nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

New User Default Home Space??

jayvrod

I finally got AD Auth setup.
When a User logs in for the first time. There User Home Space is being created in the Company Home instead of User Homes

I want it to go to User Homes or what ever.. What do I change to make this happen??

Also how do I give another User Admin Privileges??

Thanks
Jay

Find more posts tagged with

Comments

jey

Hi

In your file ldap-authentication-context.xml, you have a bean called ldapPeopleExportSource that defines this mapping between LDAP properties and Alfresco properties.

And in this bean you have something like that:

<entry key="cm:homeFolderProvider">
<value>personalHomeFolderProvider</value>
</entry>

This value makes references to an other bean defines in the file Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\authentication-services-context.xml

<bean name="personalHomeFolderProvider" class="org.alfresco.repo.security.person.UIDBasedHomeFolderProvider">
        <property name="serviceRegistry">
          <ref bean="ServiceRegistry" />
      </property>
        <property name="path">
           <value>/${spaces.company_home.childname}</value>
        </property>
        <property name="storeUrl">
           <value>${spaces.store}</value>
        </property>
        <property name="homeFolderManager">
         <ref bean="homeFolderManager" />
      </property>
        <property name="inheritsPermissionsOnCreate">
            <value>false</value>
        </property>
        <property name="ownerPemissionsToSetOnCreate">
            <set>
                <value>All</value>
            </set>
        </property>
        <property name="userPemissions">
            <set>
                <value>All</value>
            </set>
        </property>
    </bean>

The property path makes reference to /${spaces.company_home.childname}, the company home folder.
If you want users' home folders to be created in User Homes, you must replace it by: /${spaces.company_home.childname}/${spaces.user_homes.childname}

In this bean you can also defines user rights on their home folders….

About the admin question now:
This can't be done during this importation! You can specify who have admin privileges in the config file authority-services-context.xml (same path as before).

In the bean authorityService you have a property adminUsers. There you can defines as many administrators as you want by adding their user id.

<property name="adminUsers">
      <set>
            <value>admin</value>
            <value>administrator</value>
            <value>userid1</value>
            <value>userid2</value>
      </set>
</property>

Now you should be able to perform all you need!!!

Let me just give you some other advices:
   - first: users home folder won't change even if you modify the path in the config file. You must reset your all repository (database and indexes). When the import will be perform on the new repository, folder will be in the expected places.

   - seccond: PLEASE before posting read the forum!!!! I am sure there is many topic talking about this on this forum…. This time someone replied, but it won't allways be the same! JUST READ GUYS ….

I hope this help.

Regards,
jey.

stk137

So do I understand this correctly.
By default, there is a space for User Homes.
By default, Alfresco doesn't create new user homes there. (that was my experience, too, although with JAAS and LDAP instead of AD)

Doesn't that seem like a bug? The default should be put new user homes under User Homes, right?

You can't change this without editing the contents of alfresco.war?
Or is there something in extensions for setting those things in authority-services-context.xml?
I don't see anything for that in extensions.

jayvrod

Thanks jey

I searched the Forum, but just didn't find an answer..

But I agree.. with 2.0 the Default Home Folder for users is located in User Homes.

However if you use AD it dumps to the Company Home..
To me a Bug also…

Jay

Hi

In your file ldap-authentication-context.xml, you have a bean called ldapPeopleExportSource that defines this mapping between LDAP properties and Alfresco properties.

And in this bean you have something like that:
<entry key="cm:homeFolderProvider">
         <value>personalHomeFolderProvider</value>
   </entry>

This value makes references to an other bean defines in the file Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\authentication-services-context.xml

<bean name="personalHomeFolderProvider" class="org.alfresco.repo.security.person.UIDBasedHomeFolderProvider">
        <property name="serviceRegistry">
          <ref bean="ServiceRegistry" />
      </property>
        <property name="path">
           <value>/${spaces.company_home.childname}</value>
        </property>
        <property name="storeUrl">
           <value>${spaces.store}</value>
        </property>
        <property name="homeFolderManager">
         <ref bean="homeFolderManager" />
      </property>
        <property name="inheritsPermissionsOnCreate">
            <value>false</value>
        </property>
        <property name="ownerPemissionsToSetOnCreate">
            <set>
                <value>All</value>
            </set>
        </property>
        <property name="userPemissions">
            <set>
                <value>All</value>
            </set>
        </property>
    </bean>

The property path makes reference to /${spaces.company_home.childname}, the company home folder.
If you want users' home folders to be created in User Homes, you must replace it by: /${spaces.company_home.childname}/${spaces.user_homes.childname}

In this bean you can also defines user rights on their home folders….

About the admin question now:
This can't be done during this importation! You can specify who have admin privileges in the config file authority-services-context.xml (same path as before).

In the bean authorityService you have a property adminUsers. There you can defines as many administrators as you want by adding their user id.

<property name="adminUsers">
      <set>
            <value>admin</value>
            <value>administrator</value>
            <value>userid1</value>
            <value>userid2</value>
      </set>
</property>

Now you should be able to perform all you need!!!

Let me just give you some other advices:
   - first: users home folder won't change even if you modify the path in the config file. You must reset your all repository (database and indexes). When the import will be perform on the new repository, folder will be in the expected places.

   - seccond: PLEASE before posting read the forum!!!! I am sure there is many topic talking about this on this forum…. This time someone replied, but it won't allways be the same! JUST READ GUYS ….

I hope this help.

Regards,
jey.

andy

Hi

Users created outside LDAP import and the UI are made according to the default home folder provider. This will be used when auto-creating user via NTLM.

See http://wiki.alfresco.com/wiki/Security_and_Authentication#Creating_home_spaces_-_from_1.4_onwards and the the config file authentication-services-context.xml from which you probably want to over-ride the bean …

  <bean name="homeFolderManager" class="org.alfresco.repo.security.person.HomeFolderManager">
        <property name="nodeService">
            <ref bean="nodeService" />
        </property>
        <property name="policyComponent">
            <ref bean="policyComponent" />
        </property>
        <property name="defaultProvider">
            <!– Create people in company home
            <ref bean="personalHomeFolderProvider" />
            –>
            <ref bean="userHomesHomeFolderProvider" />
        </property>
    </bean>

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Also see http://issues.alfresco.com/browse/AR-1558

Andy

stk137

Hi

Users created outside LDAP import and the UI are made according to the default home folder provider. This will be used when auto-creating user via NTLM.
…
Also see http://issues.alfresco.com/browse/AR-1558

Andy

I am having difficulties with this work around.
In this database I inherited, there's "user_spaces" instead of "user_homes"
So I tried

/${spaces.company_home.childname}/${spaces.user_spaces.childname}

but got an error on login (with new user from JAAS)

javax.faces.FacesException: Error calling action method of component with id loginForm:submit
caused by:
javax.faces.el.EvaluationException: Exception while invoking expression #{LoginBean.login}
caused by:
org.alfresco.service.cmr.repository.XPathException: Error executing xpath:
xpath: /app:company_home/${spaces.user_spaces.childname}
caused by:
org.jaxen.XPathSyntaxException: Expected one of '.', '..', '@', '*', <QName>
caused by:
class org.jaxen.saxpath.XPathSyntaxException: /app:company_home/${spaces.user_spaces.childname}: 18: Expected one of '.', '..', '@', '*', <QName>

‍‍‍‍‍‍‍‍‍‍‍‍‍

So I tried adding "user_homes" (under company_home) and then used what you had said

/${spaces.company_home.childname}/${spaces.user_homes.childname}

but got this error after logging in

javax.faces.FacesException: Error calling action method of component with id loginForm:submit
caused by:
javax.faces.el.EvaluationException: Exception while invoking expression #{LoginBean.login}
caused by:
java.lang.IllegalStateException: Non-unique path: found : /app:company_home/app:user_homes 0‍‍‍‍‍‍

I deleted user_homes and left the path the same, but still got the non-unique path error.
(Although I thought it was returning multiple but now I think it was returning none)

I am little confused about what these expressions and paths are supposed to be. I was trying to find stuff in the database, to figure it out, but I am not sure where "path" is stored. In the case of "company_home", the name and title in alf_properties was changed to "Content Home", but where's the path that still equals "company_home"?
Anyway, how do I determine what to put there to get user_spaces to work? or to make make user_spaces work like your user_homes?

FWIW here's what my user_spaces node says in the browser

Primary Path:   /{http://www.alfresco.org/model/application/1.0}company_home/{http://www.alfresco.org/model/content/1.0}user_spaces
Reference:   workspace://SpacesStore/ca52e0dc-80d5-11db-b31e-bb584255ad7e
Type:   {http://www.alfresco.org/model/content/1.0}folder
Parent:    workspace://SpacesStore/3c2c673d-7902-11db-8697-e79e4834e0e9

BTW My main concern with the workaround (assuming I get it to work, is that I have to edit inside the WAR. Is it possible to just put a copy of this xml file in extensions and just make the changes there?

thanks

Steve

stk137

Anyway, how do I determine what to put there to get user_spaces to work? or to make make user_spaces work like your user_homes?

alternatively, how do I properly create a user_homes folder when there's not one?

stk137

Anyway, how do I determine what to put there to get user_spaces to work? or to make make user_spaces work like your user_homes?

alternatively, how do I properly create a user_homes folder when there's not one?

If someone can answer that you can ignore my longer message.

I got my user_spaces working with path=/app:company_home/cm:user_spaces, but I'd like to know how to create the /app:user_homes folder. I see that may solve our problem of wanting to change the display name in the navigator (in the bootstrap property file).

thanks,

Steve

andy

Hi

The user folder is created at bootstrap time only. We can not make this in a patch as there may be a name collision with existing folders. If you have an older set up you will probably want to stick with the structure.

You could create this folder by exporting the folder from a new Alfresco instance and importing it into your existing server. You can not create this folder from the UI (as it uses the app namespace and not cm)

Andy

warren_h

Hi

Users created outside LDAP import and the UI are made according to the default home folder provider. This will be used when auto-creating user via NTLM.

See http://wiki.alfresco.com/wiki/Security_and_Authentication#Creating_home_spaces_-_from_1.4_onwards and the the config file authentication-services-context.xml from which you probably want to over-ride the bean …

Andy

Editing /opt/alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml
works fine. But my attempts at creating this file /opt/alfresco/tomcat/shared/classes/alfresco/extension/custom-authentication-services-context.xml
only end up breaking login. My latest attempt looks like this :

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>

<beans>

    <bean id="authenticationComponent" class="org.alfresco.repo.security.authentication.AuthenticationComponentImpl">
        <property name="authenticationDao">
            <ref bean="authenticationDao" />
        </property>
        <property name="authenticationManager">
            <ref bean="authenticationManager" />
        </property>
        <property name="allowGuestLogin">
            <value>false</value>
        </property>
    </bean>

    <bean name="homeFolderManager" class="org.alfresco.repo.security.person.HomeFolderManager">
        <property name="nodeService">
            <ref bean="nodeService" />
        </property>
        <property name="policyComponent">
            <ref bean="policyComponent" />
        </property>
        <property name="defaultProvider">
            <ref bean="companyHomeFolderProvider" />
        </property>
    </bean>

</beans>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

But it just doesn't work. How should I be doing this?

Thanks,

Warren.

andy

Hi

There is no need to define the authentication component again - and it will break NLTM as it redefines the same bean.

Just add the changes to the homeFolderManager bean.

Andy

fogo

Hi

Is there a way to configure the ldap person import so that it does not create a space for each user it imports?

hodsons

I am interested how to set it up not to create the user home folders as well. In the meantime, I have about 600 user home folders in out company home space.

How can I delete all of these spaces?

Thanks,
Steve

andy

Hi

Yes, it can be configured to use a homeFolderProvider that uses a shared folder - there are examples for company home and guest home in the config.

Andy

eron123

I am running 2.1 with LDAP authorization. In order to get user homes to show up in the "User Homes" space, I did the following (rather than change to the personalHomeFolderProvider).

1. in ldap-authentication-context.xml:

    <property name="attributeDefaults">
            <map>
                <entry key="cm:homeFolderProvider">
                    <value>userHomesHomeFolderProvider</value>
                </entry>
            </map>
        </property>

2. in the unzipped alfresco.war, I modified the WEB-INF/classes/alfresco/authentication-services-context.xml file:

   <bean name="homeFolderManager" class="org.alfresco.repo.security.person.HomeFolderManager">
        <property name="nodeService">
            <ref bean="nodeService" />
        </property>
        <property name="policyComponent">
            <ref bean="policyComponent" />
        </property>
        <property name="defaultProvider">
            <ref bean="userHomesHomeFolderProvider" />
        </property>
    </bean>

I hadn't seen anyone else post that second piece, and I believe it was required in our environment.