Demande de renseignements pour configuration LDAP [RESOLU]

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

sergio1024

Bonjour,

Je teste actuellement Alfresco (package ubuntu) sous ubuntu server 9.10.

J'ai quelques questions….:

1.J'arrive à configurer LDAP, mais j'aimerai n'autoriser que des users membre d'un de mes groupes AD (GR_ALFRESCO)
la configuration doit se faire dans le "ldap-ad-authentication.properties" mais si quelqu'un peut m'expliquer la démarche…
car je ne sais pas la différence entre les paramètres :

# The query to select all objects that represent the groups to import.
ldap.synchronization.groupQuery=

# The query to select objects that represent the groups to import that have changed since a certain time.
ldap.synchronization.groupDifferentialQuery=(

# The query to select all objects that represent the users to import.
ldap.synchronization.personQuery=

# The query to select objects that represent the users to import that have changed since a certain time.
ldap.synchronization.personDifferentialQuery=

# The group search base restricts the LDAP group query to a sub section of tree on the LDAP server.
ldap.synchronization.groupSearchBase=dc\=domain,dc\=local

# The user search base restricts the LDAP user query to a sub section of tree on the LDAP server.
ldap.synchronization.userSearchBase=dc\=domain,dc\=local‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

sergio1024

Bonjour,

J'essaie de récupérer les users et goupes qui sont membres du groupe ALFRESCO.
Le groupe se trouve dans L'OU :
mondomaine.com
–site1 (OU)
—-Groups (OU)
——–ALFRESCO (groupe)

J'ai modifié le fichier ldap-ad-authentication.properties de la manière suivante :

# The query to select all objects that represent the groups to import.
ldap.synchronization.groupQuery=(&(objectclass\=group)(memberOf\=cn\=ALFRESCO,ou\=Groups,ou\=site1,dc\=mondomaine,dc\=com))

# The query to select objects that represent the groups to import that have changed since a certain time.
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(memberOf\=cn\=ALFRESCO,ou\=Groups,ou\=site1,dc\=mondomaine,dc\=com)(!(modifyTimestamp<\={0})))

# The query to select all objects that represent the users to import.
ldap.synchronization.personQuery=(&(objectclass\=user)(memberOf\=cn\=ALFRESCO,ou\=Groups,ou\=site1,dc\=mondomaine,dc\=com)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))

# The query to select objects that represent the users to import that have changed since a certain time.
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(memberOf\=cn\=ALFRESCO,ou\=Groups,ou\=site1,dc\=mondomaine,dc\=com)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp<\={0})))

# The group search base restricts the LDAP group query to a sub section of tree on the LDAP server.
ldap.synchronization.groupSearchBase=cn\=ALFRESCO,ou\=Groups,ou\=site1,dc\=mondomaine,dc\=com

# The user search base restricts the LDAP user query to a sub section of tree on the LDAP server.
ldap.synchronization.userSearchBase=memberOf\=cn\=ALFRESCO,ou\=Groups,ou\=site1,dc\=mondomaine,dc\=com


dans les logs j'ai l'erreure suivante : javax.naming.InvalidNameException: memberOf=cn=ALFRESCO,ou=Groups,ou=site1,dc=mondomaine,dc=com [LDAP: error code 34 - 0000208F: NameErr: DSID-031001BA, problem 2006 (BAD_NAME)


une idée ??