Hi Boris,
many thanks for your reply. I did what you suggested about properties rows but it still not works, my AD user is marked as disabled.
Just to be sure I did it well here is the new properties file:
### Authentication ###
authentication.chain=alfinst:alfrescoNtlm,ldap1:ldap-ad
ntlm.authentication.sso.enabled=false
ldap.authentication.defaultAdministratorUserNames=admin
ldap.authentication.active=true
ldap.synchronization.java.naming.security.authentication=simple
ldap.authentication.userNameFormat=%s@pam.local
ldap.authentication.allowGuestLogin=false
ldap.authentication.java.naming.security.authentication=SIMPLE
ldap.authentication.java.naming.read.timeout=30000
ldap.authentication.java.naming.provider.url=ldap://…:389
### LDAP Synchronization ###
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.principal=…@pam.local
ldap.synchronization.java.naming.security.credentials=…
ldap.synchronization.groupSearchBase=OU\=Sistemi Informativi,OU\=GRUPPO PAM,DC\=pam,DC\=local
ldap.synchronization.userSearchBase=OU\=Sistemi Informativi,OU\=GRUPPO PAM,DC\=pam,DC\=local
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'
ldap.synchronization.userIdAttributeName=sAMAccountName
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProvider
ldap.synchronization.personType=user
ldap.synchronization.enableProgressEstimation=true
ldap.authentication.defaultAdministratorUserNames=admin
Just one doubt: what did you mean with:
"Have you setup the service accout appropriete?"
Thanks again,
Marco