization.personQuery=(objectclass\=inetOrgPerson)
ldap.synchronization.personDifferentialQuery=(&(objectclass\=inetOrgPerson)(!(modifyTimestamp<\={0})))
ldap.synchronization.groupSearchBase=dc=example,dc=com
ldap.synchronization.userSearchBase=dc=example,dc=com
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'
ldap.synchronization.userIdAttributeName=uid
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=o
ldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProvider
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupDisplayNameAttributeName=description
#ldap.synchronization.groupType=groupOfNames
ldap.synchronization.groupType=inetOrgPerson
ldap.synchronization.personType=inetOrgPerson
ldap.synchronization.groupMemberAttributeName=member
ldap.synchronization.enableProgressEstimation=true

i have changed the group object class from groupOfnames to inetOrgPerson because in my ldap that is the object class. Please help me in this.

Thanks in advance.
5 REPLIES 5

vikramsra
Champ in-the-making
Champ in-the-making
no reply  :cry:

santoshbaradwaj
Champ in-the-making
Champ in-the-making
Hi vikramsra….

I am also trying to configuring the ldap with my alfresco 4.0. But i am facing problem wit the "ldap-authentication-context" file.


can you please tell me the steps what you have followed and also share the files which you have modified.

thanks in advance.

vikramsra
Champ in-the-making
Champ in-the-making
you can use the above given script it will work fine for you or just send the logs

vikramsra
Champ in-the-making
Champ in-the-making
Problem with ldap attribute worked like charm

karan27
Champ in-the-making
Champ in-the-making
In apache directory studio i have made users and group but dont know how to integrate it with alfresco.