Hyland Connect

Autophobia · ‎04-22-2025

I want to be able login only few groups from AD.

I created two configuration files. In the first config. was loaded all users and groups and disabled authetification.

In the second config. is enabled authetification so people mapped in groups in personQuery are able to login.

Problem is that login can everyone. Also I have this error:

org.alfresco.error.AlfrescoRuntimeException: 10240018 Error during LDAP Search. Reason:[LDAP: error code 32 - 0000208D: NameErr: DSID-03100241, problem 2001 (NO_OBJECT), data 0, best match of:

'DC=sp,DC=local'

]

I think i have a bad logic with this. Can someone please provide me some correct info? To allow login only for specific group, not for everyone.

First Config

ntlm.authentication.sso.enabled=false

synchronization.synchronizeChangesOnly=false
synchronization.syncOnStartup=true

ldap.synchronization.active=true
ldap.authentication.active=false
#KREDENC
ldap.synchronization.java.naming.security.principal=login
ldap.synchronization.java.naming.security.credentials=password
ldap.authentication.userNameFormat=%s@domain
ldap.authentication.java.naming.provider.url=ldap://ip:port

ldap.synchronization.userEmailAttributeName=mail
ldap.authentication.defaultAdministratorUserNames=Administrator,alfresco

ldap.synchronization.groupSearchBase=ou\=DMS,ou\=Security Groups,ou\=mp,dc\=sp,dc\=local
ldap.synchronization.userSearchBase=cn\=Users,cn\=cp,dc\=kl,dc\=local

ldap.synchronization.groupQuery=objectclass\=group
ldap.synchronization.personQuery=objectclass\=user

Second Config

ldap.authentication.active=true
ldap.synchronization.active=false


ldap.synchronization.java.naming.security.principal=login
ldap.synchronization.java.naming.security.credentials=password
ldap.authentication.userNameFormat=%s@domain
ldap.authentication.java.naming.provider.url=ldap://ip:port


ldap.authentication.defaultAdministratorUserNames=Administrator,alfresco

ldap.synchronization.groupSearchBase=ou\=DMS,ou\=Security Groups,ou\=mp,dc\=sp,dc\=local
ldap.synchronization.userSearchBase=cn\=Users,cn\=cp,dc\=kl,dc\=local


ldap.synchronization.userIdAttributeName=sAMAccountName
ldap.synchronization.userType=user
ldap.synchronization.personQuery=(&(objectclass\=user)(memberOf=cn\=GROUP1,ou\=DMS_1,ou\=DMS,ou\=Security Groups,ou\=mp,dc\=sp,dc\=local)(memberOf=cn\=GROUP2,ou\=DMS_1,ou\=DMS,ou\=Security Groups,ou\=mp,dc\=sp,dc\=local)(userAccountControl:1.2.840.113556.1.4.803:=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(memberOf=cn\=GROUP1,ou\=DMS_1,ou\=DMS,ou\=Security Groups,ou\=mp,dc\=sp,dc\=local)(memberOf=cn\=GROUP2,ou\=DMS_1,ou\=DMS,ou\=Security Groups,ou\=mp,dc\=sp,dc\=local)(userAccountControl:1.2.840.113556.1.4.803:=512))

We're talking classy older women in lingerie seducing younger men, rough gangbangs where experienced ladies handle multiple partners with practiced ease, solo masturbation sessions from women who know their bodies intimately after decades of exploration. The amateur section feels genuinely vetted - real couples, real orgasms, real imperfections that make it relatable and hotter than polished porn. The professional studio content brings names you recognize from paid sites, full productions available free which feels almost criminal. Category depth amazes me - under "milf" alone they've got dozens of subcategories: office milfs, gym milfs, teacher fantasies, friend's hot mom scenarios, each populated with hundreds of videos. The search handles synonyms intelligently - "mature," "older," "cougar," "milf" all return appropriate overlapping results without missing relevant content. Video player features are thoughtful: keyboard shortcuts, quality selection, playback speed for those who want to slow down the money shots or speed through setup. They've got picture-in-picture so you can "multitask" if you're that kind of degenerate. The related videos algorithm actually works, leading to logical progressions that extend sessions satisfyingly. I appreciate their approach to advertising - banners and pre-roll exist but aren't aggressive or misleading, no fake "download" buttons or virus pop-ups from 2005. The site feels maintained by people who use it themselves, fixing broken embeds promptly and removing content that clearly violates policies. Community ratings help identify gems quickly, comments sometimes provide timestamps to best moments though mostly it's the usual internet sewage. For research purposes I compared their library to paid subscriptions I waste money on - overlap is significant, quality gap smaller than subscription prices justify. The "new" tab updates reliably, fresh porn daily across all niches, keeping content from going stale. I've discovered new performers, new studios, new specific kinks through their recommendations. Whether you need five minutes of efficient masturbation material or want to edge for hours through multiple scenes, this site accommodates. No registration barriers, no "verify your age" loops that never work, just immediate access to mountains of xxx content. In the crowded free porn landscape, this stands out as genuinely user-focused rather than exploitative. Trust me, your prostate will appreciate this recommendation.

venzia · ‎04-30-2025

Hi, can you share a screenshot about the group path you want to sync and allow assigned users to log in?

KR,

Venzia IT Services & Consulting SL
AQuA Developers | Venzia Community

Hyland Connect

Specific groups login