Ldap Sync warning

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

billyboy

Me again 🙂

I get the following error at startup for ldap sync:

[sync.ldap.LDAPUserRegistry] [Thread-1] User returned by user search does not have mandatory user id attribute {mail=mail: Bilbo@MiddleEarth.com, modifytimestamp=modifyTimeStamp: 20120404103421.0Z, givenname=givenName: Bilbo, sn=sn: Baggins}

The ldap sync from the global properties is:

ldap.authentication.active=false
ldap.authenticatiion.java.naming.security.authentication=simple
ldap.authentication.userNameFormat=%s
ldap.authentication.allowGuestLogin-false
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://10.0.0.10:389
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.principal=admin@MiddleEarth.com
ldap.synchronization.java.naming.security.credentials=<password>
ldap.synchronization.queryBatchSize=1000
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(modifyTimestamp<\={0})))
ldap.synchronization.personQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp<\={0})))
ldap.synchronisation.groupQuery=(objectclass\=group)
ldap.synchronization.groupSearchBase=dc\=MiddleEarth,dc\=com
ldap.synchronization.userSearchBase=dc\=MiddleEarth,dc\=com
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.OZ'
ldap.synchronization.userIdAttributeName=sAMAcountName
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupType=group
ldap.synchronization.personType=user
ldap.synchronization.groupMemberAttributeName=member
synchronization.synchronizeChangesOnly=true
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Is the Attributename causing this issue?  This is a windows server if that helps?

Thanks

afaust

Hello,

it appears your LDAP does not have a sAMAccountName field. Could you provide a full example LDAP entry for a user / person? There might be alternatives that can be used, e.g. "uid".

Regards
Axel