Updating Alfresco with LDAP changes

[tkelly]

I was wondering if anyone has ever set up something to push changes only from LDAP to Alfresco?  We are going to have a very large user base and would like to avoid synching the whole thing up through batch jobs.

Would it be possible to use the Alfresco API to update users and roles via webscript/web service?

Any other ideas?

[mrogers]

Alfresco can pull details as required, you shouldn't need to worry.

There are web scripts available that can configure people and groups if you should feel the need to write your own push mechanism.   But you can't read the password directly from your LDAP server otherwise it would be a big security hole.

If the new 3.2 authentication and synchronisation sybsystems don't do what you need then I'd suggest your time would be better spent enhancing those rather than trying to work around them.

[tkelly]

Unfortunately, going live with 3.2 is not an option (and support told me the updated synch would be in 3.2 or 3.3). Either way, our client really does want near immediate response time in getting user permissions up-to-date.  Most of the work will be needed on LDAP team's side, for the Alf team its just a matter of providing Alfresco out of the box web scripts and possibly creating some new ones (to add or delete user from group).

With pushing users to Alfresco via webscripts, are we forced to provide a password in order to establish a user and enroll the user in groups?