nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Issue getting LDAP to work with AD

scamby

I have setup an AD group named Alfresco which include the users I wish to be Alfresco users. After synchronization takes place the group shows up in Alfresco but the users do not. The users set to default as administrators are also not working. Here are my settings in alfresco-global.properties;

authentication.chain=alfrescoNtlm1:alfrescoNtlm,ldap1:ldap-ad
synchronization.synchronizeChangesOnly=false
ntlm.authentication.sso.enabled=false
ldap.authentication.allowGuestLogin=false
ldap.authentication.userNameFormat=%s@gracemg.com
ldap.authentication.java.naming.provider.url=ldap://192.16.1.2:389
ldap.authentication.defaultAdministratorUserNames=Administrator,alfresco,scamby,dhuggins
ldap.synchronization.java.naming.security.principal=administrator@gracemg.com
ldap.synchronization.java.naming.security.credentials=?????????
ldap.synchronization.groupSearchBase=CN\=Alfresco,OU\=Groups,DC\=Gracemg,DC\=com
ldap.synchronization.userSearchBase=CN\=Alfresco,OU\=Groups,DC\=Gracemg,DC\=com

I'm sure it probably is my SearchBase settings but I'm not sure.

Find more posts tagged with

Alfresco Content Services

Comments

jpotts

For groups, your search base should most likely be OU\=Groups,DC\=Gracemg,DC\=com while for people your search base should probably be OU\=People,DC\=Gracemg,DC\=com or something similar, but it depends on how your directory is structured.

A search base is essentially telling the LDAP client code "Start looking for objects under this branch".

scamby

Understood. Basically I just want to sync that group and it's members. No other groups or users need to be synced. Currently no users are being synced with the settings I have in the properties file.

Sent from Outlook<https://aka.ms/qtex0l> on my iPhone

jpotts

If you want to sync only the users that belong to a certain group, you can specify a person query.

Here are the docs that tell you all of the LDAP config properties that are available.

And here is an example personQuery that only grabs the members of a specific group:

ldap.synchronization.personQuery=(&(objectclass=user)(memberOf:1.2.840.113556.1.4.1941:=CN=SomeArbitraryGroup,OU=Groups,DC=someco,DC=com)(userAccountControl:1.2.840.113556.1.4.803:=512))

This assumes Active Directory, which is why the query contains those funky number dot sequences.

scamby

Still not working. Here is what the distinguished name for the group looks like;

CN=Alfresco,OU=Groups,DC=Gracemg,DC=com

Looking at LDAP I have;

So I changed the person query you mentioned to this;

ldap.synchronization.personQuery=(&(objectclass=user)(memberOf:1.2.840.113556.1.4.1941:=CN\=Alfresco,OU\=Groups,DC\=Gracemg,DC\=com)(userAccountControl:1.2.840.113556.1.4.803:=512))

I also tried this;

ldap.synchronization.personQuery=(&(objectclass=user)(memberOf:1.2.840.113556.1.4.1941:=OU\=Customer Service,DC\=Gracemg,DC\=com)(userAccountControl:1.2.840.113556.1.4.803:=512))

But I am still not getting any users to sync. No LDAP users are showing in Users under Admin Tools. The Alfresco group shows up but not any of the members;

image001.png

image002.png