Switch from AD LDAP authentication to local authentication keeping current users and history

[adautofernandes]

I'm going to migrate my Alfresco to the cloud and I have the task of removing authentication via AD LDAP for authentication.

I was looking for a way to do this in the database, but the Alfresco tables are quite complex. I still haven't been able to identify a way to perform this operation in the database. I saw that users and groups are in the database.

Is there a way to convert these users as if they were local users?

Is there any documentation on the tables and fields in the Alfresco database?

Thank you very much in advance!

[afaust]

You should rarely have to delve into the Alfresco database tables directly to do things like this. As such, there is no (public) documentation on the tables to not encourage people to try and modify these internals, and break their systems by doing so.

This this particular case, the users you have in Alfresco are already pretty much ready to go as regular users when LDAP-AD is disabled. The only thing you absolutely would have to do is assign each user a password. Theoretically, you should be able to deactivate/remove the LDAP-AD configuration (simplest way: remove it from authentication.chain property in alfresco-global.properties) and after a restart should be allowed to set new passwords for these users in the Share UI. If that does not work or you have a lot of users, you can use tools like the JavaScript Console to script the password allocation by using JavaScript-Java interoperability to access the call the createAuthentication operation on the MutableAuthenticationService interface.

[adautofernandes]

I tried to use your tips, unfortunately I couldn't. Explaining everything I've done.

In this new installation I did I disabled LDAP-AD authentication. When I checked the users, all accounts were disabled.
In the Share UI the password fields and the checkbox to activate the account are disabled even using the admin user.

I have no knowledge to use the JavaScript Console or Alfresco API. I tried to research more but I didn't see any practical example of how to use it.

Could you help me with some study material? Or without abusing too much what you should do.

Thanks in advance

[EddieMay]

Hi @adautofernandes,

Was your Share instance customised as part of LDAP integration? Look in <web-extension>\share-config-custom.xml to see if there are any modifications in this file. Also check the documentation on Form Customisation.

HTH,

[adautofernandes]

The only thing I customized in that file:

<config evaluator="string-compare" condition="CSRFPolicy" replace="true">
  <properties>
    <token>Alfresco-CSRFToken</token>
    <!-- Use the pipe | in the regex as OR operator: URL1|URL2|... -->
    <referer>https://alfresco.mydomain.com.br/.*</referer>
    <origin>https://alfresco.mydomain.com.br</origin>
  </properties>
</config>

I believe that it is not that.