As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.
tengo el mismo problema.
agregue un atributo en mi freeipa llamado "AlfescoService" el cual quiero manejar como 0= denegado y 1= Permitido para qeu le de acceso al portal de alfresco.. como puedo hacer que este se permita?
hasta el momento este es mi query en global.properties y permite el inicio de sesion ya sea que tenga el parametro 0 o 1.
#LDAP Auth#authentication.chain=alfinst:alfrescoNtlm,ldap1:ldap-adauthentication.chain=ldap2:ldap,ldap1:ldap,alfinst:alfrescoNtlmldap.authentication.allowGuestLogin=falseldap.authentication.active=trueldap.authentication.java.naming.provider.url=ldap://cipa.domain.nlc:389ldap.authentication.userNameFormat=uid=%s,cn=users,cn=accounts,dc=domain,dc=nlc
###LDAP Syncldap.synchronization.active=trueldap.synchronization.java.naming.security.principal=uid=admin,cn=users,cn=accounts,dc=domain,dc=nlcldap.synchronization.java.naming.security.credentials=123456789ldap.synchronization.groupQuery=(objectclass=groupOfUniqueNames)#ldap.synchronization.groupQuery=objectclass\=groupldap.synchronization.personQuery=(objectclass=(AlfescoService=1))#ldap.synchronization.personQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(|(memberOf=cn\=alfrescoadmins,cn=groups,cn=accounts,dc=domain,dc=nlc)(memberOf=cn\=alfrescousers,cn=groups,cn=accounts,dc=domain,dc=nlc)))ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(|(memberOf=cn\=alfrescoadmins,cn=groups,cn=accounts,dc=domain,dc=nlc)(memberOf=cn\=alfrescousers,cn=groups,cn=accounts,dc=domain,dc=nlc))(!(modifyTimestamp<\={0})))ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!modifyTimestamp<\={0}))#este es el correcto #ldap.synchronization.groupSearchBase=cn=groups,cn=accounts,dc=domain,dc=nlc#ldap.synchronization.groupSearchBase=cn=alfrescousers,cn=groups,cn=accounts,dc=domain,dc=nlcldap.synchronization.userSearchBase=cn=users,cn=accounts,dc=domain,dc=nlcldap.synchronization.userIdAttributeName=UserIDldap.synchronization.userLastNameAttributeName=LastNameldap.synchronization.userEmailAttributeName=Emailaddressldap.synchronization.groupIdAttributeName=cnldap.synchronization.groupDisplayNameAttributeName=cnldap.synchronization.groupType=groupOfUniqueNamesldap.synchronization.personType=inetOrgPersonldap.synchronization.groupMemberAttributeName=uniqueMembersynchronization.syncOnStartup=truesynchronization.import.cron=0 0 0 * * ?
