cancel
Showing results for 
Search instead for 
Did you mean: 

how can i capture the event of a user being added as part of an AD LDAP synch?

dbiggins
Star Contributor
Star Contributor

I know that I can capture the event of a user being manually added to Alfresco though the Admin Tools page in Share by auditing for a PathMap source of "/alfresco-api/post/PersonService/createPerson".

Users are typically added by an AD LDAP synchronization, however, and I can't see what event is being triggered.

An Alfresco user IS getting created after a synch.  Should I be looking for something else, like membership add to a group? 

I am setting the log setting of 'org.alfresco.repo.audit.inbound' to DEBUG, but am not seeing anything for that user.  Any other log settings to try?

Thanks All!

1 ACCEPTED ANSWER

afaust
Legendary Innovator
Legendary Innovator

The same kind of API is also used during synchronisation, e.g. createPerson call is being made. Unfortunately, the person service is used in such a way that Auditing is circumvented in this use case (by using "personService" bean reference instead of "PersonService").

You could still react to the event of a person being created by using a policy which is unaffected by the choice of bean reference. A policy can be used to record your own data for Auditing. That is e.g. the way that alfresco-access works.

View answer in original post

11 REPLIES 11

afaust
Legendary Innovator
Legendary Innovator

I wasn't *sigh*ing because of your problem - I was just reminded how Alfresco is sometimes adding features with only a narrow-minded view on fixing some issue, without considering the implications on other users, e.g. like yourself, that get hit with side-effects that are neither documented nor in any way easily understandable unless you look into the core code...

dbiggins
Star Contributor
Star Contributor

Axel,

Thanks very much!

I will a pursue behavior / policy mod that logs the event of an account being created.

Thanks also for the heads-up on the alfresco-access audit application: I will try to see how they are writing to the audit trail, as it would be ideal to have all of the audited events in one location.